Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1DFC39A6196D11F1A16F01CEDAE4EC9C.roa
File: 1DFC39A6196D11F1A16F01CEDAE4EC9C.roa (raw, json)
Hash identifier: cjEvv9yM4eWmbklN0w+9zujG7MioLo9lt/TVs4LK7Xw=
Subject key identifier: 8F:C3:6B:B0:18:6E:46:9F:DA:A0:D0:9D:EC:B5:DB:39:92:6E:83:CB
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1E54
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1DFC39A6196D11F1A16F01CEDAE4EC9C.roa
Signing time: Fri 06 Mar 2026 14:59:48 +0000
ROA not before: Fri 06 Mar 2026 14:59:42 +0000
ROA not after: Mon 06 Mar 2028 14:59:42 +0000
asID: 214025
IP address blocks: 154.127.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Mar 2026 00:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7764 (0x1e54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 6 14:59:42 2026 GMT
Not After : Mar 6 14:59:42 2028 GMT
Subject: CN=69aaebe3-1766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:fd:30:b7:2e:d6:89:a2:7e:5a:87:47:bc:
d7:26:50:51:e0:40:49:c1:12:57:59:83:11:7a:9a:
30:82:63:2b:f6:e9:a7:5c:5a:4d:e0:3f:a8:d9:72:
ab:61:6a:c6:16:b3:64:c3:94:5b:53:70:b1:c1:e8:
31:07:ed:a6:51:6e:be:20:dd:0f:25:81:85:6e:8e:
15:13:9a:d8:69:3c:ca:4c:39:70:87:1f:71:f5:23:
34:d1:52:19:92:b1:76:4d:49:e2:39:1e:36:e9:c8:
ca:9f:49:7e:b5:85:f0:c8:61:34:4a:0f:98:90:54:
0f:fe:ba:f7:48:79:05:e5:24:85:f2:34:d3:93:17:
d5:7d:e6:2f:02:6a:ca:f4:6b:c8:1a:e1:b4:f5:08:
ce:8f:47:18:d9:2d:6d:ec:b1:95:1d:a4:37:87:ef:
d0:b8:f4:80:c3:a0:7c:d4:03:d4:b7:5d:5b:4b:d6:
1b:1e:17:c6:0f:d1:a6:7a:1b:c2:54:00:11:03:9c:
49:9f:be:6d:ad:eb:c4:6e:74:8d:ed:c0:3f:74:69:
ac:f0:a5:2c:34:39:7b:10:8d:14:a0:d0:07:ab:fd:
0e:9f:ed:5e:ca:2e:0f:a4:eb:86:35:d5:e1:a6:6e:
e1:b0:43:86:54:28:82:96:e6:de:b6:1e:03:09:17:
96:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C3:6B:B0:18:6E:46:9F:DA:A0:D0:9D:EC:B5:DB:39:92:6E:83:CB
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1DFC39A6196D11F1A16F01CEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.50.0/24
Signature Algorithm: sha256WithRSAEncryption
21:55:41:26:45:37:57:f8:34:de:c8:69:bd:40:b5:8b:85:45:
a9:9d:d1:e3:de:3f:aa:19:c9:26:68:74:bb:92:1f:3f:29:f2:
28:70:b8:43:72:b2:86:fd:bb:7f:52:29:59:cd:e6:71:dd:1c:
b2:b5:93:7a:42:05:0a:7a:38:76:32:c4:cf:d6:31:36:f3:90:
80:ac:89:56:e6:fb:f4:60:c8:9b:68:09:82:48:19:10:66:42:
38:47:cb:91:66:b0:1e:74:89:50:46:33:30:2d:05:7f:3a:88:
95:87:f4:b4:fb:82:ac:42:d4:92:32:3e:8d:b3:e3:0f:2c:7e:
ef:01:82:f3:44:85:94:c3:3e:83:8b:ee:90:b0:16:90:72:0b:
8b:89:7b:a8:5f:13:9d:80:a1:6e:a7:cd:ec:75:e9:59:cd:85:
d5:83:2e:a0:7a:8c:de:dd:bb:5c:e0:74:e6:9e:ed:e2:60:00:
9a:d8:22:26:bc:e1:0d:08:24:5b:2c:09:9a:89:fc:e0:f6:43:
1f:8f:80:64:a4:ac:cd:0a:e6:e6:6a:16:da:3a:e7:e7:c1:73:
7f:28:6f:b6:36:c9:e0:e6:11:f8:49:cc:ca:b8:9e:8f:7d:77:
5f:4d:96:11:63:3d:15:58:e4:d9:9d:4c:be:3a:c7:61:7f:89:
2c:7e:1e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 09:37:02 2026 by rpki-client