Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C25A86168FFA11F1B21CBCE5CE1D38B0.roa
File: C25A86168FFA11F1B21CBCE5CE1D38B0.roa (raw, json)
Hash identifier: 94avdSJ69veuqdVC8Sy+vNnGhyhRvXy+OE400z0vwMw=
Subject key identifier: 50:EE:73:79:B1:E3:89:9E:F9:55:2D:2D:81:67:23:30:AC:EE:94:A3
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 20AD
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C25A86168FFA11F1B21CBCE5CE1D38B0.roa
Signing time: Tue 04 Aug 2026 11:50:59 +0000
ROA not before: Tue 04 Aug 2026 11:50:55 +0000
ROA not after: Fri 04 Aug 2028 11:50:55 +0000
asID: 14670
IP address blocks: 154.16.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Aug 2026 14:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8365 (0x20ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 4 11:50:55 2026 GMT
Not After : Aug 4 11:50:55 2028 GMT
Subject: CN=6a71d223-0377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:08:00:ec:e4:39:c5:81:07:7b:b7:36:4a:74:
16:4e:7f:28:a1:39:c4:9c:05:13:53:d9:bc:c7:e7:
7a:92:96:4e:da:6a:7a:14:3a:9d:db:21:00:c1:38:
80:62:55:00:1b:da:e1:32:3b:d3:63:f1:b0:a0:f9:
c4:ca:50:5d:e0:e5:89:92:c4:51:a0:bd:73:66:d6:
5c:46:cf:e4:1f:c6:94:5c:0b:9a:07:cf:72:ab:85:
0b:5d:e6:a3:c1:82:a1:eb:67:99:7f:e8:d7:cc:cb:
f3:87:e8:fe:e7:fe:11:47:cf:49:86:97:0c:44:a4:
2f:54:dd:0b:d2:90:5a:9a:99:0b:7e:35:90:02:9c:
9e:cc:d8:a8:e0:28:79:62:94:2a:ea:e9:6f:f2:c5:
30:bb:5b:58:94:ed:a6:83:20:04:80:f1:8f:08:a6:
d9:65:b1:3b:d6:7a:17:81:97:fd:fb:ef:6a:97:3e:
24:7b:8e:c8:45:61:7b:ac:92:40:61:10:67:42:82:
fb:83:2c:20:f8:ca:45:77:11:bb:1b:56:30:b7:a2:
66:7e:0e:fb:a2:cf:03:43:e1:f3:ca:17:42:0c:0b:
ab:a4:1f:af:58:d2:70:54:15:f8:77:89:fb:41:e4:
30:7b:40:1c:5d:62:49:a1:0f:0e:97:bb:8f:1f:0d:
2a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EE:73:79:B1:E3:89:9E:F9:55:2D:2D:81:67:23:30:AC:EE:94:A3
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C25A86168FFA11F1B21CBCE5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.119.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:25:eb:9c:de:88:69:ce:d4:54:b3:ec:35:71:ef:7e:46:04:
cf:64:2c:3d:8e:a0:fe:f2:ea:1a:79:14:b5:2c:15:22:b0:f3:
1f:a6:c9:c0:11:ee:cc:f8:c4:4a:99:ee:c2:73:34:47:58:27:
fd:17:3b:d7:ce:d4:5d:3b:4c:a7:6a:7d:d4:3d:a0:23:70:12:
94:0b:3f:f9:fc:4d:37:ea:7d:70:af:cb:0d:a8:e8:c0:c7:a8:
42:ef:92:b2:66:71:42:20:01:11:a2:ba:29:29:6d:04:7e:65:
ce:a4:ff:ec:47:e5:89:b7:33:b2:0f:53:fd:73:00:fe:70:59:
61:04:2a:da:95:9d:f5:d4:4e:5d:e4:17:e5:75:c8:6d:d6:d8:
a9:e5:c0:02:5a:15:81:3a:1d:98:ae:28:40:fe:8d:ef:31:2f:
69:7d:ff:d7:28:ee:88:6a:b9:21:6d:89:b0:2e:5e:4f:cd:96:
3d:aa:16:5f:0a:66:44:e2:d2:aa:39:62:8c:1d:15:d6:a8:b8:
58:65:18:a0:71:07:54:1a:2a:c0:c5:c8:f4:b5:87:53:58:60:
8e:e6:df:56:9e:f5:2d:29:b3:a8:1b:b2:77:6e:6a:9e:bc:9e:
98:5d:1b:37:d1:50:b1:f7:34:fc:2c:d5:78:9e:a2:ef:e9:6f:
74:ff:6e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 20:25:12 2026 by rpki-client