Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FCB0FAEE55E311F1B5E820B2CE1D38B0.roa
File: FCB0FAEE55E311F1B5E820B2CE1D38B0.roa (raw, json)
Hash identifier: c1ww5vGRt2Uq/BOdzcvclmNdHsyXRF/tQDEakiqvIQU=
Subject key identifier: 99:C6:34:1F:50:74:50:35:BF:05:63:C7:C6:B0:86:F0:D7:EF:2A:AD
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1F65
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FCB0FAEE55E311F1B5E820B2CE1D38B0.roa
Signing time: Fri 22 May 2026 13:41:51 +0000
ROA not before: Fri 22 May 2026 13:41:47 +0000
ROA not after: Mon 22 May 2028 13:41:47 +0000
asID: 51082
IP address blocks: 154.16.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 May 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8037 (0x1f65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 22 13:41:47 2026 GMT
Not After : May 22 13:41:47 2028 GMT
Subject: CN=6a105d1f-0aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:14:34:cf:30:8f:6a:7c:d4:0f:66:1d:9a:99:
a4:0e:c6:8d:81:6f:d6:1a:f4:f4:66:f3:a4:4a:32:
22:4f:5c:14:e5:98:a2:f8:00:6b:6b:b7:be:f6:8f:
d8:a8:05:55:a8:e2:9e:87:73:81:09:d2:7f:e1:6d:
27:59:a6:56:4f:3a:4d:9d:6d:d6:ff:36:0b:44:a4:
d6:f2:e6:39:32:65:62:0c:c8:f7:3d:f2:77:4b:24:
3c:48:30:67:33:3a:4c:89:ce:64:6b:d4:79:14:28:
fa:6f:e0:76:44:e3:4f:99:82:19:9a:f3:1a:bd:49:
15:b2:fc:b1:84:5e:a5:08:84:08:05:81:57:f3:ef:
af:69:c9:9c:4f:0c:73:0a:b7:43:01:f9:ee:9d:1a:
af:5c:4e:39:69:0c:e3:9f:91:08:88:45:b1:ba:6e:
4f:60:01:0d:2c:11:ce:3a:47:82:75:05:1b:89:b9:
80:eb:9b:86:db:9c:2f:bc:27:d2:bf:39:87:4d:72:
eb:90:20:ad:ef:31:04:88:5e:a5:48:55:7e:15:99:
cc:42:db:51:41:48:eb:8a:30:d8:17:ee:2c:6f:2d:
42:c8:b4:48:92:37:6b:40:60:eb:86:48:7d:f7:e7:
04:1a:c3:6a:08:1f:eb:5a:48:9d:07:50:fe:84:40:
14:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C6:34:1F:50:74:50:35:BF:05:63:C7:C6:B0:86:F0:D7:EF:2A:AD
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FCB0FAEE55E311F1B5E820B2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.38.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:a5:92:18:24:0e:eb:b7:55:64:2d:fa:e4:98:d4:ee:ca:e6:
d7:48:b4:55:01:d8:9b:64:25:43:80:a5:57:be:f7:0f:12:92:
fb:1a:cd:a7:1f:c1:39:e4:72:a0:52:8b:6e:d7:68:c2:9b:65:
2a:50:b5:fb:c9:9e:34:5c:57:f8:21:30:5d:37:0e:99:0e:63:
61:47:97:c4:2f:d4:87:8c:2e:ee:e2:c1:d4:49:8e:b1:f3:7c:
3d:e6:7b:a8:61:b8:4e:c4:70:f6:73:ab:02:9a:5e:da:c1:b7:
e4:13:fa:17:2b:d0:bc:ec:9b:6d:5d:b1:15:9e:04:42:89:7c:
d2:7d:1e:1c:31:41:69:89:1d:cf:e7:0f:c1:2f:04:92:22:55:
50:81:85:91:f9:0a:32:51:df:89:57:82:27:9a:f3:a7:a1:2e:
31:9c:c8:3d:4c:17:f5:d5:ea:ae:f7:4a:1e:4f:ed:cb:50:73:
bf:d9:3d:ee:f1:2f:57:b4:ac:b5:2e:51:28:2c:ba:66:c5:08:
c7:ac:b9:7d:3c:27:8d:36:18:5f:9f:7d:fc:bd:78:78:d7:3c:
37:fc:5c:a3:cd:e2:4e:b2:c2:09:01:8e:38:90:76:f6:de:5a:
be:30:0d:12:ef:02:67:65:ed:ed:9f:39:d4:dc:19:72:28:9c:
64:a7:1b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:26:38 2026 by rpki-client