Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DFCC6B8E917F11F183154B1CCF1D38B0.roa
File: DFCC6B8E917F11F183154B1CCF1D38B0.roa (raw, json)
Hash identifier: NimdL5M9eY6yTcaW0m7rGeYe9G8mKFOPHIRln2FhYfY=
Subject key identifier: C1:BD:68:49:45:91:62:1F:9B:CF:25:06:6D:B5:DE:D8:35:E1:E6:08
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 20DE
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DFCC6B8E917F11F183154B1CCF1D38B0.roa
Signing time: Thu 06 Aug 2026 10:16:23 +0000
ROA not before: Thu 06 Aug 2026 10:16:19 +0000
ROA not after: Sun 06 Aug 2028 10:16:19 +0000
asID: 402265
IP address blocks: 154.16.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8414 (0x20de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 6 10:16:19 2026 GMT
Not After : Aug 6 10:16:19 2028 GMT
Subject: CN=6a745ef7-5aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d0:fb:01:aa:c4:05:08:b5:b5:ab:d8:13:b0:
76:e2:19:27:61:09:8e:6f:c4:ff:4b:05:84:0b:be:
e8:cc:21:a0:e6:2a:06:9f:5c:d8:39:d2:83:48:33:
cf:b4:ec:d5:55:b0:e3:79:a0:1d:8b:78:56:15:d4:
14:80:80:91:c3:6a:68:af:c5:d8:03:4b:87:0e:01:
24:de:08:be:41:29:65:c0:32:11:7f:8b:7e:5c:5e:
ff:06:f5:57:9d:e3:af:96:34:5a:e7:ef:1d:02:cc:
25:a5:ac:b3:22:1e:39:99:ee:d9:c6:af:54:60:15:
ea:a7:d0:26:55:bb:b3:d6:71:eb:77:96:47:2c:c9:
ea:2c:59:78:e1:db:5b:62:11:f8:5a:72:c0:e4:af:
f4:a6:94:fc:63:e1:2e:83:86:9e:c1:49:dd:29:7e:
e2:06:ea:8b:74:0d:41:42:ce:be:4a:5f:7f:79:6a:
0d:d9:2d:4e:36:10:a0:ab:3c:ad:33:50:ac:70:9d:
7b:f3:e9:e3:3b:03:7c:34:a1:3a:a5:41:62:3b:0c:
f3:98:06:19:d6:55:2a:ff:91:50:a7:f6:0e:a0:78:
f6:6c:b9:06:1e:04:74:c7:01:fd:d6:ba:e6:25:54:
cd:e3:97:02:b3:4c:91:7d:a5:56:72:13:82:72:b9:
d5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BD:68:49:45:91:62:1F:9B:CF:25:06:6D:B5:DE:D8:35:E1:E6:08
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DFCC6B8E917F11F183154B1CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.71.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:2b:bc:c5:71:3d:4f:98:53:be:4d:5c:84:c0:09:85:f5:9d:
e1:97:a7:5f:04:02:29:6d:96:58:b4:d3:81:e4:a2:5d:a2:27:
a5:c7:11:e3:88:6c:e5:87:7b:06:3a:b5:6b:5d:0b:de:62:06:
90:83:dd:da:7d:b4:3d:84:5a:3b:67:78:6e:70:31:d2:71:60:
df:ee:d2:97:3d:af:82:e5:01:3b:dc:5b:1a:65:dd:ac:18:f5:
89:5f:7e:03:a1:fd:25:06:5a:54:da:8c:85:f9:77:24:3a:39:
3d:93:94:e7:52:b2:df:1a:f4:c2:7b:b7:c1:b2:c0:13:ca:6a:
e4:fc:cc:1b:3e:45:75:df:6d:51:9c:21:cf:55:f4:1f:02:cb:
00:e5:2b:37:99:8f:3f:d0:e0:d1:5a:32:fc:63:93:46:4e:69:
5d:25:43:75:b0:9b:a7:32:0e:9d:14:32:92:40:1d:05:1e:69:
77:af:9d:2c:13:58:df:2f:2f:a9:ad:b3:31:55:7b:a3:29:80:
c7:c1:34:32:e9:87:61:83:e4:2f:93:61:b6:da:01:9f:32:ab:
09:5b:f9:61:bf:75:5c:aa:aa:51:54:ad:d8:4e:fc:90:24:9b:
31:37:f1:82:83:00:e3:69:36:77:6b:d0:a7:42:66:4b:ae:14:
6d:04:00:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 00:28:41 2026 by rpki-client