Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CAEF0B727A9111F1A3D51FF8CE1D38B0.roa
File: CAEF0B727A9111F1A3D51FF8CE1D38B0.roa (raw, json)
Hash identifier: jySWGaWOC1hPlPHdboxZPwHbpkENpWHDkUptd+2quBI=
Subject key identifier: 59:5E:03:51:AC:1C:5E:35:DE:3A:6C:74:68:9F:B9:A4:B8:01:2F:EB
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 2028
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CAEF0B727A9111F1A3D51FF8CE1D38B0.roa
Signing time: Wed 08 Jul 2026 05:56:42 +0000
ROA not before: Wed 08 Jul 2026 05:56:38 +0000
ROA not after: Sat 08 Jul 2028 05:56:38 +0000
asID: 401776
IP address blocks: 154.16.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Jul 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8232 (0x2028)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 8 05:56:38 2026 GMT
Not After : Jul 8 05:56:38 2028 GMT
Subject: CN=6a4de69a-b32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:81:9f:91:df:ff:ad:d5:2a:db:37:16:10:c0:
65:66:28:6e:dd:cf:7d:b8:69:cc:f7:ce:9d:68:1d:
6d:82:2d:4d:b2:03:17:85:28:a9:e6:d4:c1:cf:e4:
c7:41:f5:f6:1d:cc:f4:d2:ae:df:1c:f4:34:75:7d:
9b:bb:3b:0d:35:5d:f9:20:a7:ce:0e:28:23:af:26:
7d:4a:79:f1:b3:f9:62:c4:b9:1a:1b:28:cc:c0:cb:
a3:19:ec:90:5c:0c:6c:bf:68:22:0c:1d:4c:15:af:
6e:56:51:09:3a:9d:a7:b8:a9:b8:a6:bb:49:da:31:
d2:1f:ad:17:a9:94:d0:4b:76:4c:5c:27:3d:d5:63:
9f:64:80:fe:70:5d:08:13:dc:26:38:86:4f:ae:2d:
33:4d:30:cc:89:a9:75:16:09:d8:d3:6c:eb:ac:e4:
56:67:5b:b0:f4:ca:f4:1f:df:11:28:29:07:dc:bc:
a6:4d:4c:62:d2:da:fd:47:3d:fa:e2:3b:2e:aa:74:
fa:e4:19:b9:80:a6:93:ba:e9:d4:02:97:80:00:92:
f9:02:c4:d2:a9:9d:b0:a2:e7:89:b1:b3:ed:9e:61:
c0:4c:78:f5:cd:e2:cf:7e:66:2f:13:71:7a:7c:91:
d4:2b:91:37:f6:26:81:88:84:8c:65:db:a8:b3:d6:
e5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5E:03:51:AC:1C:5E:35:DE:3A:6C:74:68:9F:B9:A4:B8:01:2F:EB
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CAEF0B727A9111F1A3D51FF8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.52.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:46:dd:d7:4c:f1:fe:79:f4:cf:f6:6c:bc:ff:50:ea:e7:54:
d8:34:10:ed:72:ca:aa:a5:26:bd:32:48:e7:a1:90:8b:f5:b1:
c5:40:fe:16:22:fe:54:10:8f:2e:35:f0:32:f1:c6:68:ca:e7:
c1:2e:fe:37:b6:18:1e:a9:41:b7:da:de:f4:10:49:ef:a1:31:
75:4b:8d:e4:4c:8e:dd:18:aa:60:ec:75:74:99:2d:3a:37:59:
7e:38:41:50:3e:4b:4b:a2:11:08:eb:5e:41:b2:2c:c0:e4:75:
37:b9:7f:2c:11:32:bd:28:75:4c:e4:b0:a0:c1:3f:45:a2:44:
d9:f2:fd:5f:d2:95:63:41:65:8a:85:e0:c5:a3:9d:17:df:30:
a4:05:50:51:93:59:d0:0c:5b:38:0e:10:c1:1e:f0:94:97:19:
ce:7c:4d:e0:a9:fb:f6:b5:4e:22:45:4a:9e:3b:dd:b9:b6:fb:
fd:0a:eb:33:12:93:c7:69:37:fe:cf:b5:fe:19:30:fa:de:ed:
fc:bc:04:20:95:d0:a1:8b:42:bd:0a:82:01:d6:c7:34:e4:02:
f7:5c:8e:d0:78:20:db:e2:71:fd:9e:9a:ad:4d:4f:80:73:0c:
d9:b0:d0:d7:e3:2f:c4:03:ea:bc:57:3d:fe:ab:d5:65:a9:e4:
05:e0:5e:a4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICICgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjA3MDgwNTU2MzhaFw0yODA3MDgwNTU2MzhaMBgxFjAU
BgNVBAMTDTZhNGRlNjlhLWIzMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+gZ+R3/+t1SrbNxYQwGVmKG7dz324acz3zp1oHW2CLU2yAxeFKKnm1MHP
5MdB9fYdzPTSrt8c9DR1fZu7Ow01Xfkgp84OKCOvJn1KefGz+WLEuRobKMzAy6MZ
7JBcDGy/aCIMHUwVr25WUQk6nae4qbimu0naMdIfrReplNBLdkxcJz3VY59kgP5w
XQgT3CY4hk+uLTNNMMyJqXUWCdjTbOus5FZnW7D0yvQf3xEoKQfcvKZNTGLS2v1H
PfriOy6qdPrkGbmAppO66dQCl4AAkvkCxNKpnbCi54mxs+2eYcBMePXN4s9+Zi8T
cXp8kdQrkTf2JoGIhIxl26iz1uVlAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUWV4D
UawcXjXeOmx0aJ+5pLgBL+swHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0NBRUYwQjcyN0E5MTExRjFBM0Q1MUZGOENFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEDQwDQYJKoZIhvcNAQEL
BQADggEBAHtG3ddM8f559M/2bLz/UOrnVNg0EO1yyqqlJr0ySOehkIv1scVA/hYi
/lQQjy418DLxxmjK58Eu/je2GB6pQbfa3vQQSe+hMXVLjeRMjt0YqmDsdXSZLTo3
WX44QVA+S0uiEQjrXkGyLMDkdTe5fywRMr0odUzksKDBP0WiRNny/V/SlWNBZYqF
4MWjnRffMKQFUFGTWdAMWzgOEMEe8JSXGc58TeCp+/a1TiJFSp473bm2+/0K6zMS
k8dpN/7Ptf4ZMPre7fy8BCCV0KGLQr0KggHWxzTkAvdcjtB4INvicf2emq1NT4Bz
DNmw0NfjL8QD6rxXPf6r1WWp5AXgXqQ=
-----END CERTIFICATE-----
Generated at Wed Jul 8 08:39:35 2026 by rpki-client