Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C4ABDFCE5E7611F185C17CD6CE1D38B0.roa
File: C4ABDFCE5E7611F185C17CD6CE1D38B0.roa (raw, json)
Hash identifier: +oJOQnWXUk1Hb6aNJYSDvtP2CrBJ3Z5yyaTTiVwn9OA=
Subject key identifier: ED:20:3F:72:52:BB:E2:7A:67:61:49:B6:81:40:5A:58:7D:C5:3B:0A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1F99
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C4ABDFCE5E7611F185C17CD6CE1D38B0.roa
Signing time: Tue 02 Jun 2026 11:32:43 +0000
ROA not before: Tue 02 Jun 2026 11:32:36 +0000
ROA not after: Fri 02 Jun 2028 11:32:36 +0000
asID: 154132
IP address blocks: 154.16.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8089 (0x1f99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 2 11:32:36 2026 GMT
Not After : Jun 2 11:32:36 2028 GMT
Subject: CN=6a1ebf5b-f8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4a:16:f2:90:fb:c0:2d:f1:05:de:ef:ef:b8:
77:74:cb:16:e0:ff:04:c0:f6:2c:9c:ad:bb:8a:3e:
1b:d9:82:00:47:05:eb:b7:1a:26:c7:9b:b5:d6:82:
ff:30:de:7f:25:8a:41:92:06:a3:0b:8f:76:20:94:
94:3d:60:48:b4:d8:24:60:37:e8:25:01:22:73:c8:
68:a9:ab:4e:4b:5e:eb:e8:c5:a0:2f:a4:1e:81:46:
da:86:3d:4b:2f:a8:29:0b:1d:6d:86:38:a4:7d:4d:
5b:b1:0a:93:5d:c5:7f:71:55:c5:c2:ca:29:c1:7c:
e2:c8:61:d0:b9:9c:66:b0:17:f2:50:f9:69:c5:6c:
11:c1:c0:3f:87:18:30:0b:d3:78:46:a4:10:20:7d:
bb:a2:ca:0d:b5:87:b6:da:87:b0:6b:4a:5b:06:12:
e7:be:6c:b8:af:42:b8:c9:b8:5c:e8:13:9e:07:be:
99:e5:3f:86:5f:c9:a8:dd:a6:03:7e:83:95:c3:5a:
f4:41:22:57:81:79:46:b8:0c:e2:7b:47:b3:c8:10:
64:37:b2:f0:4e:e5:5b:c7:53:0a:98:db:03:6a:d7:
bd:43:b2:67:9b:b1:10:41:58:22:06:be:0d:c1:3e:
c9:10:59:5f:02:ec:ec:e6:e4:64:8d:ad:0f:08:72:
59:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:20:3F:72:52:BB:E2:7A:67:61:49:B6:81:40:5A:58:7D:C5:3B:0A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C4ABDFCE5E7611F185C17CD6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.38.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:6c:20:91:11:10:2f:00:5c:4d:55:ee:45:6e:7c:61:43:6c:
d6:51:0f:4d:66:39:e0:23:20:7c:72:e9:27:f2:6f:17:1a:ab:
cb:fd:a6:45:f7:9a:26:61:61:42:3c:63:51:94:26:a1:f1:23:
1a:e3:54:44:3b:6a:50:c3:ba:bf:d9:f3:9b:4b:9d:4a:c1:3d:
e0:4c:79:b8:17:5a:bf:d9:8d:33:e3:83:61:19:4d:dd:cc:49:
bc:76:6e:71:b0:0b:60:81:64:fd:29:8a:59:f2:8b:f2:38:2a:
5e:99:37:44:78:3d:eb:13:67:c7:aa:6f:46:13:bb:f3:15:b1:
86:0d:68:ab:92:a6:fc:4d:7d:40:c6:ee:6e:76:8e:45:c0:4a:
57:37:ec:15:86:d2:2c:db:b4:24:4c:3c:8c:e2:a8:5b:39:70:
84:20:dc:d0:71:4d:38:6b:e4:bb:ac:80:31:97:cc:db:6e:91:
d0:11:e5:45:2b:07:c5:10:41:ac:c6:16:f7:ce:ee:25:53:06:
e6:fb:60:86:12:02:29:b0:3e:1d:85:63:1c:0e:f6:b0:54:e8:
c2:f1:94:48:9d:c4:61:65:41:19:e7:0d:ea:64:79:7b:aa:d7:
f6:b0:f3:ce:0d:78:98:0e:1b:3b:5b:ec:ca:10:a8:c0:1f:26:
d1:51:d6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 19:36:28 2026 by rpki-client