Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F141844A5A6A11F18F0AFCC4CE1D38B0.roa
File: F141844A5A6A11F18F0AFCC4CE1D38B0.roa (raw, json)
Hash identifier: Sur/dW41g9+biCs6+TQmF3tspq4CZVeWxhiaoKkRKng=
Subject key identifier: 0E:03:BE:32:0F:A3:94:77:14:AA:4B:28:1F:B0:D8:4A:00:DA:B4:4A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1F80
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F141844A5A6A11F18F0AFCC4CE1D38B0.roa
Signing time: Thu 28 May 2026 07:57:59 +0000
ROA not before: Thu 28 May 2026 07:57:54 +0000
ROA not after: Sun 28 May 2028 07:57:54 +0000
asID: 214266
IP address blocks: 154.16.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 30 May 2026 00:07:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8064 (0x1f80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 28 07:57:54 2026 GMT
Not After : May 28 07:57:54 2028 GMT
Subject: CN=6a17f587-68b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f3:c8:71:87:ad:55:5e:1e:14:dd:ca:fa:7d:
ec:2c:9f:dd:1a:3c:a4:3c:12:74:25:fb:8e:71:b8:
de:e3:09:d7:f2:9c:59:26:c7:c2:96:4b:67:64:75:
d1:c8:a7:4f:cf:e6:84:77:80:2d:e5:84:ae:4d:98:
33:19:af:ef:73:28:1d:d0:60:d4:db:61:a7:91:6f:
17:1c:f9:d6:55:7d:4b:d5:cd:10:ed:37:75:3c:6c:
a8:2a:21:4f:c7:30:d1:98:aa:46:e5:d0:2c:6d:1d:
73:12:1d:e6:07:a8:7c:d2:b5:e3:7e:be:0b:c8:66:
46:e0:71:f1:4e:da:56:0d:68:d5:0d:70:f3:95:6d:
4d:48:45:3b:c2:a7:51:44:d4:85:a1:67:1b:ee:81:
e1:f3:56:44:69:91:6a:a1:be:7e:80:2a:19:ce:5e:
08:60:c4:aa:2f:0a:a1:a1:05:a2:17:57:98:72:43:
b5:f0:19:4c:76:e2:79:37:e3:23:f6:d9:86:fb:a4:
61:8e:b5:4f:bd:a9:43:9c:31:ba:6e:6f:1e:ed:c8:
8e:f2:3c:b1:1e:84:4d:79:fa:36:07:d0:f6:8c:02:
17:4c:81:b0:02:39:ea:9c:a7:5d:74:e7:a4:64:b4:
f6:0e:d6:d1:6a:b3:8d:9a:75:9e:04:13:77:81:bd:
e5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:03:BE:32:0F:A3:94:77:14:AA:4B:28:1F:B0:D8:4A:00:DA:B4:4A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F141844A5A6A11F18F0AFCC4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.125.0/24
Signature Algorithm: sha256WithRSAEncryption
14:0d:00:da:45:3c:96:98:e4:cb:6f:9a:46:9c:76:02:25:12:
a9:e4:fa:79:35:21:b6:47:62:0b:54:e2:91:65:f2:8f:16:20:
e2:d3:c9:0c:c1:a8:55:69:21:a2:c7:b6:3c:fb:bb:ca:49:29:
a1:9a:9e:10:72:01:57:ac:c9:bc:db:a2:38:58:8d:be:67:cb:
2f:04:87:94:89:e2:b5:ed:2a:d9:f6:fa:b1:37:8b:a2:7d:19:
69:e4:6e:e3:50:bd:7e:29:ba:8e:4f:87:e5:2d:a5:3a:7b:29:
76:6b:16:f2:de:73:25:f0:59:b4:f3:59:97:cc:a2:5a:5a:50:
b5:ac:2e:89:f1:93:1a:c7:d7:4d:b8:ac:49:47:a4:a7:48:ff:
a2:83:f5:9a:5c:83:a9:f2:35:66:2e:75:e1:cd:b4:08:ef:f2:
ff:c2:9c:5f:98:56:ca:16:e2:18:f4:a1:ca:25:52:ff:67:92:
cc:4d:e0:60:2f:37:8c:c1:36:b5:81:66:85:f3:26:9d:e6:fe:
34:6b:29:2a:94:e8:ba:30:79:2a:52:d8:1a:6e:3a:c2:5f:93:
0a:40:0a:2f:5e:58:6e:bd:3a:a6:f7:90:21:ea:18:32:0a:b6:
b6:32:a8:c3:67:08:85:51:1d:22:e1:16:f5:40:f4:21:dd:65:
8c:dc:b4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 22:40:39 2026 by rpki-client