Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F77ABDB49BAA11F1BF413DC4CE1D38B0.roa
File: F77ABDB49BAA11F1BF413DC4CE1D38B0.roa (raw, json)
Hash identifier: BqgtneLmGisQLI+ePGzOC8bmSLI5qkA8pCjXBsgKc98=
Subject key identifier: AF:60:32:AC:6A:0D:65:43:04:45:1D:1B:77:EC:FA:4C:76:1C:93:BE
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 2112
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F77ABDB49BAA11F1BF413DC4CE1D38B0.roa
Signing time: Wed 19 Aug 2026 08:50:03 +0000
ROA not before: Wed 19 Aug 2026 08:49:58 +0000
ROA not after: Sat 19 Aug 2028 08:49:58 +0000
asID: 5065
IP address blocks: 154.16.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Aug 2026 08:55:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8466 (0x2112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 19 08:49:58 2026 GMT
Not After : Aug 19 08:49:58 2028 GMT
Subject: CN=6a856e3b-8b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b8:ea:3a:fb:a0:0b:9e:df:a4:52:8e:e8:7a:
08:20:f8:5d:ee:8f:13:c2:7e:3f:2c:a6:99:86:b6:
52:47:25:3a:ba:c0:18:6b:6c:bc:46:8b:28:a7:ab:
34:d4:fc:13:dd:0f:9f:02:6f:a3:44:5f:ed:b9:95:
b4:ac:52:d4:14:c7:91:12:f5:f0:ce:11:bd:05:8b:
ee:77:98:d8:87:c8:8b:ff:de:9a:09:dd:47:24:47:
e7:6d:0b:33:8a:af:da:f0:f3:96:d5:4a:d5:c8:2d:
8a:62:b5:4f:bf:09:af:53:d0:77:32:39:09:67:0f:
09:f2:ae:2a:38:7a:b8:0d:03:ca:c1:6e:01:7a:b2:
28:d1:74:9f:8b:10:d3:67:17:d4:87:b5:b9:96:cd:
ba:e9:0a:08:42:a7:3b:bf:e4:e9:d8:91:4b:2c:be:
89:0d:6d:f4:6d:6c:1e:87:1a:7c:cb:24:3c:de:3f:
9e:92:16:e9:c3:6a:d2:1e:44:86:fc:92:ba:31:ca:
63:4e:f4:55:4b:6f:6c:b3:3a:52:51:e3:bb:e9:f1:
7d:9c:9e:2c:41:f6:0e:ca:d8:09:78:02:a3:87:fa:
10:c3:89:27:41:94:e5:fb:fd:00:42:37:99:96:e2:
35:63:43:11:e9:0c:14:00:1a:59:14:1d:43:bb:86:
0b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:60:32:AC:6A:0D:65:43:04:45:1D:1B:77:EC:FA:4C:76:1C:93:BE
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F77ABDB49BAA11F1BF413DC4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.61.0/24
Signature Algorithm: sha256WithRSAEncryption
af:ac:3e:99:4c:3f:b9:25:8d:5c:d3:6f:be:5b:82:fb:13:0b:
d1:fa:0f:f2:cf:2a:16:5f:88:3a:27:84:56:53:c4:a9:4a:de:
06:67:54:de:4d:28:5c:91:30:6d:a7:63:c4:01:f0:66:81:c2:
a7:52:aa:1a:5b:22:97:1a:c3:25:5c:fd:58:47:b0:5e:6e:3d:
d8:bf:df:21:50:02:8b:54:b3:20:b2:97:29:3a:3e:d2:3f:a7:
f6:02:19:b5:fd:d0:52:8e:16:56:bd:c0:f8:6f:e2:c3:3a:a1:
c1:53:b3:40:e1:51:4a:6a:36:ac:9f:f4:0e:c4:17:71:3e:24:
af:10:26:a9:da:e9:16:e1:ce:30:45:6f:6e:c8:67:16:99:c9:
21:cd:79:5c:01:54:cd:cf:7b:ce:71:37:3e:8d:58:6e:98:a0:
9c:7e:a3:09:66:b9:2b:c2:9f:cc:db:05:fa:e9:c5:78:fb:0a:
5f:50:65:b8:a8:da:e1:42:5d:63:d6:49:34:8d:9e:9f:15:e7:
72:e5:72:49:a6:e9:c5:41:e4:31:e6:fe:59:ff:0b:7e:ac:c5:
c5:f1:a8:23:a6:14:f9:ee:27:ac:dc:78:c6:2b:16:b0:57:40:
5e:74:0c:34:46:62:2f:55:6c:56:6d:f3:c8:83:63:c0:12:2d:
60:1e:e3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:12:11 2026 by rpki-client