Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DD20362084CA11F181B9C4AFCE1D38B0.roa
File: DD20362084CA11F181B9C4AFCE1D38B0.roa (raw, json)
Hash identifier: NSFioVRrxAS4Wn734LatM3iBaXMStMloREDogwOmc3w=
Subject key identifier: 4D:A7:7B:D2:1B:01:0E:24:17:72:97:B7:4D:03:FE:76:02:85:F5:CA
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 206A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DD20362084CA11F181B9C4AFCE1D38B0.roa
Signing time: Tue 21 Jul 2026 06:10:26 +0000
ROA not before: Tue 21 Jul 2026 06:10:22 +0000
ROA not after: Fri 21 Jul 2028 06:10:22 +0000
asID: 396073
IP address blocks: 154.127.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 09:11:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8298 (0x206a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 21 06:10:22 2026 GMT
Not After : Jul 21 06:10:22 2028 GMT
Subject: CN=6a5f0d51-ee02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bc:1f:ee:4d:db:d6:be:71:cc:11:1e:ef:5d:
1d:50:9c:e2:a0:36:65:f4:58:d7:34:77:ca:46:b1:
0c:8a:87:09:09:36:85:6b:f3:66:92:56:5c:8b:97:
05:a8:d2:c3:08:90:aa:d3:a3:39:95:26:1a:46:68:
f3:ac:df:07:e8:3a:83:90:f8:46:25:b6:05:4c:dc:
c8:9d:fe:54:04:40:7d:c8:0c:d5:97:99:01:f9:69:
58:0d:2b:f2:3e:3d:9c:67:12:b9:c5:78:4d:56:1e:
70:9b:b0:e2:1a:d6:ed:52:57:e7:ea:fe:95:38:b2:
34:6d:5d:82:0e:60:11:14:b1:75:da:68:a3:86:87:
d7:8f:5b:d1:14:58:2a:57:c7:10:e9:01:79:86:cb:
ae:5a:b5:42:3c:ab:c3:69:2d:05:00:84:08:3e:54:
9d:d3:a7:cf:bc:8b:2b:fb:31:4a:72:d0:09:f4:f8:
5f:4c:b2:b9:e7:16:65:8f:97:f6:3d:b1:ca:91:e3:
f0:0e:e7:08:b8:3b:ef:30:69:e5:20:39:e5:85:c1:
73:24:9e:36:03:e3:59:21:d0:6c:6e:e5:7a:9f:69:
00:15:bd:3f:5e:2d:c0:58:d5:5f:23:9b:d8:a1:4c:
e1:7f:d1:c6:03:08:83:b2:7f:da:96:0c:f8:0a:e6:
9b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A7:7B:D2:1B:01:0E:24:17:72:97:B7:4D:03:FE:76:02:85:F5:CA
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DD20362084CA11F181B9C4AFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.53.0/24
Signature Algorithm: sha256WithRSAEncryption
01:70:6c:8d:5f:f1:9c:ee:69:de:b3:bf:f5:b7:be:8f:2b:79:
83:26:d7:87:16:d8:ca:a8:c2:33:77:6b:01:ce:cd:8e:44:a0:
cd:d1:6b:1e:31:95:44:00:e7:ec:5a:38:db:70:f0:b9:48:ec:
97:85:cd:ed:b9:8a:5b:e4:14:11:bb:69:af:55:51:a8:cb:40:
b1:e2:69:03:28:8f:23:b6:f5:cb:a9:21:d9:ba:3a:cf:23:c5:
6a:4d:8d:4d:28:79:9c:c8:59:d0:8d:c0:dc:c9:99:3c:97:47:
e1:5f:79:b4:66:fb:65:9d:eb:45:a6:2d:8c:be:48:c3:b4:01:
0e:7a:3b:84:e1:3c:ba:56:b4:ca:23:a9:b0:8b:f5:cf:85:36:
f5:72:25:ed:34:47:2d:22:dd:57:7a:b1:99:88:c2:b1:47:0b:
54:10:95:32:d8:db:fa:dd:6b:4e:b1:56:d5:56:fd:06:7c:6a:
b4:ea:bf:95:7b:66:5e:93:19:42:6a:a9:0d:af:72:3a:e1:04:
97:33:31:76:a4:f7:fd:b1:8c:1c:dd:bb:23:7e:fd:f0:ae:2f:
f0:cc:84:72:da:e0:be:45:ab:03:6c:10:f1:4e:7b:42:e1:50:
af:10:b3:c5:c9:83:90:d0:62:10:61:ff:5b:64:89:c7:1d:a3:
fa:f0:ad:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:49 2026 by rpki-client