Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B9D45894538411F1BAAAFCB4CE1D38B0.roa
File: B9D45894538411F1BAAAFCB4CE1D38B0.roa (raw, json)
Hash identifier: mOOV5+p/6XFIusBHeYnLbsc2PCGycYTSyuy3i23MqB4=
Subject key identifier: B0:C4:6A:FD:8E:F8:2E:C6:FC:7A:53:0A:78:01:A4:49:D9:B9:BE:06
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1F5A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B9D45894538411F1BAAAFCB4CE1D38B0.roa
Signing time: Tue 19 May 2026 13:14:56 +0000
ROA not before: Tue 19 May 2026 13:14:46 +0000
ROA not after: Fri 19 May 2028 13:14:46 +0000
asID: 13213
IP address blocks: 154.16.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 21 May 2026 11:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8026 (0x1f5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 19 13:14:46 2026 GMT
Not After : May 19 13:14:46 2028 GMT
Subject: CN=6a0c6250-bce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f1:b3:0d:f3:55:65:54:72:32:3c:bb:2d:13:
b4:77:7f:1b:ff:2e:f8:6f:d8:e4:44:9d:03:dd:24:
6b:88:aa:2d:84:d3:68:67:93:3b:ce:f4:b3:7f:0a:
99:b1:2e:85:b0:9b:32:07:ed:cc:9b:30:7e:86:8d:
9c:37:c6:bb:5a:34:9d:a1:38:6c:e2:4e:b4:16:87:
c0:73:3d:1a:6d:e5:2c:1f:40:50:b3:27:bd:16:90:
b3:5c:70:a2:9d:cd:ce:9e:87:17:cd:34:0b:db:41:
d0:0c:47:1a:50:b0:42:b8:8b:7d:8b:f1:82:f0:60:
4c:93:22:7c:d9:2b:22:f0:40:8a:82:71:1f:b8:b6:
09:52:6b:c0:ae:5d:1e:e2:a6:fc:bf:c0:c2:55:fb:
0f:ad:cc:eb:9b:09:22:39:50:5e:7d:ed:cd:9b:50:
e5:bf:99:82:02:d1:d1:7e:bc:21:f9:a8:df:06:55:
da:a3:3a:b7:b3:b2:e4:df:5f:ab:b4:5f:5e:f0:4d:
c0:aa:66:42:df:09:72:cd:1e:da:66:56:fc:94:c9:
b6:30:d7:aa:2d:11:f0:4e:80:7d:4f:74:e7:9c:b5:
85:36:dc:58:e9:96:28:75:94:ce:24:8b:2e:d2:f6:
47:aa:cf:29:14:2d:bd:b0:bb:7c:2a:66:43:69:1f:
a4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C4:6A:FD:8E:F8:2E:C6:FC:7A:53:0A:78:01:A4:49:D9:B9:BE:06
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B9D45894538411F1BAAAFCB4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.251.0/24
Signature Algorithm: sha256WithRSAEncryption
52:c7:00:66:dc:9e:23:42:cd:5d:f9:68:bc:fb:08:ae:27:a8:
4d:ee:4f:04:a1:72:53:06:7f:92:ba:d1:d5:41:f6:19:e5:2c:
eb:d9:51:84:d5:ab:01:3c:d2:e2:af:c0:7a:4c:76:42:14:3a:
5b:5b:4f:63:44:5f:52:74:72:17:8b:a9:87:94:a0:5c:2a:2f:
43:62:a7:40:76:92:63:6a:e4:c1:e5:8f:4c:c8:9b:d1:19:a4:
6a:73:94:75:0b:bc:bf:d1:01:22:41:c3:d0:8b:fd:c2:e7:f2:
d0:10:07:dc:cb:99:64:63:ea:71:5e:ba:26:a1:07:be:3a:d5:
d9:f0:ad:aa:03:13:a5:79:5b:7d:97:0a:26:1d:ab:40:b6:3b:
d0:83:e3:15:01:a5:44:d6:57:45:86:14:2a:6b:83:eb:26:ea:
99:67:83:e7:42:81:0a:9c:d8:8b:d5:24:1f:26:b2:05:0a:df:
48:45:05:35:74:37:65:aa:45:e6:92:c0:1d:04:ff:13:c5:2f:
27:97:43:1e:2c:97:e0:53:b7:f0:56:c3:24:3c:93:1c:73:71:
9a:20:5f:a3:e6:9c:4d:55:c2:d6:e2:87:8e:95:7b:10:9a:b2:
22:de:66:67:2a:04:2d:23:f9:52:57:5e:aa:a8:36:40:7b:fa:
cf:bc:e7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 19:57:26 2026 by rpki-client