Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F939B9068D7D11F1905805CECE1D38B0.roa
File: F939B9068D7D11F1905805CECE1D38B0.roa (raw, json)
Hash identifier: y5FHnt3n8LtwmFIXVBPvlxsIMnw9nWa3CPp10kSCc8w=
Subject key identifier: 4B:8E:35:E5:62:AB:92:B2:A4:60:02:E4:18:4E:36:B2:0B:1F:77:92
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 2093
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F939B9068D7D11F1905805CECE1D38B0.roa
Signing time: Sat 01 Aug 2026 07:52:42 +0000
ROA not before: Sat 01 Aug 2026 07:52:38 +0000
ROA not after: Tue 01 Aug 2028 07:52:38 +0000
asID: 834
IP address blocks: 154.16.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Aug 2026 07:52:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8339 (0x2093)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 1 07:52:38 2026 GMT
Not After : Aug 1 07:52:38 2028 GMT
Subject: CN=6a6da5ca-0b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6a:7b:5d:81:0f:09:94:22:de:e4:b1:09:68:
ed:35:67:90:4e:2b:da:f9:78:01:90:e9:1e:00:ce:
55:00:dd:cc:6c:87:68:8c:31:22:78:d2:d1:c3:4f:
16:4c:f7:0f:8b:52:7f:c2:38:8d:fd:45:ad:9a:e8:
31:43:69:b3:2e:e2:f9:d7:d4:3d:98:92:66:ac:aa:
63:e5:e6:c2:c5:40:6e:e6:da:9b:93:dc:64:cd:a7:
3f:d1:74:a7:10:e3:2b:aa:4e:65:fa:95:a7:e0:58:
fe:ae:9a:a4:42:a6:3d:50:8b:f6:2f:df:83:a1:9b:
51:36:1f:73:39:62:18:6f:2d:b7:b6:e2:7d:d2:51:
12:f3:49:f9:44:ff:9e:18:57:e2:49:2b:b1:e4:5d:
a6:2a:d9:c6:73:c1:ad:6c:73:c6:e8:4a:b3:f0:8f:
15:ec:2d:02:9a:e2:22:0f:81:d3:48:de:47:59:56:
e3:6e:b7:4f:8e:86:44:03:7d:62:81:bb:a2:94:26:
0d:31:6d:d2:45:e5:de:4c:a2:fb:52:30:a6:49:0a:
e9:dc:e8:63:e0:fe:02:72:01:c5:e5:f8:db:29:ae:
73:c7:db:6c:97:97:73:05:33:4a:3c:ec:e4:d3:c6:
97:62:1c:7b:e2:32:31:34:e3:35:27:52:d5:06:2e:
8e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8E:35:E5:62:AB:92:B2:A4:60:02:E4:18:4E:36:B2:0B:1F:77:92
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F939B9068D7D11F1905805CECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.81.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:05:cd:c9:7f:24:f5:4b:c5:4b:3f:10:e4:43:39:38:04:49:
f7:03:9c:b0:f3:81:83:bc:52:3a:e6:cf:95:84:72:02:95:45:
80:42:cf:64:bc:d2:45:06:35:f5:5e:37:20:83:2a:e9:d2:32:
dd:48:7e:3a:57:d8:09:10:ec:79:38:60:b1:f3:a0:6e:f0:ad:
c9:8b:f1:2f:06:ef:87:29:cc:52:22:f7:f2:39:59:1b:4a:bc:
f5:a7:1c:04:fe:74:ef:f0:fa:77:1a:d8:2a:7f:72:23:9e:e4:
f5:7c:27:2b:21:71:e5:8d:78:ec:b2:71:f9:56:e9:c5:9c:db:
ae:00:02:03:65:0e:ec:01:00:16:68:e5:4e:cf:08:c4:69:e5:
05:21:13:2b:10:0d:69:50:8d:34:0a:05:1a:76:cb:bc:89:2a:
f6:06:66:dd:1b:99:2f:4d:49:4d:db:b7:e8:35:b7:33:d8:ca:
7b:b6:e1:fd:f3:0c:ed:a8:1a:be:48:e9:81:3b:ac:bb:f9:81:
55:db:5a:d7:28:c7:cc:74:ee:15:d2:7f:51:8b:b2:76:b7:ee:
b3:08:63:b0:d4:e9:e7:24:93:4b:02:b7:08:4f:05:8f:f0:63:
f2:83:6f:74:e5:14:34:dc:17:97:b3:77:ff:ed:d0:cd:fb:8f:
b8:20:74:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 02:14:52 2026 by rpki-client