Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DE95057885B311F19B0320BACE1D38B0.roa
File: DE95057885B311F19B0320BACE1D38B0.roa (raw, json)
Hash identifier: 1F7EL+PoDRxcQsfmSj6ycUwWH59CQJQlK299auCtXLY=
Subject key identifier: 1C:0C:22:1A:35:5F:88:E6:1B:9C:91:C4:3C:0F:72:9C:89:B9:DD:45
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 2077
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DE95057885B311F19B0320BACE1D38B0.roa
Signing time: Wed 22 Jul 2026 09:58:21 +0000
ROA not before: Wed 22 Jul 2026 09:58:17 +0000
ROA not after: Sat 22 Jul 2028 09:58:17 +0000
asID: 216138
IP address blocks: 154.16.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 24 Jul 2026 12:26:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8311 (0x2077)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 22 09:58:17 2026 GMT
Not After : Jul 22 09:58:17 2028 GMT
Subject: CN=6a60943d-daf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1b:af:38:2d:af:6a:59:31:5b:88:4f:d5:27:
ac:99:4d:9b:d4:1d:8c:a1:ca:ca:a7:2c:39:7b:ad:
88:74:29:30:f4:b4:01:44:bb:44:d1:c5:4d:c5:cf:
f1:d1:32:04:b8:c1:bd:29:64:cc:62:92:d7:b2:58:
1a:e3:3a:39:0c:47:78:97:2a:6d:6a:a1:ec:40:d6:
54:fc:45:0f:65:e8:45:f8:9e:8d:af:4b:cd:eb:71:
b0:50:2b:d7:e3:72:94:3c:95:e4:dc:08:81:aa:17:
2c:fd:22:8d:6c:82:9e:c1:c8:02:78:6c:e5:df:93:
d4:21:7d:1a:c6:af:4a:ba:aa:e3:5c:3d:d3:39:52:
de:81:67:dc:a6:83:32:91:96:8f:32:fe:a5:c6:25:
fe:c0:0a:2b:ff:c0:ce:97:de:85:a1:11:32:2b:a7:
6c:ed:0a:45:ce:3a:10:ee:97:a1:fa:aa:31:9f:7c:
18:f3:ad:56:40:7f:32:6d:7c:1c:a7:97:17:31:fd:
ce:cf:98:7b:e3:8f:84:8b:9e:e2:7e:13:e3:88:a7:
1b:3d:6c:55:17:2f:3c:3e:0c:3c:55:93:b7:4a:18:
5c:42:1a:c2:0d:45:53:f5:95:23:d3:e8:14:7e:f9:
9c:ed:59:ce:76:81:00:d0:0e:bd:a4:cd:92:f8:30:
67:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0C:22:1A:35:5F:88:E6:1B:9C:91:C4:3C:0F:72:9C:89:B9:DD:45
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DE95057885B311F19B0320BACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.186.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:94:e5:a2:21:ad:ac:a4:07:95:7d:7e:e1:27:99:72:f8:53:
e2:95:79:4c:55:3c:ea:a6:cd:92:fc:58:42:54:43:b6:cc:5c:
80:65:7b:7f:2f:f5:da:15:39:7d:41:44:65:9b:82:22:1f:c6:
e3:01:4d:e6:cc:7b:0a:2d:57:26:16:97:25:2c:c9:06:38:08:
bb:34:78:f6:9a:8d:ca:5e:09:6f:b1:76:cc:7b:ae:0a:0b:7d:
fb:63:70:01:35:08:d1:16:ca:7a:91:cd:13:1b:ae:a4:1c:c4:
a4:92:f8:72:7f:80:03:f2:11:70:49:59:c3:3b:59:0d:2c:e8:
03:ea:56:a9:0a:83:2a:86:d3:50:2c:7a:ac:bd:ef:a5:bc:39:
af:b0:4c:b6:73:b9:f7:af:30:85:6c:48:bc:03:d9:4d:20:6f:
d2:0e:92:26:83:bc:92:f2:31:e5:44:27:1c:3c:ab:a0:26:97:
84:d0:bc:c8:1f:6d:05:a3:e2:76:7c:d1:ce:01:77:c1:ea:7f:
27:de:8c:f2:70:55:ed:14:0f:cb:f9:78:89:d6:da:22:72:54:
cf:13:94:b6:ba:a9:b3:cd:6b:bf:38:0a:d1:88:b3:a5:be:96:
ff:e6:2e:58:49:3c:cc:5e:7f:ae:72:0a:21:3f:10:e4:21:49:
05:63:56:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:38:41 2026 by rpki-client