Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F6D9C2084A3611F18C5417A1CE1D38B0.roa
File: F6D9C2084A3611F18C5417A1CE1D38B0.roa (raw, json)
Hash identifier: SlJnSCiECUhM7T2Obq3bgO11gEJqyyC4sOaKgRQOWDI=
Subject key identifier: 30:A7:FD:B7:83:00:C3:1E:CE:15:5D:9B:96:8A:1C:C7:87:58:45:53
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1F24
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F6D9C2084A3611F18C5417A1CE1D38B0.roa
Signing time: Thu 07 May 2026 17:05:36 +0000
ROA not before: Thu 07 May 2026 17:05:31 +0000
ROA not after: Sun 07 May 2028 17:05:31 +0000
asID: 23532
IP address blocks: 154.16.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7972 (0x1f24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 7 17:05:31 2026 GMT
Not After : May 7 17:05:31 2028 GMT
Subject: CN=69fcc660-4209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a4:0b:bf:30:d5:01:1a:bd:b3:d5:9b:33:cf:
8b:59:ce:b8:6b:87:86:e4:c6:28:c9:81:24:2c:ae:
67:88:94:7d:55:69:d4:29:17:78:ae:77:64:dd:76:
9d:86:51:90:5f:5d:00:3a:b9:53:98:01:14:7c:94:
fb:9e:d5:26:a7:43:dc:dc:8e:7d:20:8d:f8:84:32:
1b:d4:ae:34:36:c7:33:e4:86:05:23:75:80:8b:b3:
e0:0f:00:d7:42:25:1a:fc:9c:67:33:1c:e6:34:20:
35:8f:3d:52:9e:3c:ae:cf:f5:93:77:7c:c7:18:01:
03:e2:a6:5b:be:4c:f5:4b:80:85:83:05:58:b9:05:
95:de:87:ed:b5:c5:17:c3:82:9e:f9:bd:20:46:6f:
b8:e7:4e:6b:a4:16:bd:f9:9b:e4:59:a0:af:66:8f:
ca:9f:05:30:b2:10:ef:98:a2:ce:5a:e3:be:3f:e5:
7d:f7:30:ae:5e:7a:a6:3c:38:e7:ee:cc:c4:46:67:
bb:88:88:40:3e:29:36:cf:65:73:7f:c0:1b:35:db:
0a:32:52:e1:c2:ce:e5:65:aa:12:fb:f8:47:23:90:
ec:21:9b:ec:ef:48:7e:a8:48:27:3f:bf:1d:ae:03:
81:e6:0f:f1:49:1c:05:bd:bb:ad:8d:ee:d1:f4:f5:
e1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A7:FD:B7:83:00:C3:1E:CE:15:5D:9B:96:8A:1C:C7:87:58:45:53
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F6D9C2084A3611F18C5417A1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.43.0/24
Signature Algorithm: sha256WithRSAEncryption
13:63:98:2f:89:ed:0c:31:20:9f:16:65:8d:72:da:17:3e:8f:
c5:6b:fe:27:42:cb:d9:9a:4f:78:64:61:42:90:76:7b:07:47:
ad:84:59:de:47:32:1a:8f:f9:6d:c6:a3:6b:5f:a5:ec:dd:55:
0d:6d:82:dd:b5:97:32:10:6b:3e:b4:15:d3:9a:d5:3e:01:0c:
84:47:8c:e5:77:0e:5f:56:3f:bc:98:c0:c8:73:52:a3:a5:1a:
4a:5a:65:0b:1b:60:80:54:df:02:fc:cc:68:93:73:f2:ef:07:
af:1a:8a:74:78:e8:f9:7d:42:69:53:3c:44:4d:41:91:bf:a9:
b0:1b:da:14:3d:6d:22:53:1f:a6:fe:14:bf:48:1d:5a:0a:5b:
82:f3:1a:e3:8c:b1:42:50:e9:47:63:62:b5:24:f5:7e:e6:e3:
cd:e8:39:06:d8:10:79:16:e4:6a:f2:0a:48:e7:0b:e1:ee:2f:
5b:26:57:4c:8a:10:c5:ad:31:ec:32:0f:fb:ac:4f:38:f7:7a:
9d:97:ee:83:48:df:5b:bf:b9:e1:59:b4:e3:2b:02:3e:52:a2:
24:5c:30:e2:ee:d0:1e:60:0b:0e:cf:1a:ee:4a:49:60:b7:12:
09:48:59:10:18:6d:86:0a:8b:4a:69:35:f2:24:8e:c7:9f:87:
9e:ff:11:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 04:55:12 2026 by rpki-client