Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B1009BEE5D8711F1BC76B2B0CE1D38B0.roa
File: B1009BEE5D8711F1BC76B2B0CE1D38B0.roa (raw, json)
Hash identifier: aa+iGhmQcz74lsvLng1AX0+M65OXpwKkjY/OA3WJMg8=
Subject key identifier: 0C:D9:E0:B0:74:5B:40:04:C2:50:EB:BC:FC:4F:2C:C3:F0:38:7A:36
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1F93
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B1009BEE5D8711F1BC76B2B0CE1D38B0.roa
Signing time: Mon 01 Jun 2026 07:01:20 +0000
ROA not before: Mon 01 Jun 2026 07:01:15 +0000
ROA not after: Thu 01 Jun 2028 07:01:15 +0000
asID: 834
IP address blocks: 154.16.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 03 Jun 2026 10:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8083 (0x1f93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 1 07:01:15 2026 GMT
Not After : Jun 1 07:01:15 2028 GMT
Subject: CN=6a1d2e40-ee33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f7:65:75:48:8d:dc:78:6a:4a:ad:6d:de:ff:
d5:ec:92:62:a9:1f:c1:f0:24:90:c4:1f:e7:02:75:
8c:26:3d:b8:e9:e5:42:30:49:5c:5b:8b:1a:19:64:
96:e4:47:a5:98:b4:b1:ba:db:7e:de:ee:83:56:76:
e3:b3:8d:27:5c:52:4c:65:88:7c:da:d5:33:d1:bd:
62:ef:3e:2c:da:8a:63:15:96:8e:cc:01:0c:33:49:
a9:39:14:8a:96:39:cd:9c:ce:aa:0b:84:93:07:07:
37:7b:a6:19:de:68:66:63:08:ad:fe:91:17:ff:a4:
2f:b6:ba:9f:24:5a:2a:3e:4c:cd:00:7b:fc:bd:0f:
17:ca:b8:3b:2b:b5:3e:77:3d:e1:57:98:46:40:54:
83:1c:23:77:ff:34:6e:56:3a:f9:74:53:f1:70:2d:
77:d8:b2:e2:f1:73:76:74:69:f8:ae:67:47:de:14:
63:02:19:b9:f3:69:1b:61:25:06:79:25:20:0e:15:
76:3a:75:a3:93:cd:a2:b8:6d:96:3e:88:8d:83:b6:
3d:c0:5c:f2:41:02:74:5c:8c:d6:c2:2d:d5:3e:c4:
d1:01:ee:69:50:29:a6:f0:25:6e:84:d7:98:83:2c:
de:db:b5:66:55:d0:34:09:95:c8:e5:76:ef:16:6b:
e0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D9:E0:B0:74:5B:40:04:C2:50:EB:BC:FC:4F:2C:C3:F0:38:7A:36
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B1009BEE5D8711F1BC76B2B0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.82.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:de:2c:40:55:d5:19:e8:b9:a4:98:24:92:8e:f2:d0:b2:13:
13:92:9e:3d:09:6a:92:e9:e4:9b:92:14:7b:03:95:80:7c:a9:
7a:a8:8d:8b:94:c0:c2:c0:e0:30:75:1c:da:17:44:9b:f3:ef:
9c:1d:01:39:e1:33:9c:4e:e8:0e:a1:25:97:5f:25:59:94:ee:
f9:95:d4:f5:39:e7:f8:a3:61:89:86:3c:d2:de:b1:1b:47:9e:
b6:92:0c:7f:6b:ea:a9:75:59:05:9a:24:ea:31:af:b5:dc:d3:
06:82:6e:4a:f4:82:eb:5a:45:e5:22:d4:fb:a5:6e:d7:4c:64:
09:66:ef:2c:b2:6b:d4:0c:25:be:2c:14:4e:08:cc:fc:35:f4:
50:a4:ba:8f:d7:7a:86:65:c3:8a:39:88:34:05:9f:26:9f:03:
5d:6f:83:df:33:58:44:89:22:14:01:ec:57:67:fc:c1:cb:46:
49:63:9e:f0:c2:5e:e1:e2:58:ac:3a:51:b5:3a:86:b4:b8:44:
90:a0:0d:9c:b0:bf:0f:98:04:ab:bb:6b:db:3b:59:f9:f9:c1:
dc:9e:dc:09:a9:7f:aa:89:0a:e3:a4:16:0e:73:c7:df:7b:de:
e1:28:db:45:13:b5:36:8b:94:94:59:24:eb:c2:80:ab:14:1c:
07:29:7f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 02:59:43 2026 by rpki-client