Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CCA5A0CE8C9E11F1B47252FFCE1D38B0.roa
File: CCA5A0CE8C9E11F1B47252FFCE1D38B0.roa (raw, json)
Hash identifier: YX/pq8eX0xFOhJZ35k2m7hnqDIGm9ZDiZYKj6xPMyP0=
Subject key identifier: 21:47:4F:19:22:B6:17:5B:26:A3:56:C3:8E:77:97:FF:93:09:90:0F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 208F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CCA5A0CE8C9E11F1B47252FFCE1D38B0.roa
Signing time: Fri 31 Jul 2026 05:15:09 +0000
ROA not before: Fri 31 Jul 2026 05:15:05 +0000
ROA not after: Mon 31 Jul 2028 05:15:05 +0000
asID: 402265
IP address blocks: 154.16.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 02 Aug 2026 00:07:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8335 (0x208f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 31 05:15:05 2026 GMT
Not After : Jul 31 05:15:05 2028 GMT
Subject: CN=6a6c2f5d-a142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:88:ae:48:f7:e8:ed:9e:f2:1c:2d:12:ba:32:
bc:d6:b3:04:08:ba:a9:23:cd:c1:61:57:c8:89:69:
36:07:32:f3:9b:9a:42:39:a0:23:f6:84:d3:a9:d9:
00:d9:20:cd:f0:05:5f:68:30:74:1c:e9:0d:f9:21:
b4:02:09:0b:b3:a4:50:8e:4c:07:dd:e3:7b:3c:f5:
4c:89:72:cd:0c:60:4d:80:f1:53:e1:96:15:f0:83:
cd:69:27:e9:0b:30:1b:f2:ad:db:c1:5b:b4:2c:3e:
54:9b:c2:9c:a6:16:b3:54:79:64:44:4d:f6:64:b3:
9f:74:05:34:09:bb:63:ad:72:51:37:e4:18:c8:26:
e9:1a:e5:8c:13:d3:3f:79:70:a5:08:c8:b5:6d:2b:
99:a1:8f:14:30:94:63:62:fb:9b:ab:67:3b:98:20:
45:bc:b5:c5:bd:26:20:11:7c:93:03:15:8c:9b:d7:
31:6b:89:b0:05:43:cb:5c:c6:69:bd:25:a2:81:86:
62:4e:62:c1:91:01:46:ac:f6:2a:4b:17:da:e3:c6:
c1:df:7f:32:d8:99:63:4b:19:28:5f:de:77:99:e7:
8d:cc:e4:17:46:d9:0c:d2:2d:82:c0:d0:51:94:1b:
40:93:0b:a3:ad:d7:53:47:b7:7f:af:6a:c7:d9:1f:
b4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:47:4F:19:22:B6:17:5B:26:A3:56:C3:8E:77:97:FF:93:09:90:0F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CCA5A0CE8C9E11F1B47252FFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.244.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:e3:be:2a:56:37:d9:0c:53:46:ba:46:9c:b5:b2:e8:f0:cc:
43:c6:9d:92:24:5c:4f:6d:73:37:08:45:55:c6:69:6d:70:c7:
58:e6:11:56:a1:65:1f:6a:3d:2a:1e:48:57:9c:5e:a4:61:14:
82:ad:c7:af:28:ee:c0:80:51:93:ba:ce:9f:13:cb:ff:a0:77:
9d:8b:53:c3:5f:90:d1:28:77:a5:96:f3:fd:ec:f7:be:04:c6:
7c:0e:ee:d1:3e:5a:94:a0:a0:58:41:12:de:6c:ee:20:9e:69:
d3:fa:1a:b8:e2:fd:9c:65:f0:8d:82:a6:60:6a:e9:98:b5:fb:
a7:5f:00:6d:c6:80:d8:c4:06:52:b6:04:e7:11:b5:77:ed:2f:
0e:5c:28:e7:fa:4d:c1:fe:f2:51:60:fe:81:cd:e6:15:23:ef:
ba:d7:70:83:9c:44:e8:d8:69:fa:13:15:ab:a7:f7:37:f2:d5:
62:49:20:65:21:af:72:b8:75:5e:f4:05:a3:38:d9:de:04:1c:
50:b2:64:ef:44:3a:fe:ec:8b:41:da:1d:78:1b:4a:ca:61:c3:
ff:ea:0f:3d:cd:97:96:d3:a6:15:2f:13:df:62:61:85:50:8c:
d5:f1:14:7f:3d:88:16:28:76:1b:d8:69:cb:77:13:1d:a2:ed:
c2:83:b8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:54:39 2026 by rpki-client