Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/12DF07320D6111F1B82A22CDDAE4EC9C.roa
File: 12DF07320D6111F1B82A22CDDAE4EC9C.roa (raw, json)
Hash identifier: CqegCRFNU2q5UnkpdHzn+4s/xb5dMYjwr/jbK0f3BQg=
Subject key identifier: 31:72:02:EE:93:5B:3B:96:82:50:68:CD:C4:2F:58:76:A3:47:19:7C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1DF1
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/12DF07320D6111F1B82A22CDDAE4EC9C.roa
Signing time: Thu 19 Feb 2026 07:03:21 +0000
ROA not before: Thu 19 Feb 2026 07:03:15 +0000
ROA not after: Sat 19 Feb 2028 07:03:15 +0000
asID: 201341
IP address blocks: 154.16.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 24 Feb 2026 00:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7665 (0x1df1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 19 07:03:15 2026 GMT
Not After : Feb 19 07:03:15 2028 GMT
Subject: CN=6996b5b9-60ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:16:a4:10:0e:42:06:a6:dd:4b:1f:74:e5:
be:29:c5:32:14:68:e7:8c:b9:3a:4d:80:a7:2b:3a:
d1:85:61:22:58:88:3e:5a:31:ca:96:83:d2:59:96:
df:83:8f:2d:c0:b6:77:e7:6a:18:1c:cb:ce:3d:f6:
49:73:a8:a5:dc:07:95:90:e0:2a:0e:00:0a:a5:36:
8d:10:ff:b2:4d:0d:ee:14:ad:f5:09:b6:7e:78:f1:
ab:6d:b5:dc:d2:4f:94:3d:ee:02:a5:5b:3d:56:48:
02:36:aa:d7:5c:09:1d:ba:e3:ad:52:c4:9b:67:7a:
86:48:2f:16:e6:8c:36:fb:c4:b4:0e:d9:53:67:b7:
86:c0:28:48:b1:67:78:43:40:cf:f3:51:69:25:08:
dc:27:27:31:c0:5b:2c:09:ed:be:d0:21:cc:c6:08:
82:e4:fe:1c:f6:0f:3e:d4:58:85:c5:97:6b:79:06:
61:34:48:96:11:5e:1c:15:cb:ae:bd:8c:57:4f:8f:
89:7f:ac:7f:1e:45:28:55:6d:65:20:e2:43:5b:7f:
b0:49:e0:c4:51:13:21:53:0a:51:2f:3c:a2:9e:ba:
18:5f:dc:c7:55:dc:d6:c6:fd:53:bb:39:70:a4:af:
20:b6:6e:db:6a:f8:ec:b1:f8:81:87:c4:e1:ea:25:
72:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:72:02:EE:93:5B:3B:96:82:50:68:CD:C4:2F:58:76:A3:47:19:7C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/12DF07320D6111F1B82A22CDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.3.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:13:2d:93:11:12:3f:65:17:74:81:21:cd:45:31:58:af:4a:
7b:da:d0:fa:ea:b0:89:25:f3:ed:8e:42:00:ba:e4:d9:5f:46:
f9:a5:43:e5:f4:68:50:c5:64:51:e7:1a:15:df:16:30:f9:cf:
09:72:c6:9d:92:62:51:24:f8:5e:a5:e4:4a:f3:66:37:18:1e:
8b:41:f8:f0:51:ce:42:f0:a9:19:e1:41:ce:bb:ee:41:5b:b0:
11:84:72:ac:78:8f:44:fe:58:15:a5:50:16:ed:df:17:96:be:
d0:9e:46:4b:82:cf:7d:0b:39:c1:e8:b4:5c:6e:e2:85:8d:03:
5b:b9:ff:ac:9b:d7:57:d8:56:4c:1b:c2:75:2b:04:44:f7:e8:
23:56:76:40:09:39:5a:ea:bd:3a:4a:66:05:d6:0c:38:33:0c:
b1:10:59:04:e3:d8:36:4b:63:5c:d4:43:b0:39:7f:60:0a:96:
0b:a3:fe:19:ca:b2:8d:e6:56:5d:50:dc:a6:ad:a3:be:d4:23:
67:f5:85:30:55:7f:a5:3b:18:33:8a:7c:fa:f4:6f:23:22:ee:
08:15:1f:a3:45:51:33:66:7c:59:7c:c8:2b:98:a6:08:52:79:
d7:45:10:bb:5f:31:a2:06:35:78:1a:08:b6:cb:45:55:5b:88:
81:fe:de:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 01:17:35 2026 by rpki-client