Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D677C380915C11F1BE579FCFCE1D38B0.roa
File: D677C380915C11F1BE579FCFCE1D38B0.roa (raw, json)
Hash identifier: +GU9Jaamz+5Jke0FjvJrec/4mky6Q/cVVApp9DnHK2o=
Subject key identifier: 21:9F:47:9B:E7:4F:18:D1:44:57:25:B5:49:7A:DB:ED:38:AF:4B:19
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 20D9
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D677C380915C11F1BE579FCFCE1D38B0.roa
Signing time: Thu 06 Aug 2026 06:05:35 +0000
ROA not before: Thu 06 Aug 2026 06:05:31 +0000
ROA not after: Sun 06 Aug 2028 06:05:31 +0000
asID: 402265
IP address blocks: 154.16.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8409 (0x20d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 6 06:05:31 2026 GMT
Not After : Aug 6 06:05:31 2028 GMT
Subject: CN=6a74242f-f74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6e:01:8a:93:04:ff:5d:62:f1:2b:c5:88:fe:
e9:b6:5a:c1:86:1f:39:0c:f0:00:d7:c4:96:c3:21:
80:70:55:7f:d9:ce:7b:57:91:07:65:d1:74:e2:92:
80:35:5b:20:6a:49:99:aa:56:aa:67:a4:51:ee:d8:
cd:5b:19:67:93:57:50:da:da:7d:de:06:05:bd:e6:
36:1c:01:a0:50:0d:9d:e1:8c:f4:4a:36:05:d1:92:
0e:3d:fd:95:cd:00:1e:36:1b:84:f5:12:a6:e0:da:
9d:2f:68:df:45:67:de:ee:c7:f5:02:05:01:17:4a:
37:ec:eb:c6:52:f7:86:e6:52:7f:32:65:f6:1e:02:
5a:c9:d1:d1:e6:31:7e:a6:58:44:2a:3b:49:f3:f5:
a7:55:44:86:91:57:f5:de:7d:06:d6:1f:d5:7e:bf:
7e:6b:da:30:38:f2:99:62:e1:8a:eb:91:20:50:41:
20:6f:39:58:e1:80:cb:31:ab:21:34:0e:78:2a:11:
11:93:87:33:2f:98:3b:7d:4e:ba:82:ff:15:90:7d:
95:ea:6d:99:53:68:4b:bb:8c:fb:f7:bc:26:83:d8:
f2:c5:4f:5e:79:98:3d:89:f8:b4:3e:c4:f8:25:7a:
7c:37:90:18:74:8f:69:a6:1a:be:57:a2:3d:14:b4:
48:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9F:47:9B:E7:4F:18:D1:44:57:25:B5:49:7A:DB:ED:38:AF:4B:19
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D677C380915C11F1BE579FCFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.194.0/24
Signature Algorithm: sha256WithRSAEncryption
96:a4:74:13:77:01:77:0b:b1:24:57:50:8d:d8:cb:79:27:8e:
17:ce:a0:ee:31:0e:97:d2:4d:8f:1d:5a:57:13:71:c7:f8:ca:
53:af:22:5b:10:fb:01:a9:f8:28:ec:7e:77:1c:4e:34:97:89:
99:dd:73:07:8d:de:e1:22:43:c2:31:6f:20:e6:e0:04:13:9e:
3c:f1:7c:f9:39:b9:e9:7c:26:67:46:43:a0:ee:9f:a5:01:50:
af:63:85:f2:70:80:73:0a:72:f9:50:80:3d:3b:21:c6:0c:59:
84:0c:89:ab:2e:e2:ca:cf:88:ff:e2:b0:ad:7a:b6:7c:49:cf:
da:42:36:a7:b3:1e:ca:98:11:63:c2:bc:dc:41:49:2f:44:bd:
c5:f2:28:1b:21:76:a8:a4:55:a4:fa:ae:21:51:d7:98:f9:3f:
f1:4d:0e:d5:b4:e1:3b:f4:f1:e9:19:d3:c8:38:11:99:00:3e:
1d:c4:21:cd:33:12:e3:3b:36:45:50:28:8b:7a:93:79:03:ec:
57:d0:2f:96:d9:ef:4f:70:30:08:06:70:f6:89:b4:51:a0:e0:
e2:e8:f2:4d:76:7e:07:9c:e0:33:ac:17:95:1d:e8:b0:c8:b7:
48:9e:06:d6:56:fd:8f:dc:9b:a6:7b:47:c2:dc:6d:49:f4:69:
78:84:5a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:36:52 2026 by rpki-client