Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CC94CF9C5E8111F1AC005916CF1D38B0.roa
File: CC94CF9C5E8111F1AC005916CF1D38B0.roa (raw, json)
Hash identifier: /KVgCXVA03d8axm1Zfu8NJFG7XGizDi4agVQ2nFEjGc=
Subject key identifier: 25:4D:A4:1A:1F:18:54:A5:B3:56:F5:EF:4F:63:B7:7F:F9:30:4B:9B
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1F9C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CC94CF9C5E8111F1AC005916CF1D38B0.roa
Signing time: Tue 02 Jun 2026 12:51:40 +0000
ROA not before: Tue 02 Jun 2026 12:51:34 +0000
ROA not after: Fri 02 Jun 2028 12:51:34 +0000
asID: 834
IP address blocks: 154.16.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Jun 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8092 (0x1f9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 2 12:51:34 2026 GMT
Not After : Jun 2 12:51:34 2028 GMT
Subject: CN=6a1ed1dc-c2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:29:60:d6:bf:e6:48:bc:ff:ba:fe:da:79:3c:
75:66:48:e6:89:1c:af:c8:89:a6:fd:24:71:61:e8:
63:16:46:1c:04:5c:e8:11:60:2e:42:c9:78:af:d8:
b7:6a:8c:6b:69:76:e6:b0:08:78:fd:07:31:d6:80:
9d:01:36:14:fd:d9:86:12:cc:94:f8:79:db:53:dc:
95:1a:3c:2a:46:32:1e:76:81:bb:1b:6f:5d:7e:d9:
29:6c:67:fd:51:5f:a7:91:23:91:f4:f8:97:c5:4a:
94:bd:2b:dc:8e:a8:43:3e:66:5f:22:69:43:22:46:
81:e0:b0:57:3c:d7:b4:49:a9:c1:e3:0a:d7:dc:68:
6e:2a:3c:d2:4f:cf:9e:e1:d9:ba:6d:b0:4e:fa:f5:
3b:07:05:40:df:ce:c2:68:62:3f:05:a8:14:3c:24:
c1:cc:68:85:1a:d7:8b:ea:8b:f2:bf:3a:13:be:ad:
ce:54:76:bc:6a:d0:cc:8a:71:0b:19:24:e6:6a:a4:
e6:a0:83:92:fa:cf:5f:00:11:c8:fd:d5:38:49:5c:
a1:77:21:9a:c6:30:a4:79:ea:b1:93:5a:c7:e3:e4:
b7:38:9e:02:db:ed:b6:e3:da:44:9b:3d:97:16:9f:
6f:62:b9:9f:b4:4a:5f:1a:a2:96:52:6a:46:59:58:
d2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4D:A4:1A:1F:18:54:A5:B3:56:F5:EF:4F:63:B7:7F:F9:30:4B:9B
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CC94CF9C5E8111F1AC005916CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.237.0/24
Signature Algorithm: sha256WithRSAEncryption
59:fa:0b:79:2e:04:86:7f:f9:04:0a:1d:d7:27:41:e1:ea:91:
b6:6c:52:1d:29:81:7d:aa:5b:99:d7:75:26:bd:bf:bc:f3:ce:
ca:fa:e0:0e:8f:b7:d4:05:1d:f1:e4:94:af:41:a8:6d:37:f7:
73:57:d5:47:6c:5e:9a:00:c1:5c:0d:ae:49:0c:03:0a:80:0c:
3c:10:d2:c4:15:ff:a3:55:c9:c1:34:ba:ca:34:21:79:7d:a8:
bf:4b:4a:36:08:ff:c3:09:87:99:a4:55:06:3a:17:10:93:9d:
6b:09:bd:da:30:e5:8f:3f:a0:91:43:98:39:40:b4:46:34:7a:
24:c9:35:7f:ee:ef:ed:92:0d:1b:fc:31:07:23:6b:bf:5f:71:
0d:d6:bc:d9:95:c8:7e:25:28:8f:eb:3f:86:ec:3a:34:a7:f5:
2b:05:5b:21:7f:f8:c8:9c:51:d4:0a:2c:05:e5:d5:f6:2e:c2:
d9:ab:bc:15:0e:03:3a:71:77:9d:53:e6:45:9b:0e:39:81:b3:
3f:df:fb:dd:47:d5:aa:ca:61:e2:01:f3:be:3e:2e:33:a8:1c:
0c:3a:4c:69:0c:49:43:31:79:35:0c:25:62:e5:3d:ab:08:9f:
ff:af:5e:87:78:99:8b:fd:63:ee:04:52:f0:22:02:e7:10:10:
aa:1b:5f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:33:25 2026 by rpki-client