Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/1E9ACD3A89D111F1AFF6CECBCE1D38B0.roa
File: 1E9ACD3A89D111F1AFF6CECBCE1D38B0.roa (raw, json)
Hash identifier: +Untrg0WK7+uUtVUE8OjSjSfZ2FmZtLhWuXYFkJyavw=
Subject key identifier: 61:E6:12:B4:C6:3E:8D:8E:E9:CA:60:73:E9:5B:1B:F3:28:E1:5B:95
Certificate issuer: /CN=F3655EE4AF/serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
Certificate serial: 09BF
Authority key identifier: 0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/1E9ACD3A89D111F1AFF6CECBCE1D38B0.roa
Signing time: Mon 27 Jul 2026 15:37:48 +0000
ROA not before: Mon 27 Jul 2026 15:37:44 +0000
ROA not after: Mon 06 Dec 2032 15:37:44 +0000
asID: 37650
IP address blocks: 154.66.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2495 (0x9bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3655EE4AF, serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
Validity
Not Before: Jul 27 15:37:44 2026 GMT
Not After : Dec 6 15:37:44 2032 GMT
Subject: CN=6a677b4c-cfa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f5:22:ea:3c:af:f9:8c:db:5e:3b:b7:22:92:
3c:1d:44:21:c0:3f:71:71:db:99:6f:9f:b8:4d:30:
54:17:5d:6c:e3:49:1f:c6:ca:ca:4f:04:5d:b0:a8:
70:8e:2f:0a:41:aa:15:e8:93:b7:71:2b:d9:0e:0a:
45:1b:28:79:a9:87:fd:67:ec:8b:95:af:7a:b8:69:
70:f2:6c:93:03:48:fd:7a:92:d1:f7:41:f7:97:ac:
42:0b:fd:f4:b5:79:27:2b:aa:87:57:ab:3c:4c:d8:
98:74:78:cb:2a:fe:69:dc:2c:29:8e:06:1b:81:65:
0f:d3:fc:08:74:d0:16:9a:91:c8:a1:b7:25:eb:c1:
8c:45:da:c8:4e:ee:d1:ff:9e:de:44:1e:0d:69:52:
1e:bd:4b:7e:51:da:4e:8f:a9:8e:b8:2e:5c:99:55:
b9:3a:85:c5:3b:96:57:a7:e5:94:d5:af:8d:11:f2:
99:2a:03:b1:94:d9:fc:87:43:4c:06:da:b5:6a:e5:
52:0d:7c:e2:59:93:52:df:2c:b7:ac:49:85:fe:1c:
83:3e:59:87:67:c2:95:e9:aa:4c:4b:3c:3b:1d:55:
09:bf:a4:76:59:96:b7:e9:d4:22:6d:8e:f8:45:81:
84:7f:26:8c:34:e6:7a:bd:98:ec:73:2f:4c:d0:02:
88:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E6:12:B4:C6:3E:8D:8E:E9:CA:60:73:E9:5B:1B:F3:28:E1:5B:95
X509v3 Authority Key Identifier:
keyid:0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/1E9ACD3A89D111F1AFF6CECBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.66.200.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:21:c4:1e:cc:e2:eb:44:37:9b:6a:e0:6f:4f:80:18:b0:50:
4d:1c:a3:69:8d:c5:8a:92:d0:f9:71:cc:66:4a:b2:38:f8:60:
be:78:75:c2:9d:38:01:a5:1c:e2:63:ba:bc:18:76:f5:51:1b:
83:cc:fb:cd:23:09:04:0b:b4:ac:d7:1c:cc:a8:fb:82:58:5f:
a3:2a:d5:60:e6:73:f2:14:55:c7:a1:cc:f3:c6:54:34:c9:d7:
5b:0a:7e:3c:22:75:17:e4:7b:15:77:ef:38:00:dd:04:59:22:
22:fa:98:f1:f7:a8:36:e8:4c:96:08:ff:0b:ca:6a:e5:41:3d:
68:05:e3:bb:29:bf:75:7d:75:fc:10:0f:32:59:44:48:55:3d:
0d:2d:68:ab:b8:dd:19:f5:84:b9:f1:d7:62:18:dd:62:a6:a1:
ab:bb:c3:40:f4:86:87:72:88:31:b2:c8:0c:6c:72:bb:e0:d5:
26:7d:b3:c9:28:58:da:4a:a6:15:f8:ea:34:84:05:e3:5f:48:
aa:b9:e0:64:b9:fa:60:25:55:46:99:4b:f5:59:5a:4d:5a:03:
0a:5c:d6:a4:72:71:5f:35:83:ee:5c:81:c3:5c:b9:24:8a:4a:
65:10:1e:5b:f9:5e:a5:bb:ba:77:24:f0:74:db:e5:82:75:13:
fe:3f:a8:3b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCb8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTVFRTRBRjExMC8GA1UEBRMoMEE2N0IxMEUxNjlBQUZBMzAzNTBFMzc3OTMxMzMx
RDkxRjM5QUI5NjAeFw0yNjA3MjcxNTM3NDRaFw0zMjEyMDYxNTM3NDRaMBgxFjAU
BgNVBAMTDTZhNjc3YjRjLWNmYTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDR9SLqPK/5jNteO7cikjwdRCHAP3Fx25lvn7hNMFQXXWzjSR/GyspPBF2w
qHCOLwpBqhXok7dxK9kOCkUbKHmph/1n7IuVr3q4aXDybJMDSP16ktH3QfeXrEIL
/fS1eScrqodXqzxM2Jh0eMsq/mncLCmOBhuBZQ/T/Ah00BaakcihtyXrwYxF2shO
7tH/nt5EHg1pUh69S35R2k6PqY64LlyZVbk6hcU7llen5ZTVr40R8pkqA7GU2fyH
Q0wG2rVq5VINfOJZk1LfLLesSYX+HIM+WYdnwpXpqkxLPDsdVQm/pHZZlrfp1CJt
jvhFgYR/Jow05nq9mOxzL0zQAohFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUYeYS
tMY+jY7pymBz6Vsb8yjhW5UwHwYDVR0jBBgwFoAUCmexDhaar6MDUON3kxMx2R85
q5YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU1RUU0Lzk5QTU4OTFFMTgxNTExRUE4NjZBMzE3RUY4QUVBMjI4L0NtZXhE
aGFhcjZNRFVPTjNreE14MlI4NXE1WS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NtZXhEaGFhcjZNRFVPTjNreE14MlI4NXE1WS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjU1RUU0Lzk5QTU4OTFFMTgxNTExRUE4NjZBMzE3RUY4
QUVBMjI4LzFFOUFDRDNBODlEMTExRjFBRkY2Q0VDQkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKaQsgwDQYJKoZIhvcNAQEL
BQADggEBALEhxB7M4utEN5tq4G9PgBiwUE0co2mNxYqS0PlxzGZKsjj4YL54dcKd
OAGlHOJjurwYdvVRG4PM+80jCQQLtKzXHMyo+4JYX6Mq1WDmc/IUVcehzPPGVDTJ
11sKfjwidRfkexV37zgA3QRZIiL6mPH3qDboTJYI/wvKauVBPWgF47spv3V9dfwQ
DzJZREhVPQ0taKu43Rn1hLnx12IY3WKmoau7w0D0hodyiDGyyAxscrvg1SZ9s8ko
WNpKphX46jSEBeNfSKq54GS5+mAlVUaZS/VZWk1aAwpc1qRycV81g+5cgcNcuSSK
SmUQHlv5XqW7unck8HTb5YJ1E/4/qDs=
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:08:20 2026 by rpki-client