Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/1AD7895663C811F1BA1D28B3CE1D38B0.roa
File: 1AD7895663C811F1BA1D28B3CE1D38B0.roa (raw, json)
Hash identifier: knxjQz5KfAMltUZ7yx242TRnAUjpoVPD9o4kqV1khRY=
Subject key identifier: 9A:DB:36:F9:3B:09:8E:C8:3F:29:47:9D:38:3A:B0:04:CD:F2:39:5C
Certificate issuer: /CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Certificate serial: 05F8
Authority key identifier: 53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/1AD7895663C811F1BA1D28B3CE1D38B0.roa
Signing time: Tue 09 Jun 2026 05:57:32 +0000
ROA not before: Tue 09 Jun 2026 05:57:28 +0000
ROA not after: Tue 31 Dec 2030 05:57:28 +0000
asID: 25818
IP address blocks: 196.1.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft
rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1528 (0x5f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3696E5FAF, serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Validity
Not Before: Jun 9 05:57:28 2026 GMT
Not After : Dec 31 05:57:28 2030 GMT
Subject: CN=6a27ab4c-e53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:28:3c:db:42:6c:87:f2:42:80:10:bf:9b:81:
b7:46:40:76:32:60:d4:23:9c:a1:98:d8:e8:7b:a8:
24:ec:6d:53:77:48:e9:62:1d:e7:24:68:be:2f:5f:
60:a9:75:9a:cc:5b:76:16:5d:d7:ef:c6:fe:14:c8:
e5:4c:91:d6:1a:f8:4e:62:a5:50:47:ba:a7:cb:b0:
ce:36:10:12:20:87:91:e2:42:25:d7:46:9f:28:48:
aa:6b:12:26:36:68:ac:03:ff:9a:3c:ea:92:8a:88:
dd:7a:b3:8c:fe:de:df:58:69:8c:4c:15:89:9e:7e:
2a:da:ac:ca:0c:e4:0f:6d:a6:7d:64:ee:b5:9d:0e:
82:dc:13:b7:52:1a:c0:93:77:a6:95:c1:e6:28:ca:
06:69:18:cb:a3:c7:52:62:c0:1b:eb:ad:12:d3:9b:
3d:e1:b7:f1:cc:ff:09:d3:b6:7f:4b:43:1f:50:85:
03:f1:0f:d8:42:43:fd:6e:9e:bc:ce:bc:88:b1:b2:
9a:77:18:23:4c:e1:b8:21:e8:b9:f0:69:22:ec:d1:
36:c7:ca:20:d3:ab:8c:b3:c5:d4:d2:2d:36:c2:6f:
f7:54:a3:1a:4a:f4:62:32:63:6f:8f:78:c1:3e:18:
f0:da:b8:52:75:5e:31:8e:17:cb:50:04:f9:4b:29:
af:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DB:36:F9:3B:09:8E:C8:3F:29:47:9D:38:3A:B0:04:CD:F2:39:5C
X509v3 Authority Key Identifier:
keyid:53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/1AD7895663C811F1BA1D28B3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.1.154.0/24
Signature Algorithm: sha256WithRSAEncryption
26:7c:d3:99:15:08:b0:90:cd:ab:6e:cb:65:d8:e5:18:da:da:
23:31:24:b6:60:c0:ee:53:65:32:16:d0:9a:8a:d1:5d:a6:95:
fe:7c:fd:b6:a4:e6:09:f4:27:05:57:53:ed:22:62:8f:30:69:
60:e5:c0:6a:a2:f5:1f:0d:30:14:ea:82:b6:1c:64:71:1c:fb:
a8:75:49:30:a5:00:32:2b:12:2b:e4:63:a7:49:44:f8:48:69:
d9:bf:13:2b:38:00:27:39:43:d2:73:22:10:3a:9d:5f:7a:11:
f2:2e:57:99:35:9e:cd:54:d4:15:c6:b9:62:00:2c:81:fa:6a:
21:fc:5b:00:c5:a6:ff:9f:fc:b6:12:4e:a4:b0:37:4a:df:7b:
12:42:dc:70:44:79:3d:17:ac:9e:44:af:ea:31:60:e1:dd:ed:
9b:a6:f0:6b:c5:da:c6:4a:53:51:65:7f:41:d3:76:e7:cf:a7:
54:4a:3f:1f:b5:9a:43:58:db:cb:6a:7d:c1:a2:8a:45:96:58:
c3:38:02:4d:70:d0:2a:10:8d:ac:7a:cd:7b:0a:d1:92:86:d3:
8b:2f:09:68:94:9b:75:1a:f8:a9:7d:01:12:17:5f:e4:e7:1b:
24:eb:a6:57:3f:cc:7c:ce:85:af:22:de:f7:4b:5b:61:53:35:
4a:98:bf:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:35 2026 by rpki-client