Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0101296E4F9711F1B78D00D5CE1D38B0.roa
File: 0101296E4F9711F1B78D00D5CE1D38B0.roa (raw, json)
Hash identifier: /Dxoduf7bRMAXiRivwadMDrJhOWgt9eaHvG9e2IXudM=
Subject key identifier: 38:40:02:62:77:A1:1D:9F:15:5A:52:44:43:2E:A5:B6:14:BB:04:3F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1F3E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0101296E4F9711F1B78D00D5CE1D38B0.roa
Signing time: Thu 14 May 2026 13:15:40 +0000
ROA not before: Thu 14 May 2026 13:15:36 +0000
ROA not after: Sun 14 May 2028 13:15:36 +0000
asID: 9009
IP address blocks: 154.16.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 16 May 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7998 (0x1f3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 14 13:15:36 2026 GMT
Not After : May 14 13:15:36 2028 GMT
Subject: CN=6a05cafc-0120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:28:5c:4b:95:75:72:33:c6:ab:af:ad:fc:
e0:5e:58:68:90:bd:bd:61:5b:a2:33:fc:d7:0d:bf:
ce:e4:c0:62:70:a1:e1:ce:bd:a5:4f:b9:01:d6:3c:
d4:7e:27:8f:d1:a6:9d:71:92:35:26:51:fb:f5:3b:
99:5c:7d:0c:91:dd:f9:ad:e7:c2:62:7d:e5:d5:67:
61:2d:85:42:c8:1a:60:d3:50:ec:f7:90:a9:04:d8:
08:61:05:30:d8:13:95:2f:55:a4:88:b8:44:fc:ef:
c8:9c:8c:d7:6a:a9:82:fd:fa:97:b9:5e:5e:7a:69:
22:e8:df:15:cd:a7:11:72:97:f3:e1:af:dd:99:ed:
e2:ba:62:74:50:f1:3e:d8:e1:49:78:ff:6a:c0:ba:
2f:d9:3f:d2:1d:f4:6d:d2:8b:a4:15:73:48:b6:89:
0b:43:4e:2b:0d:ec:52:d5:6f:a0:e4:49:c2:f2:35:
af:25:27:e1:23:81:77:01:4a:6f:24:66:c4:5f:bb:
6b:b9:d0:26:53:a9:50:8a:9e:76:c1:e7:7c:e8:19:
6a:b4:5f:43:dc:19:a7:d8:b2:9b:b8:0f:88:77:ea:
16:b9:9b:fd:18:46:a2:c2:e3:b4:4f:4e:8d:0f:54:
73:a6:92:b4:70:13:ef:ff:bb:ee:0d:4d:0c:34:a0:
ed:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:40:02:62:77:A1:1D:9F:15:5A:52:44:43:2E:A5:B6:14:BB:04:3F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0101296E4F9711F1B78D00D5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.252.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:aa:3a:a5:2a:95:b8:b6:82:9a:4e:87:2b:56:5c:54:05:0e:
e3:7a:f1:37:98:9b:c6:34:a4:10:fb:8e:e5:6f:20:ad:da:d2:
8b:6c:1a:af:b7:bb:8a:0b:96:a8:94:cc:49:ea:ac:4a:49:7e:
e6:16:3d:21:8e:d7:08:89:62:fe:af:6d:71:df:2d:bf:3a:bb:
bb:07:81:13:f2:3e:2c:2c:44:25:d7:85:5f:9c:8c:a9:1a:59:
b5:25:07:0f:c4:c2:d8:25:b9:7f:99:1d:3c:7c:d8:fe:21:16:
72:d9:c7:d9:8f:f7:06:6c:62:0e:f9:d4:02:7c:1a:51:9f:ba:
c9:4e:0d:7b:02:eb:c9:10:8c:f8:48:5e:f6:41:20:bc:bb:8b:
5e:11:36:a6:57:e7:4e:2e:4e:0a:ec:4c:1a:e4:5f:7f:46:2d:
4c:eb:1d:1e:f1:1f:29:a3:b9:ca:62:39:3b:d0:ae:6c:59:39:
be:75:95:08:98:bb:0b:60:cb:86:49:57:c8:72:70:5c:43:0e:
50:8d:5e:f4:fc:cc:de:4e:b3:72:e5:2f:cb:f6:b9:34:7d:03:
08:69:1f:5a:64:8d:dc:88:aa:52:bc:17:d1:d3:df:1e:44:9a:
f6:68:0b:62:76:d5:c0:c9:c5:26:a6:01:d7:f3:4d:fb:80:68:
6e:f9:ea:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 18:37:17 2026 by rpki-client