Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0EE1A50A8A6F11F1839EF918CF1D38B0.roa
File: 0EE1A50A8A6F11F1839EF918CF1D38B0.roa (raw, json)
Hash identifier: md09DT/wlv76rDaJGKXbZs2mR2C7NuntbVGv4dDZhjI=
Subject key identifier: AC:22:F4:C2:DA:13:EB:35:F0:AD:DB:80:01:CF:6D:7B:94:E3:41:3D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 2083
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0EE1A50A8A6F11F1839EF918CF1D38B0.roa
Signing time: Tue 28 Jul 2026 10:28:22 +0000
ROA not before: Tue 28 Jul 2026 10:28:18 +0000
ROA not after: Wed 14 Apr 2027 10:28:18 +0000
asID: 397373
IP address blocks: 154.16.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8323 (0x2083)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 28 10:28:18 2026 GMT
Not After : Apr 14 10:28:18 2027 GMT
Subject: CN=6a688446-891a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3e:ee:c4:c8:6e:6d:d9:d3:12:1a:8c:4e:ee:
22:fd:5d:df:f1:38:c6:33:df:c7:3e:da:4a:53:62:
42:e4:f6:09:4e:e9:f2:ef:32:16:a1:8a:65:79:35:
e6:08:58:86:49:18:a8:01:b5:65:ff:d1:08:9c:ea:
c6:2e:87:90:a3:1e:6f:db:fb:32:a2:96:8e:22:c2:
07:01:16:a2:14:e0:9d:c0:c3:b9:82:ac:44:ad:c8:
c0:bd:87:76:ef:90:2c:8e:55:3f:c1:af:99:57:62:
fa:0b:ea:5a:a5:5c:16:1c:62:32:69:96:f2:3d:cf:
4b:66:7e:46:46:bf:0c:53:87:41:08:ba:39:78:d7:
ce:fd:2c:cc:71:dc:1d:0f:23:aa:e7:f3:96:aa:1d:
62:90:7c:db:8d:21:6e:17:6c:ae:01:da:7b:2d:dc:
8b:53:2a:77:be:64:9b:60:a3:35:0a:a7:a3:31:d0:
71:be:fd:78:5c:8c:1a:d6:98:c1:92:0f:b9:99:d1:
c9:89:c3:6e:2c:ca:3c:36:5c:37:bd:8b:98:77:b4:
45:25:6d:75:cc:39:35:5c:27:fa:e8:3a:77:ac:9a:
b4:3a:bb:12:f8:0c:85:20:a4:60:0e:69:85:e4:e8:
14:42:19:1a:73:25:ab:6a:0f:1e:17:7d:d6:a9:6e:
27:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:22:F4:C2:DA:13:EB:35:F0:AD:DB:80:01:CF:6D:7B:94:E3:41:3D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0EE1A50A8A6F11F1839EF918CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.247.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:61:4b:4b:48:e9:c6:8e:a3:35:23:82:d9:80:64:14:74:e2:
7a:a8:62:4b:5d:d7:79:00:8d:6e:40:94:50:17:2e:89:09:6e:
1e:1f:69:1b:69:83:46:41:2f:ad:25:6a:ae:7b:ca:c4:63:39:
7f:3a:21:ba:7a:cc:b1:22:65:3b:07:5e:48:5b:1b:93:af:93:
9c:37:b3:d3:5f:d5:3b:56:15:d0:96:5b:50:20:fd:5d:de:f8:
b4:02:b5:64:9e:7b:0a:56:26:37:03:d1:50:ea:26:df:27:45:
a7:43:7b:12:19:40:58:a2:41:86:8d:ad:84:cf:0f:64:3b:3c:
77:b4:5a:98:97:30:3c:35:01:e4:4e:0c:aa:3b:f0:9d:9e:85:
ab:67:1f:06:aa:5b:97:9b:a7:65:fe:f5:04:e9:6d:39:7f:f2:
c3:55:bd:9e:40:fb:13:37:74:db:dd:2e:e9:5e:f0:d3:28:06:
b5:ac:7b:d3:56:8c:34:14:0b:3b:29:23:23:72:10:94:48:08:
50:e5:70:42:0d:3f:8d:3a:ec:c5:69:74:2a:85:3c:fb:3f:e5:
b0:2e:07:92:be:4a:db:cd:bb:b6:f6:30:1f:ad:74:a3:60:24:
93:8e:0b:e0:9d:79:09:ff:7e:e9:7f:55:9a:9a:d2:82:b9:ca:
56:96:0e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:08:25 2026 by rpki-client