Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C41B0A229BAB11F1A85ABDC8CE1D38B0.roa
File: C41B0A229BAB11F1A85ABDC8CE1D38B0.roa (raw, json)
Hash identifier: hqvcGdAr6sYVEL54pshfhwz6Aln535UA8VXep8uPQT0=
Subject key identifier: F4:15:AB:B8:10:97:36:61:C3:97:79:F9:C6:82:3A:A5:15:D6:AA:B5
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 2118
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C41B0A229BAB11F1A85ABDC8CE1D38B0.roa
Signing time: Wed 19 Aug 2026 08:55:46 +0000
ROA not before: Wed 19 Aug 2026 08:55:42 +0000
ROA not after: Sat 19 Aug 2028 08:55:42 +0000
asID: 20141
IP address blocks: 154.16.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Aug 2026 08:55:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8472 (0x2118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 19 08:55:42 2026 GMT
Not After : Aug 19 08:55:42 2028 GMT
Subject: CN=6a856f92-5afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e6:1a:89:5b:da:9e:32:f8:50:47:c9:e0:f0:
6e:86:46:82:44:81:57:82:44:d1:38:a7:73:46:18:
05:60:0c:46:ea:a5:c7:86:7f:62:ff:04:db:99:62:
6b:f6:03:3f:48:b4:75:15:ad:44:f5:96:05:c5:48:
ad:a6:68:a7:9a:e5:09:0f:05:c1:62:2a:c0:8a:54:
f6:04:22:c6:56:87:ab:41:0f:da:bc:dc:e3:1e:a1:
7c:6b:e4:b7:45:a8:07:d3:b5:37:c6:db:44:74:07:
5a:bb:d6:6f:7d:8c:91:db:9e:db:a0:8f:65:d2:d6:
12:62:9a:b3:2b:8a:af:85:7f:44:3d:45:6d:e3:20:
0f:ed:01:d1:5b:ef:27:1d:2c:58:fe:c2:02:06:ee:
9b:e4:e4:1f:98:09:4e:e0:ee:f2:3c:6f:63:32:ea:
4e:12:fc:db:7f:06:8e:ed:98:3f:0b:08:7a:e9:39:
83:fe:8e:87:87:0f:7e:63:18:91:c8:ca:a4:0e:c5:
fe:f4:5b:ae:5f:1d:08:72:61:3c:58:37:b3:94:9b:
a4:92:73:d2:0e:9a:6d:cc:e0:23:da:9c:e2:0f:60:
32:bb:e2:ca:20:de:e4:45:88:c5:8c:d5:04:1e:00:
a4:30:e9:70:52:29:df:c2:44:2a:6c:29:39:73:9c:
df:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:15:AB:B8:10:97:36:61:C3:97:79:F9:C6:82:3A:A5:15:D6:AA:B5
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C41B0A229BAB11F1A85ABDC8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.15.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:54:7e:2c:02:1b:2f:18:c5:46:c1:ba:82:ae:98:a0:a1:b6:
fb:8e:98:ab:0f:9f:67:5b:51:a4:7a:9f:9c:ac:99:91:96:80:
37:22:7f:1e:6c:4c:be:fd:86:df:dd:96:50:69:6c:46:49:c2:
de:0d:0b:b1:22:a9:e0:f2:f9:1a:1f:08:15:e5:9e:94:19:9d:
46:9f:c4:3a:3a:59:1b:28:c3:69:38:ba:bc:f5:8d:f6:a0:57:
5a:9e:19:67:a4:91:ec:fc:c9:83:59:c6:14:cb:1d:3b:f3:7c:
41:13:c9:4e:16:43:65:18:fc:9e:14:86:bc:b3:50:14:05:eb:
a5:ff:84:d2:cb:ce:e9:39:3f:9a:00:9d:c6:24:35:84:3e:34:
6c:ec:e8:c6:bd:ec:7a:1d:7f:b0:2a:e0:5a:ab:bb:3d:e6:14:
29:42:5c:f4:47:3e:af:e2:fc:fa:3e:d8:16:fe:5f:7d:ec:cf:
35:53:21:33:8c:91:61:dc:fd:cf:72:9b:a9:db:cc:89:9b:15:
a2:78:0a:33:14:35:f9:f8:20:67:80:0c:28:8b:7b:37:e1:df:
27:0e:d2:ab:7b:a0:11:24:dd:0e:c2:04:6b:18:cb:56:52:92:
16:02:19:8d:38:f2:8d:73:08:84:18:b6:5b:12:9d:de:86:65:
58:8b:b1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:12:11 2026 by rpki-client