Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B9D9E6907DDE11F1900208C2CE1D38B0.roa
File: B9D9E6907DDE11F1900208C2CE1D38B0.roa (raw, json)
Hash identifier: 0/3EtNapLvBdplLaAePzcZ8V9TCB9sEs76hC0cGUudc=
Subject key identifier: 3C:B4:07:2B:5D:04:D0:B4:FE:02:DE:21:62:23:99:39:2F:C3:E5:EF
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 2053
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B9D9E6907DDE11F1900208C2CE1D38B0.roa
Signing time: Sun 12 Jul 2026 10:44:58 +0000
ROA not before: Sun 12 Jul 2026 10:44:54 +0000
ROA not after: Wed 12 Jul 2028 10:44:54 +0000
asID: 834
IP address blocks: 154.16.70.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 14 Jul 2026 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8275 (0x2053)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 12 10:44:54 2026 GMT
Not After : Jul 12 10:44:54 2028 GMT
Subject: CN=6a53702a-fe09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0d:5c:7d:c7:32:91:08:98:3a:10:31:10:ff:
87:a0:46:47:81:2a:86:07:6c:0c:c4:22:ec:35:66:
47:a7:06:50:99:88:9d:e0:12:eb:8f:a3:8c:92:2a:
7d:de:bb:fd:29:13:a5:e9:e4:65:e9:c9:0c:f4:35:
1f:de:27:c3:86:3c:b3:e7:7c:38:ff:d0:eb:ce:16:
5e:27:81:b0:35:f9:d0:0d:d0:fa:f3:bd:87:d2:54:
d3:c6:07:da:cf:df:48:60:3b:d5:a6:c7:1a:d3:78:
7f:64:28:c0:0b:ad:fd:d4:b9:a0:64:90:88:98:8f:
59:28:de:1e:aa:9f:e0:38:c5:cd:19:fe:ac:cc:49:
d7:29:e5:f1:8b:39:c1:b6:9e:a0:a8:00:91:3e:ae:
7a:e7:68:c9:62:de:6b:5f:08:ff:6d:f3:92:26:0e:
ef:8e:5a:d2:ac:a6:88:f0:68:d4:d5:6c:c1:b3:01:
c5:1c:85:a8:56:f8:60:e7:f8:ee:be:f8:bb:02:fc:
b9:62:b9:b8:d0:2e:34:ef:90:4b:35:05:af:b5:ea:
0b:64:72:dc:5d:58:8d:62:07:b5:f5:42:79:54:a5:
15:79:34:c6:af:e9:54:a4:ca:a4:51:e0:6c:8b:e9:
fb:87:97:77:48:5d:18:9d:49:3c:a2:a2:61:22:ee:
a8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B4:07:2B:5D:04:D0:B4:FE:02:DE:21:62:23:99:39:2F:C3:E5:EF
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B9D9E6907DDE11F1900208C2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.70.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:e5:1c:6f:c2:b8:a8:1d:9a:48:31:36:54:49:a0:9b:70:a5:
d9:cc:b4:38:b2:cc:d5:f4:6f:10:a1:4f:f6:41:86:cf:0e:94:
e5:c8:9b:35:b7:d6:ca:6e:c5:78:15:28:53:98:4e:ac:4c:6f:
80:37:44:30:f1:4e:bf:91:9f:ce:03:e0:60:82:dd:3d:e8:77:
81:b4:16:ae:14:bc:d8:bd:40:11:f8:dd:42:38:62:ed:e6:68:
5d:cb:cb:65:86:37:4e:5d:e5:85:c3:57:06:cb:b4:9d:03:84:
b2:71:64:6d:95:f1:fc:af:da:4c:23:4a:7f:a3:7d:10:4e:6e:
1b:1c:3d:b4:e8:1d:50:b8:67:2c:4e:b8:f7:75:1f:ae:c4:a0:
f1:d4:fc:7c:dc:ad:42:ba:9f:5c:dd:d8:6f:4b:f0:01:5e:31:
e2:1e:fb:8d:c9:13:3e:d4:8e:53:61:85:3f:e7:20:e8:a6:ba:
8f:16:ed:a3:0a:b0:c9:f7:52:bc:19:1e:12:95:24:9b:58:86:
f7:62:5f:d4:0a:6d:8a:62:39:4e:09:63:e4:a5:53:08:3d:15:
13:3f:60:6e:ec:9b:54:35:47:d9:98:55:01:9b:cb:7f:84:41:
32:b1:37:5f:36:2f:2e:63:ef:f3:73:5b:0b:21:b4:6a:83:15:
1c:13:89:87
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICIFMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjA3MTIxMDQ0NTRaFw0yODA3MTIxMDQ0NTRaMBgxFjAU
BgNVBAMTDTZhNTM3MDJhLWZlMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzDVx9xzKRCJg6EDEQ/4egRkeBKoYHbAzEIuw1ZkenBlCZiJ3gEuuPo4yS
Kn3eu/0pE6Xp5GXpyQz0NR/eJ8OGPLPnfDj/0OvOFl4ngbA1+dAN0PrzvYfSVNPG
B9rP30hgO9WmxxrTeH9kKMALrf3UuaBkkIiYj1ko3h6qn+A4xc0Z/qzMSdcp5fGL
OcG2nqCoAJE+rnrnaMli3mtfCP9t85ImDu+OWtKspojwaNTVbMGzAcUchahW+GDn
+O6++LsC/LliubjQLjTvkEs1Ba+16gtkctxdWI1iB7X1QnlUpRV5NMav6VSkyqRR
4GyL6fuHl3dIXRidSTyiomEi7qhrAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUPLQH
K10E0LT+At4hYiOZOS/D5e8wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0I5RDlFNjkwN0RERTExRjE5MDAyMDhDMkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGaEEYwDQYJKoZIhvcNAQEL
BQADggEBALrlHG/CuKgdmkgxNlRJoJtwpdnMtDiyzNX0bxChT/ZBhs8OlOXImzW3
1spuxXgVKFOYTqxMb4A3RDDxTr+Rn84D4GCC3T3od4G0Fq4UvNi9QBH43UI4Yu3m
aF3Ly2WGN05d5YXDVwbLtJ0DhLJxZG2V8fyv2kwjSn+jfRBObhscPbToHVC4ZyxO
uPd1H67EoPHU/HzcrUK6n1zd2G9L8AFeMeIe+43JEz7UjlNhhT/nIOimuo8W7aMK
sMn3UrwZHhKVJJtYhvdiX9QKbYpiOU4JY+SlUwg9FRM/YG7sm1Q1R9mYVQGby3+E
QTKxN182Ly5j7/NzWwshtGqDFRwTiYc=
-----END CERTIFICATE-----
Generated at Sun Jul 12 14:46:19 2026 by rpki-client