Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C8B3750E90E511F1870A26F0CE1D38B0.roa
File: C8B3750E90E511F1870A26F0CE1D38B0.roa (raw, json)
Hash identifier: PuFvdHy0+fi3d+9z2UVw9yIrGWjve5qkFYO3tW2mUN0=
Subject key identifier: 90:87:73:82:0C:88:2F:12:1F:46:51:F5:64:67:88:80:60:0F:57:75
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 20D0
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C8B3750E90E511F1870A26F0CE1D38B0.roa
Signing time: Wed 05 Aug 2026 15:53:22 +0000
ROA not before: Wed 05 Aug 2026 15:53:18 +0000
ROA not after: Sat 05 Aug 2028 15:53:18 +0000
asID: 402265
IP address blocks: 154.16.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Aug 2026 00:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8400 (0x20d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 5 15:53:18 2026 GMT
Not After : Aug 5 15:53:18 2028 GMT
Subject: CN=6a735c72-9fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ae:1c:12:19:95:a5:3e:9d:d7:56:44:3b:08:
e7:90:07:b4:34:66:53:a2:74:fc:8b:e9:dc:28:da:
99:bd:21:87:f0:89:c7:ab:8c:75:ed:14:c1:d2:3b:
19:31:3d:d3:81:7d:8f:a9:ba:d4:ae:9c:de:f1:ac:
11:b9:08:b1:f6:74:88:f0:75:6e:bc:10:9e:36:fa:
b9:a9:47:b9:e0:67:6f:0e:3c:67:8d:da:d4:c0:fc:
12:31:db:13:fa:d3:b3:43:87:04:64:31:43:19:a1:
38:82:95:84:3a:e7:f5:d2:2b:9b:c6:e0:d5:b9:d5:
a1:9e:89:d7:19:60:86:27:22:10:6b:12:6e:30:e6:
8d:22:2b:25:38:18:db:17:c3:37:68:27:ca:90:11:
83:b1:50:e2:99:c9:a2:e6:4b:63:8a:a6:06:a2:98:
fd:11:db:a3:cb:db:ad:5c:6e:67:98:f5:02:d5:40:
32:c7:e5:9d:3e:76:a5:23:39:77:68:fe:07:56:8d:
b1:ae:d4:9f:7c:89:63:1a:e9:6e:da:65:ef:1a:44:
e5:93:b4:f9:d2:5e:d3:b3:6e:b1:92:b7:0f:b8:45:
cd:da:72:99:53:bd:52:99:2d:1c:69:32:05:6f:d0:
29:39:08:1b:bd:bb:c2:54:cf:b2:0f:e1:85:9d:e5:
c9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:87:73:82:0C:88:2F:12:1F:46:51:F5:64:67:88:80:60:0F:57:75
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C8B3750E90E511F1870A26F0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.216.0/24
Signature Algorithm: sha256WithRSAEncryption
44:f6:3d:9c:21:de:63:8b:bd:ba:6b:e9:a7:05:be:e2:32:ff:
ec:37:b8:70:ce:d7:3f:03:54:62:78:19:ef:60:62:b5:91:0e:
5b:13:f0:d7:4c:03:ed:92:0e:e5:31:fc:88:8e:49:fb:34:21:
76:59:cc:e3:75:54:6f:15:7b:16:b7:df:f2:3b:a0:d9:10:d2:
c4:51:3d:5a:ea:90:0f:b0:46:8c:dc:96:0f:cc:49:38:8b:36:
d8:3c:e1:90:1f:eb:d9:e0:48:fd:65:f1:aa:f2:15:60:73:3e:
d7:7d:a7:bb:33:6a:59:49:6a:68:d0:a1:69:38:05:6d:60:26:
f9:91:ed:a8:97:7b:49:3d:d0:b9:81:cf:ec:3f:60:5d:e9:6e:
dc:3b:61:97:76:d8:f3:66:62:73:b8:b4:22:8f:7e:21:eb:e3:
b3:de:4a:16:58:3f:a8:b7:8f:6a:af:20:de:0a:a4:36:b3:4d:
ed:11:ce:7b:fa:80:eb:c7:06:ff:89:36:e9:35:e0:4c:2c:79:
3a:90:ce:60:20:38:dc:0a:fd:b4:01:c0:0d:73:31:39:04:03:
81:97:fb:af:1b:8f:68:77:25:ab:8d:73:f5:de:be:37:9a:1c:
a1:17:9f:5e:cc:41:c6:8f:dd:28:a6:8c:6e:25:77:fb:be:7e:
23:4a:9f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 22:57:59 2026 by rpki-client