Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/18219FC637D111F18D9E7EDDCE1D38B0.roa
File: 18219FC637D111F18D9E7EDDCE1D38B0.roa (raw, json)
Hash identifier: z2Qqlprx5kjmbfqr5sSjlmx3vAdN/gMKkRYaSGxwkbg=
Subject key identifier: 05:3B:93:42:5D:A9:FF:2E:8F:90:FD:FB:7C:22:9A:EE:18:0C:14:D9
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1ED1
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/18219FC637D111F18D9E7EDDCE1D38B0.roa
Signing time: Tue 14 Apr 2026 07:11:02 +0000
ROA not before: Tue 14 Apr 2026 07:10:58 +0000
ROA not after: Fri 14 Apr 2028 07:10:58 +0000
asID: 212669
IP address blocks: 154.16.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 16 Apr 2026 00:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7889 (0x1ed1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 14 07:10:58 2026 GMT
Not After : Apr 14 07:10:58 2028 GMT
Subject: CN=69dde886-d3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:17:97:67:04:c1:a6:8f:41:0d:9f:2f:c1:0a:
9d:bf:31:2f:5f:0a:73:8e:e7:fa:a4:df:be:fc:c3:
0e:ed:cc:48:6c:8a:18:73:82:03:7f:01:6e:83:17:
f6:03:3f:97:46:de:6b:da:e4:8a:dd:d1:ac:9f:7b:
51:0c:a9:39:a5:a4:69:50:73:57:16:22:fe:b7:d9:
af:df:cb:33:9d:3d:3b:c3:38:48:9d:4d:bb:4d:b7:
00:85:74:f4:ea:69:cd:75:56:d1:d2:70:1a:d7:02:
4d:06:13:14:e0:13:c0:db:04:1d:d2:c1:bf:83:ad:
29:9a:f8:24:3c:75:e9:1f:f2:6d:b7:ae:84:d4:1b:
bd:07:b3:f7:85:64:02:19:21:56:d6:37:f4:aa:9d:
ee:ff:9e:9e:b2:43:25:2b:62:b2:21:a3:71:1c:e2:
9f:e2:df:23:28:43:64:13:d7:92:5c:44:bd:af:35:
89:25:03:fc:fc:d9:ef:7e:1f:73:70:b2:b9:3e:3b:
4e:b6:71:e4:c9:35:3c:c7:05:de:26:c4:20:3d:27:
9c:1e:95:d5:e9:20:fc:ac:9f:43:9b:b4:b6:ea:6d:
ea:c3:18:9e:7c:bd:92:56:8e:ac:3d:c3:b7:e4:ca:
4e:ea:a1:04:99:9d:c1:e6:5c:66:80:48:5b:f6:14:
81:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3B:93:42:5D:A9:FF:2E:8F:90:FD:FB:7C:22:9A:EE:18:0C:14:D9
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/18219FC637D111F18D9E7EDDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.154.0/24
Signature Algorithm: sha256WithRSAEncryption
72:2e:2a:5f:70:86:18:77:1c:0c:80:3e:1b:ff:8c:ad:23:e4:
66:a7:7b:ee:60:3c:31:73:57:64:39:a7:bd:b4:d7:2a:a0:01:
e6:a4:32:6f:98:8f:f4:da:52:c3:3f:fe:1a:41:71:0e:8a:a4:
85:ae:73:0d:df:f1:e5:fc:44:e8:41:cc:dd:c7:77:ed:4f:49:
17:2b:56:c9:ba:21:67:b4:c8:4d:61:c0:9f:f2:de:d5:f8:d7:
27:60:eb:91:ac:5e:2f:b1:7e:55:af:be:90:3f:73:14:4a:1b:
98:ee:56:81:cf:69:c7:9c:c8:ce:e7:07:2f:c1:60:56:5a:13:
9d:ea:68:5c:56:ba:95:38:58:29:db:61:e5:b9:c9:54:0b:9d:
25:5f:1a:13:7d:3c:4f:0c:b2:7d:8b:a6:fc:a0:10:6c:64:5a:
1e:04:10:2d:ae:9f:ec:38:df:88:b2:e4:8b:3b:58:30:58:48:
f4:56:e2:34:22:a5:84:59:73:a7:05:9d:97:ab:b9:7c:ec:4e:
ba:5c:e5:9a:df:4e:40:33:3a:e0:31:f3:85:bd:c5:79:fa:e6:
ca:d1:35:18:05:c2:c9:cc:3a:b3:34:09:97:11:97:cc:68:a7:
c0:e7:a6:c8:87:17:53:c3:5f:26:68:cf:82:b7:2b:18:3c:55:
ae:29:78:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 14 21:42:36 2026 by rpki-client