Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B1EA0AB090E311F1AC75B9E3CE1D38B0.roa
File: B1EA0AB090E311F1AC75B9E3CE1D38B0.roa (raw, json)
Hash identifier: bBEhj8CBpCGVfaKpbmnGkJHFxGS04/4xiusOACLwKtY=
Subject key identifier: 56:E7:A5:97:5A:52:E5:CA:F2:7E:CA:6D:8D:7E:07:C1:8E:47:93:8D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 20CA
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B1EA0AB090E311F1AC75B9E3CE1D38B0.roa
Signing time: Wed 05 Aug 2026 15:38:24 +0000
ROA not before: Wed 05 Aug 2026 15:38:21 +0000
ROA not after: Sat 05 Aug 2028 15:38:21 +0000
asID: 402265
IP address blocks: 154.16.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Aug 2026 00:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8394 (0x20ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 5 15:38:21 2026 GMT
Not After : Aug 5 15:38:21 2028 GMT
Subject: CN=6a7358f0-d5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:4f:f5:d3:84:79:40:da:80:35:30:a4:67:
9b:71:bd:5a:7f:a3:03:1f:86:d9:d4:c0:79:d4:64:
14:33:c9:5c:4a:f7:aa:d8:99:cd:df:89:88:8e:e6:
e7:2e:5b:56:0b:71:d0:3d:7f:6a:c7:a5:a7:20:1f:
62:65:86:d1:b2:85:17:52:9b:bd:73:fe:27:c7:7e:
a9:fb:8a:46:b9:a3:f1:4d:c2:8c:41:82:34:47:6e:
37:e9:f5:78:5c:ad:bd:7e:3f:b4:3e:ca:4b:42:81:
e4:a5:61:69:ec:80:a8:e7:dc:09:58:42:0d:3b:64:
d8:78:59:d2:19:60:da:49:9b:b5:bb:44:5a:87:e4:
32:71:f2:74:e3:e0:09:75:36:c6:a5:84:96:77:b0:
24:90:f2:5e:0a:43:59:b4:f3:91:30:c3:84:30:64:
49:ba:44:fa:1b:6f:86:0f:c9:3d:06:85:49:1a:4f:
94:50:01:b4:7b:0a:9f:57:c4:4a:13:3e:47:20:ad:
45:5c:f3:96:4d:49:b7:76:3f:5f:f3:81:f0:20:5a:
ae:cc:fe:ed:19:d4:e5:ad:37:14:ff:08:c8:da:80:
9f:88:98:78:64:39:75:e1:33:ea:3a:20:72:4f:d2:
30:36:3a:b8:21:4e:c7:45:bc:43:e9:64:ee:e7:e7:
63:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E7:A5:97:5A:52:E5:CA:F2:7E:CA:6D:8D:7E:07:C1:8E:47:93:8D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B1EA0AB090E311F1AC75B9E3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.208.0/24
Signature Algorithm: sha256WithRSAEncryption
77:59:a6:23:5d:fa:85:c2:19:90:f4:e6:ae:85:32:5c:b1:77:
36:bf:3a:fa:87:31:e3:16:47:c7:45:41:f2:d1:50:ad:f4:12:
77:9c:2c:52:14:ee:82:f2:f8:e4:43:61:4f:56:20:4f:16:29:
a2:42:69:5a:d5:7f:82:cb:21:15:a5:f4:35:58:3b:0d:bc:4f:
9e:58:64:4e:f8:ad:fa:f0:87:82:f9:ff:fc:58:71:c1:12:7e:
cc:ba:1d:62:d0:3d:43:da:24:39:29:9d:b4:dc:54:07:4c:42:
0e:bf:ab:fb:ec:8c:c2:f9:62:73:e9:e4:db:a0:27:d4:6b:47:
50:c0:d2:77:f0:c3:d2:0b:9d:7d:1c:ef:a2:da:92:a2:5b:cd:
43:0c:a9:a2:f0:af:4a:87:bf:eb:88:a4:1b:91:54:14:10:5b:
68:de:f8:00:49:b9:14:3d:4c:10:de:44:50:82:46:b2:62:6d:
13:35:c6:8a:68:b4:17:b2:c9:19:ce:a1:99:0a:0c:fb:16:14:
af:a1:df:32:64:5d:71:ae:d5:19:af:d5:b0:c2:27:60:fc:eb:
76:40:82:da:bf:80:96:c0:56:96:36:e4:01:7a:ed:53:c3:b8:
2a:36:e5:14:b6:e0:0e:f9:40:99:ce:76:57:eb:35:17:90:f8:
a0:79:0e:19
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICIMowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjA4MDUxNTM4MjFaFw0yODA4MDUxNTM4MjFaMBgxFjAU
BgNVBAMTDTZhNzM1OGYwLWQ1YWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC160/104R5QNqANTCkZ5txvVp/owMfhtnUwHnUZBQzyVxK96rYmc3fiYiO
5ucuW1YLcdA9f2rHpacgH2JlhtGyhRdSm71z/ifHfqn7ika5o/FNwoxBgjRHbjfp
9Xhcrb1+P7Q+yktCgeSlYWnsgKjn3AlYQg07ZNh4WdIZYNpJm7W7RFqH5DJx8nTj
4Al1NsalhJZ3sCSQ8l4KQ1m085Eww4QwZEm6RPobb4YPyT0GhUkaT5RQAbR7Cp9X
xEoTPkcgrUVc85ZNSbd2P1/zgfAgWq7M/u0Z1OWtNxT/CMjagJ+ImHhkOXXhM+o6
IHJP0jA2OrghTsdFvEPpZO7n52PRAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUVuel
l1pS5cryfsptjX4HwY5Hk40wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0IxRUEwQUIwOTBFMzExRjFBQzc1QjlFM0NFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaENAwDQYJKoZIhvcNAQEL
BQADggEBAHdZpiNd+oXCGZD05q6FMlyxdza/OvqHMeMWR8dFQfLRUK30EnecLFIU
7oLy+ORDYU9WIE8WKaJCaVrVf4LLIRWl9DVYOw28T55YZE74rfrwh4L5//xYccES
fsy6HWLQPUPaJDkpnbTcVAdMQg6/q/vsjML5YnPp5NugJ9RrR1DA0nfww9ILnX0c
76LakqJbzUMMqaLwr0qHv+uIpBuRVBQQW2je+ABJuRQ9TBDeRFCCRrJibRM1xopo
tBeyyRnOoZkKDPsWFK+h3zJkXXGu1Rmv1bDCJ2D863ZAgtq/gJbAVpY25AF67VPD
uCo25RS24A75QJnOdlfrNReQ+KB5Dhk=
-----END CERTIFICATE-----
Generated at Wed Aug 5 22:58:10 2026 by rpki-client