Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C4ABDBEC94B711F1BCC3DB18CF1D38B0.roa
File: C4ABDBEC94B711F1BCC3DB18CF1D38B0.roa (raw, json)
Hash identifier: g0NJxFibvDxEcmIprMLhbW7K+riAFhn2QLiNb9O0Bvk=
Subject key identifier: 9B:D3:C8:BF:F1:97:32:4F:11:1A:09:FB:A7:89:73:89:09:E6:76:39
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 20F6
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C4ABDBEC94B711F1BCC3DB18CF1D38B0.roa
Signing time: Mon 10 Aug 2026 12:34:03 +0000
ROA not before: Mon 10 Aug 2026 12:33:59 +0000
ROA not after: Thu 10 Aug 2028 12:33:59 +0000
asID: 152698
IP address blocks: 154.16.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 12 Aug 2026 12:34:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8438 (0x20f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 10 12:33:59 2026 GMT
Not After : Aug 10 12:33:59 2028 GMT
Subject: CN=6a79c53b-5a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:13:7c:af:07:23:7f:1b:04:0e:64:71:18:6d:
46:78:3c:ec:fb:82:20:a3:a6:ed:9c:19:ba:fb:4c:
e2:d9:e6:32:9a:c5:aa:5c:8d:d4:d9:14:1c:9d:c0:
c3:5f:70:b8:64:01:82:d8:d5:65:aa:30:77:10:67:
ee:b7:fb:ab:b8:54:30:ff:44:14:60:8f:31:98:40:
dc:ed:06:33:2f:af:fb:7c:67:78:b0:1a:0f:93:8a:
ae:52:a8:70:f6:e7:df:40:9c:ab:04:73:fd:7c:d6:
df:36:85:dd:8e:e7:0f:11:4a:39:c8:00:58:e0:70:
9d:7f:4b:13:3e:e8:97:a5:de:15:8f:3f:b7:db:67:
91:bc:96:81:70:2c:39:65:f6:26:3e:48:05:cf:74:
e7:bb:17:6a:d1:37:24:1a:9d:d6:a0:41:d6:06:1e:
9a:ae:0f:cc:43:f6:33:69:95:98:f3:b7:d3:30:41:
20:2d:66:60:18:ce:33:9b:a4:10:30:83:d3:da:75:
d2:f7:58:01:5c:9d:bc:cf:e3:75:5b:fb:e6:0b:47:
ee:bd:c0:37:42:a5:2d:d8:93:3d:4e:3f:68:6c:6c:
6c:87:77:53:68:eb:d0:b4:fa:74:94:76:2c:10:ef:
4c:92:07:c3:e4:b3:6f:a6:b9:55:62:1d:e4:18:03:
bd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D3:C8:BF:F1:97:32:4F:11:1A:09:FB:A7:89:73:89:09:E6:76:39
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C4ABDBEC94B711F1BCC3DB18CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.9.0/24
Signature Algorithm: sha256WithRSAEncryption
40:12:da:59:56:c3:d1:64:a8:e6:82:b9:0a:41:50:dc:a5:de:
c5:11:11:46:74:b7:92:14:24:f7:32:ca:ae:4f:36:6d:38:73:
4b:d6:01:86:7f:90:a5:d6:d0:bd:37:7b:cd:eb:7b:7c:88:d8:
d5:af:01:7a:71:ae:40:b0:8f:f9:51:86:4d:c3:c7:62:b1:a7:
47:2f:33:92:9a:2f:8c:a8:86:36:eb:b9:fb:21:1b:a8:fa:a2:
80:e0:6d:a3:05:13:fa:b6:87:6d:d8:26:60:2f:7b:3c:59:22:
c7:02:6b:4f:ff:59:45:bb:f2:70:04:7f:d2:a4:80:8c:63:8c:
b8:a4:02:b3:c4:f3:af:10:06:36:30:2b:b0:58:2c:b7:8c:c8:
22:ca:85:68:00:96:0f:65:08:b6:97:32:99:90:9c:fb:5b:05:
b4:79:03:a7:06:ca:56:c4:43:9d:0c:f9:75:5f:21:c4:43:45:
83:24:da:bf:21:f4:a9:a3:d7:51:98:5d:0b:e4:41:e0:31:fd:
25:42:ff:85:03:6b:d8:08:7f:a1:fd:be:cb:1d:44:db:1b:a1:
96:a5:e6:b2:f3:b4:64:82:06:48:b2:13:8f:ca:09:8a:2a:f0:
65:ab:41:d3:32:c5:37:41:1f:08:bb:ed:a9:45:53:eb:66:49:
2a:4d:bc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 10 19:03:32 2026 by rpki-client