Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FB7368BC2CC911F193A52BB8DAE4EC9C.roa
File: FB7368BC2CC911F193A52BB8DAE4EC9C.roa (raw, json)
Hash identifier: HN8yYo87PLj8R/hWsnoY8pcAWX2ctPx4Hh/kSG7Vrmg=
Subject key identifier: 63:89:7F:29:77:B7:3C:C5:37:5F:A6:A8:86:FA:1A:CE:77:44:FD:04
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1EA7
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FB7368BC2CC911F193A52BB8DAE4EC9C.roa
Signing time: Tue 31 Mar 2026 06:22:25 +0000
ROA not before: Tue 31 Mar 2026 06:22:20 +0000
ROA not after: Fri 31 Mar 2028 06:22:20 +0000
asID: 400909
IP address blocks: 154.16.70.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 02 Apr 2026 00:07:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7847 (0x1ea7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 31 06:22:20 2026 GMT
Not After : Mar 31 06:22:20 2028 GMT
Subject: CN=69cb6821-921c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b2:44:65:49:ae:93:bd:32:b7:b2:84:ad:ee:
44:33:cd:6c:bb:74:4b:de:1c:80:f3:ca:a1:2e:5d:
48:09:29:66:f9:99:bd:12:e4:01:d5:c5:3f:c8:1c:
ee:67:50:70:c4:2e:b9:98:64:94:46:9d:50:17:2b:
ae:56:bb:10:27:9c:5f:70:26:08:d3:c6:7e:49:73:
6d:b5:fe:d7:fe:39:20:f2:99:00:59:0c:b2:75:dc:
d9:8f:3f:d1:5a:7e:d5:3f:45:2e:ab:ad:c2:47:6a:
85:60:03:b6:a9:f6:98:24:8e:01:00:95:be:70:35:
05:44:15:5c:23:1b:2d:91:c3:3b:bc:2d:9c:0b:a3:
4c:6b:62:1e:4d:48:b1:7c:0a:7c:39:70:00:bf:04:
1c:b0:84:c6:96:9b:cd:bb:ca:cd:29:ac:39:df:8b:
31:0a:0c:6e:e7:1d:67:2c:c4:59:e8:a4:be:69:02:
74:7a:8f:d7:c3:46:ef:c1:70:64:74:d8:2f:3a:71:
06:d2:ad:a2:6c:ae:5c:f0:3b:85:c9:25:60:f2:a4:
6a:69:7a:ff:d5:94:51:dd:66:b2:59:8a:7c:45:0f:
26:8c:3c:77:9f:c6:8e:7a:94:1b:61:2a:da:14:d5:
a4:88:e7:ce:0e:6f:2d:41:05:47:e8:c6:6f:37:13:
79:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:89:7F:29:77:B7:3C:C5:37:5F:A6:A8:86:FA:1A:CE:77:44:FD:04
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FB7368BC2CC911F193A52BB8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.70.0/23
Signature Algorithm: sha256WithRSAEncryption
54:16:87:b0:45:4e:e9:57:11:d4:ca:13:bd:ed:91:17:67:de:
6d:0d:1a:96:15:f3:ed:99:46:b9:05:80:3e:35:95:c8:39:8c:
7a:92:d7:ed:f7:db:37:00:a4:d3:38:21:cf:ae:4b:e6:3e:19:
3a:cc:95:54:a3:4a:c6:5b:0f:52:5f:6b:4b:f4:40:92:9f:f0:
b5:44:4c:3e:c3:74:b0:9d:3b:6a:03:cd:3c:fc:14:6b:0d:2a:
62:86:cc:36:ce:ce:5b:e9:78:1f:06:c1:76:4d:cb:f4:47:85:
08:4b:1e:34:65:ad:5d:f6:d4:fa:6d:b5:7b:a2:6b:57:75:55:
e1:32:a0:1f:f5:08:20:56:bc:a1:d9:b1:d6:52:6f:23:78:7f:
c0:b5:17:52:b7:03:bc:74:fd:4a:6f:74:10:44:7f:cb:1a:23:
dd:04:0e:3e:c3:85:79:72:5a:82:73:f0:d3:8e:20:e1:64:58:
f7:93:e6:75:ce:c7:d8:d4:e3:a3:f3:85:81:cf:74:74:e1:6c:
3d:19:1a:14:8e:ea:5e:dd:0e:56:88:59:0a:d4:fe:62:2e:e8:
eb:5c:04:79:68:92:cd:d1:14:76:9d:c1:37:c5:98:8d:82:3b:
f3:35:72:7e:11:a6:c6:a3:f4:ce:40:46:86:1b:2f:69:a0:2c:
4a:55:da:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 13:23:21 2026 by rpki-client