Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C70D58B4534111F195E015A4CE1D38B0.roa
File: C70D58B4534111F195E015A4CE1D38B0.roa (raw, json)
Hash identifier: RQ7z8Yf5LxmxGZRwv8JfSblzALz7vvTHyVRExWCGOxU=
Subject key identifier: B1:94:61:7E:E9:AA:06:93:0E:49:10:64:E4:29:2C:DD:46:DF:A4:47
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1F53
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C70D58B4534111F195E015A4CE1D38B0.roa
Signing time: Tue 19 May 2026 05:15:41 +0000
ROA not before: Tue 19 May 2026 05:15:35 +0000
ROA not after: Fri 19 May 2028 05:15:35 +0000
asID: 29802
IP address blocks: 154.16.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 21 May 2026 11:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8019 (0x1f53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 19 05:15:35 2026 GMT
Not After : May 19 05:15:35 2028 GMT
Subject: CN=6a0bf1fc-b1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9f:31:56:87:12:1d:cf:88:1b:fb:b8:d8:7d:
c2:b1:75:cf:85:09:50:f4:c4:b0:bb:f5:de:b2:ed:
9a:ab:49:dc:ef:9b:c3:60:05:82:b6:fa:86:55:cc:
d1:19:e6:66:5f:1f:0f:a5:6c:35:78:a0:88:26:bb:
1f:45:e4:69:5a:0b:11:ef:ce:ee:c2:e5:ba:03:1d:
f1:12:4b:fd:86:db:84:48:a5:19:8e:b2:1b:77:7a:
c9:b5:56:ee:47:fe:ac:77:83:b8:f7:fa:4a:88:e2:
36:47:dd:a3:2a:e7:3a:81:1a:c1:e4:23:ee:5c:81:
2f:9f:15:85:b3:15:5d:19:ba:94:6b:61:9d:9e:b3:
70:5e:26:5d:5a:fa:87:b8:15:7c:e0:97:45:86:6b:
4c:f3:3d:df:55:3b:16:ee:79:01:0d:fb:6a:ec:89:
04:27:00:34:3a:22:a2:ab:50:9d:39:c3:30:27:ff:
23:d7:ac:54:f9:6e:0b:3d:c7:07:ec:8a:5b:0d:e3:
b1:9c:f0:9e:68:d7:17:d9:53:3e:c1:3b:b3:fc:e9:
e6:e4:68:90:8b:f9:3a:20:b5:61:e3:9d:db:b3:f5:
c4:01:3e:9a:3f:9f:b2:10:50:d2:7f:3e:38:4a:93:
fe:e4:f9:f1:24:cc:80:ba:6a:9f:42:67:38:1b:21:
2e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:94:61:7E:E9:AA:06:93:0E:49:10:64:E4:29:2C:DD:46:DF:A4:47
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C70D58B4534111F195E015A4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.74.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:b1:3a:e2:19:a1:69:82:f6:07:7c:a0:ab:f7:be:db:66:23:
bb:3d:f0:30:31:f8:b9:a5:9d:14:27:98:25:d0:02:1a:ca:13:
1d:2c:91:be:3b:58:b2:39:8d:2c:39:b1:be:9f:d2:fd:4d:4e:
3a:df:4f:3a:6d:53:b1:fd:f9:d3:1b:ab:56:0c:3f:fa:c5:4a:
44:53:06:58:86:7e:9a:15:94:62:3a:70:ca:88:c6:a7:53:28:
e1:3b:e3:90:e2:99:78:5d:f3:c3:4f:be:2b:c4:bb:7e:84:cc:
69:ba:0d:4e:ab:1c:08:2e:94:87:ee:2c:15:ba:be:60:18:56:
65:08:2d:58:70:d0:a7:a8:2f:fd:12:51:e0:73:09:d2:ce:c7:
1b:05:ba:31:cb:e3:1e:af:b3:96:a6:c4:85:c8:ef:f8:ea:87:
4b:c1:80:2b:e3:61:49:98:e9:b9:0c:42:de:12:fc:27:cc:05:
83:7c:f3:fb:c9:8f:03:39:f8:2b:ef:8f:0c:9e:6c:99:32:06:
d0:71:d9:ff:5f:a4:e4:ff:b8:15:30:7a:80:c3:8b:da:01:4a:
70:8b:c6:c5:e9:10:7c:f5:ee:cb:3e:75:d2:7c:fe:31:7d:55:
ce:e2:e9:db:1e:9a:6e:e4:d3:e5:ba:73:46:0a:9e:f0:bf:7e:
02:07:d7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 19:58:06 2026 by rpki-client