Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/7D97AFC0552311F18C4E5A19CF1D38B0.roa
File: 7D97AFC0552311F18C4E5A19CF1D38B0.roa (raw, json)
Hash identifier: HPUJELzm6QYKUxc7EThIZngZppM/cTN5/ffnqB4Ryv4=
Subject key identifier: A6:CA:34:2D:13:10:B2:7D:AB:70:B8:A4:72:D0:38:35:25:B8:7B:05
Certificate issuer: /CN=F3681ED0AF/serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
Certificate serial: 04CC
Authority key identifier: 4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/7D97AFC0552311F18C4E5A19CF1D38B0.roa
Signing time: Thu 21 May 2026 14:43:55 +0000
ROA not before: Thu 21 May 2026 14:43:50 +0000
ROA not after: Thu 31 May 2035 14:43:50 +0000
asID: 30986
IP address blocks: 154.164.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl
rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1228 (0x4cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3681ED0AF, serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
Validity
Not Before: May 21 14:43:50 2026 GMT
Not After : May 31 14:43:50 2035 GMT
Subject: CN=6a0f1a2b-68e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:a1:85:85:71:9c:82:0b:1b:61:af:69:e1:
e9:c6:76:c9:27:2c:55:73:49:02:f2:5e:b1:78:5c:
08:35:9a:ef:c4:f1:f1:72:75:d8:2d:cd:d6:d3:89:
20:3c:4d:99:c4:08:38:e9:0d:d8:0e:15:74:23:fe:
97:d9:84:3e:c6:46:83:93:48:04:26:55:7b:be:70:
fe:8c:3d:e6:a0:6a:45:18:56:37:a4:02:61:cd:ce:
a1:6e:74:86:14:0d:79:41:e2:02:5c:09:c7:45:c8:
e4:7a:11:32:0e:72:d4:c7:e4:67:84:c9:e9:18:70:
e0:03:76:ed:88:7c:af:3c:6d:2a:22:b3:f3:86:27:
61:b7:eb:a6:d9:e9:9d:25:07:5b:0c:15:d9:f0:49:
b8:07:4c:54:b8:a3:a7:f6:e3:e5:e8:54:27:66:19:
fa:48:cb:44:87:a3:d1:b8:47:24:7d:46:03:b3:67:
91:69:a7:24:e7:04:1d:12:ba:9a:b5:e4:c0:cb:cc:
b9:de:2b:a3:90:d7:7a:4c:cf:d0:89:7c:65:36:98:
63:bb:16:96:e3:74:cd:9e:6b:d2:73:48:28:28:c1:
35:2c:42:32:22:e4:b7:45:a0:1f:10:bb:74:1e:db:
d8:15:1e:e8:b3:f8:76:d6:56:83:64:ba:24:a1:e9:
83:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CA:34:2D:13:10:B2:7D:AB:70:B8:A4:72:D0:38:35:25:B8:7B:05
X509v3 Authority Key Identifier:
keyid:4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/7D97AFC0552311F18C4E5A19CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.164.0.0/16
Signature Algorithm: sha256WithRSAEncryption
71:40:12:c8:ec:f0:bc:50:68:14:b0:ed:21:33:ea:67:92:52:
e2:df:f5:92:1e:15:7a:0b:af:58:cf:07:c5:ff:7f:00:b7:6e:
94:45:60:78:a3:95:4b:1f:15:01:8e:35:53:70:1e:40:b6:60:
43:19:5e:e5:9e:6a:b4:59:55:b5:af:f7:02:83:9e:01:90:62:
9c:3c:9a:42:9a:6e:cd:2d:17:ae:54:e0:3f:3b:2a:aa:c5:ff:
17:b4:ad:90:cd:67:54:ed:4e:9e:32:9d:28:2d:1a:7a:2c:fe:
d6:74:7a:ad:64:2a:33:78:64:8b:a2:d4:fb:62:d1:19:a0:31:
cf:c5:a5:09:f2:4c:2b:53:97:88:c7:52:34:25:e2:cb:d8:70:
51:f8:df:2c:0b:6b:7d:8d:52:a1:c8:df:1c:25:47:f0:47:75:
b4:33:2e:0c:3a:da:6e:5d:7c:f6:fd:ef:7b:25:5a:18:d6:f8:
26:ee:6c:13:a7:c1:33:8d:ff:7f:b8:e5:4d:46:ba:8e:51:0a:
9d:d3:84:b8:91:4e:07:19:b5:22:eb:51:5d:92:77:ff:22:e5:
8c:75:8f:3f:5b:24:22:36:2f:a8:f4:cf:06:74:d4:10:88:dc:
c0:e2:5f:3c:c7:a3:ce:94:e4:40:4b:80:01:66:e7:f3:dd:dd:
5a:c8:68:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:16 2026 by rpki-client