Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FD3A4DFC324411F1929ABF9ADAE4EC9C.roa
File: FD3A4DFC324411F1929ABF9ADAE4EC9C.roa (raw, json)
Hash identifier: G+ClswERSiLCMro2/5TJZIyRHzRbKCGbIQZoQKwFkyU=
Subject key identifier: 20:F5:31:85:D7:0E:CA:74:B1:1C:15:4C:A5:42:B1:94:D7:9E:20:38
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1EBA
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FD3A4DFC324411F1929ABF9ADAE4EC9C.roa
Signing time: Tue 07 Apr 2026 05:45:32 +0000
ROA not before: Tue 07 Apr 2026 05:45:26 +0000
ROA not after: Fri 07 Apr 2028 05:45:26 +0000
asID: 60542
IP address blocks: 154.16.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 Apr 2026 05:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7866 (0x1eba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 7 05:45:26 2026 GMT
Not After : Apr 7 05:45:26 2028 GMT
Subject: CN=69d499fb-ec47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c4:d8:07:87:f7:26:d2:db:30:90:41:dc:c3:
38:8b:73:b7:d5:f3:3c:fc:79:a5:1f:aa:30:a1:28:
fc:6a:78:b1:75:c5:37:cf:f1:9e:b3:0a:cb:07:c4:
29:ae:18:c9:05:b7:94:84:21:f8:45:a0:03:41:aa:
87:56:39:8b:d2:49:45:87:37:3c:0e:df:70:d7:60:
97:c5:d4:76:51:fb:eb:99:fb:c9:e0:02:e1:10:01:
36:e8:2b:90:da:18:ec:02:45:22:35:89:39:76:6a:
ba:ed:3e:e5:5b:85:29:45:24:21:62:a3:71:51:77:
91:91:a3:4e:73:34:be:c5:a3:81:46:33:2f:b9:97:
89:fc:e4:33:2c:7f:45:13:6d:7a:9a:2c:b7:ac:a1:
ca:65:be:e2:27:35:4e:5b:35:b3:dc:18:00:9c:66:
60:18:a0:81:09:43:13:ee:00:c8:6e:d3:de:0e:ba:
4a:24:cc:a3:88:c7:29:97:f9:9a:a6:e4:1b:83:19:
12:38:73:fd:1f:e8:4b:f4:04:53:28:c7:c6:a5:f8:
fb:fc:e5:98:d6:96:f3:3c:85:21:73:e2:64:05:29:
1b:0b:24:24:3c:0f:9f:70:6c:59:d5:ca:5a:0e:ec:
66:09:c6:a1:ed:bf:5c:60:eb:34:6b:8b:0d:b7:3d:
d8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F5:31:85:D7:0E:CA:74:B1:1C:15:4C:A5:42:B1:94:D7:9E:20:38
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FD3A4DFC324411F1929ABF9ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.123.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:84:b2:ba:c9:d3:cf:fc:c3:1e:fc:6e:36:90:0e:9e:ce:c7:
91:56:bf:30:10:91:ca:27:e2:6d:36:fa:e7:cf:fa:40:96:3f:
c6:39:2c:62:e9:31:dd:03:3c:43:4a:a0:c3:e2:b8:ac:92:40:
2e:03:52:58:ac:78:35:14:5e:ca:67:77:d8:81:9a:0e:f1:70:
18:4a:f0:2b:ed:66:b7:93:7d:cd:9d:c9:b2:fd:47:77:af:44:
75:d9:da:6d:0a:15:52:93:53:7c:0a:4b:0f:a8:dc:82:62:9a:
07:d3:8a:be:dd:79:50:7f:43:9a:3f:b3:b2:af:2d:ef:dc:fc:
49:13:db:f7:c0:88:03:a3:00:59:b2:1c:8b:97:5e:59:90:2e:
f7:57:a4:37:8e:6a:f0:36:cf:af:9e:69:49:5c:3d:fc:9b:fb:
93:d5:8d:f4:f5:b5:a2:e7:a7:46:a6:fd:d3:40:d7:ae:5d:97:
1f:a4:18:7f:8b:9a:98:02:05:72:e5:aa:b7:47:d7:c7:ba:12:
b3:06:84:01:e9:2c:39:1c:ae:e5:90:5e:d0:12:74:33:7f:e2:
da:57:48:9a:85:2b:fa:9d:ac:4f:b6:d8:c0:15:ee:87:35:ac:
db:81:f5:dd:8b:97:69:e4:44:3b:9b:50:44:7b:1b:fd:45:2e:
49:22:85:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 18:27:31 2026 by rpki-client