Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FC3D77DA7AC911F1A64D1FC6CE1D38B0.roa
File: FC3D77DA7AC911F1A64D1FC6CE1D38B0.roa (raw, json)
Hash identifier: OeLv1e/eXLg5Gk0KeI/69Te4MewB0I/JN7323w8qfIc=
Subject key identifier: FB:EB:C3:CB:5F:9E:CB:4C:EB:C4:36:29:A4:75:B9:8D:8C:B2:CE:73
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 2040
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FC3D77DA7AC911F1A64D1FC6CE1D38B0.roa
Signing time: Wed 08 Jul 2026 12:38:57 +0000
ROA not before: Wed 08 Jul 2026 12:38:52 +0000
ROA not after: Sat 08 Jul 2028 12:38:52 +0000
asID: 212238
IP address blocks: 154.16.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Jul 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8256 (0x2040)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 8 12:38:52 2026 GMT
Not After : Jul 8 12:38:52 2028 GMT
Subject: CN=6a4e44e1-8845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:1d:4c:bd:ff:8b:5c:85:b9:66:ac:12:21:
30:0b:b5:3e:8a:3b:72:ff:d2:27:18:ee:50:14:52:
2a:b1:9b:e7:6c:71:b4:81:44:4b:00:d5:bf:39:8c:
49:f8:15:ef:17:3c:36:c2:9b:01:ea:b3:7c:ce:4e:
15:3f:49:e1:7f:b3:71:6c:3f:7e:cd:30:d9:51:c7:
d8:a0:24:d2:67:47:66:fd:43:c8:b3:4e:1c:6b:62:
e3:7e:94:1b:03:5b:8e:95:f6:88:72:30:21:87:e2:
50:99:2a:16:db:85:47:59:ac:77:c7:e7:05:8e:71:
7c:14:bc:f8:3d:39:15:22:02:aa:6c:40:ac:55:3e:
f8:9f:6e:09:3b:2f:5d:43:9c:f8:f8:4f:e3:c9:f0:
43:5b:8b:71:0b:b2:78:2b:d1:38:6f:d4:65:75:f8:
f5:e8:72:3c:8a:7b:cc:8d:00:42:be:96:38:5a:be:
42:c8:9c:9b:65:cf:bc:12:1a:7a:c0:b1:d0:98:c0:
8c:61:e1:66:e3:b7:f3:f9:73:19:92:d4:51:c3:f5:
ac:42:39:3b:0e:6e:f4:e5:12:6f:a9:05:7a:cd:11:
a4:0b:e9:54:1b:57:2e:fe:5a:3b:18:54:f4:1c:af:
42:64:6d:ef:5d:60:18:c0:3f:83:2d:73:99:1d:55:
ba:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EB:C3:CB:5F:9E:CB:4C:EB:C4:36:29:A4:75:B9:8D:8C:B2:CE:73
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FC3D77DA7AC911F1A64D1FC6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.190.0/24
Signature Algorithm: sha256WithRSAEncryption
81:41:19:15:51:77:57:9f:65:93:18:e6:c7:9d:f3:75:85:7d:
68:b7:76:e4:d5:b2:07:fd:24:67:4d:04:b9:25:77:ee:22:2e:
57:3d:57:22:eb:06:f0:6b:90:25:9b:8a:7f:07:8a:08:bf:c0:
43:6c:db:13:2e:40:b0:8b:be:f8:f5:f1:6e:03:5e:77:1f:7a:
6e:23:4e:b5:23:04:43:ce:11:58:6c:52:78:ea:54:fd:0f:af:
76:2e:6e:24:de:c1:ad:37:b9:cf:f5:e5:7e:7f:85:f8:4d:38:
4b:8c:ec:9d:bc:d8:48:f9:bf:9b:f4:f8:d4:2e:32:e4:ad:7d:
d7:c6:43:12:3d:b5:e9:23:c0:7d:0a:c6:6f:1b:8c:4d:dd:a5:
13:45:9e:e1:7f:84:5a:49:65:50:22:56:a8:f4:02:4b:5b:7b:
ca:30:2c:d6:90:5b:ad:0b:23:a5:bd:7c:8b:90:c5:5b:01:30:
0b:f2:08:e6:f3:7c:d5:14:e1:b8:f7:04:5b:91:9d:fc:3a:73:
49:9f:23:3d:70:51:81:19:3f:5c:0b:85:6f:83:0b:01:2e:e7:
3a:2c:9b:e0:b4:ed:03:29:e6:6c:ad:87:f5:0b:6f:11:5a:1a:
7c:7f:f6:e1:07:0a:2a:d9:f6:55:3c:a0:71:0b:f4:bd:e0:ca:
d6:74:fe:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:21:02 2026 by rpki-client