Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D9A033EE5A6B11F1B57818CBCE1D38B0.roa
File: D9A033EE5A6B11F1B57818CBCE1D38B0.roa (raw, json)
Hash identifier: LdCbCdH5lEz/RmSAbevPshmX41E42IFWSkyWZp0leko=
Subject key identifier: B8:B4:1C:C6:22:CB:AC:83:B8:22:2E:C0:5A:6E:9D:15:47:43:BE:14
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1F86
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D9A033EE5A6B11F1B57818CBCE1D38B0.roa
Signing time: Thu 28 May 2026 08:04:29 +0000
ROA not before: Thu 28 May 2026 08:04:24 +0000
ROA not after: Sun 28 May 2028 08:04:24 +0000
asID: 214266
IP address blocks: 154.16.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 30 May 2026 00:07:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8070 (0x1f86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 28 08:04:24 2026 GMT
Not After : May 28 08:04:24 2028 GMT
Subject: CN=6a17f70d-843e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b6:49:ef:16:50:a4:83:d0:e6:bf:40:72:98:
82:4a:aa:5d:0a:67:51:39:f7:3d:72:6c:63:87:2a:
8a:00:89:65:51:c1:eb:97:90:cb:b8:5f:84:20:d0:
c6:8d:23:4f:13:1a:02:20:a6:28:52:32:6a:7e:a3:
93:de:62:0c:39:c8:63:40:a3:32:5e:a8:1b:a1:f9:
93:5d:91:e9:3f:35:c5:dc:69:a0:63:53:af:c5:ad:
30:1c:68:3b:a1:d6:4c:5b:d9:98:13:55:94:2e:6f:
76:00:22:59:29:a1:3e:83:0b:90:bd:fd:0c:4c:c4:
ab:d4:32:74:12:05:5a:3a:7e:48:eb:cc:98:d8:63:
b0:30:b2:03:cf:9f:18:43:95:28:82:ab:6a:5f:51:
b3:75:38:31:91:9a:6b:f7:41:17:67:35:64:06:29:
88:1c:8f:f7:3f:5d:d7:75:53:68:36:84:71:97:f6:
10:b1:e6:38:9b:f3:75:30:e0:5c:cc:d1:0b:bb:64:
d6:10:ac:1d:67:89:51:c9:5d:c4:ee:36:e6:64:f6:
d1:d2:a8:32:79:2d:73:fb:ad:3c:6b:61:bd:5d:1d:
2f:30:65:76:d0:50:35:bd:e7:98:dc:e5:28:6d:16:
04:f3:ad:d7:62:0e:67:db:fb:cf:cd:14:b1:4d:7d:
33:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B4:1C:C6:22:CB:AC:83:B8:22:2E:C0:5A:6E:9D:15:47:43:BE:14
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D9A033EE5A6B11F1B57818CBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.0.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:df:2e:ca:37:31:ae:d3:04:30:ab:70:68:55:df:ab:cb:6f:
14:3d:d5:92:a5:7a:d5:76:5e:7f:3e:35:10:c3:d0:b6:85:1d:
83:78:30:07:4e:fd:89:67:cc:f6:ac:cf:92:f3:e6:ef:11:3d:
ef:aa:dc:c6:3e:59:1e:85:cd:60:54:04:2b:1c:4c:53:37:61:
d2:0c:82:9b:d2:61:55:4f:f0:66:f6:55:c6:96:36:1f:bc:a4:
7e:6b:d7:bf:b3:4e:37:5e:bb:61:79:c9:e6:84:1b:da:bf:a0:
ca:db:b8:1a:4f:38:9d:b7:82:b6:86:6d:49:d5:13:50:17:93:
0b:93:dd:64:08:59:9b:44:2c:ec:39:39:c8:e7:ec:78:24:42:
47:57:f6:33:e2:68:b0:41:81:b1:21:e6:5c:ca:de:f4:b3:18:
98:c7:d3:bf:7e:7a:ac:ae:6a:9e:4d:10:5f:2c:b4:be:eb:4d:
2f:79:cb:e4:ab:01:32:81:a8:61:02:ad:5a:fe:67:0c:f9:e3:
dd:c3:45:6f:64:25:33:e4:9a:0c:3e:59:b3:b0:e5:0d:8d:13:
e1:5d:69:2b:87:26:70:d5:e3:c6:04:76:1f:b4:c8:f7:6e:e3:
d0:f4:34:46:72:c2:bb:49:d2:12:d3:43:f8:cb:10:57:13:fc:
a5:fc:98:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 22:40:45 2026 by rpki-client