Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2E8898881C5011F1882C9DDCDAE4EC9C.roa
File: 2E8898881C5011F1882C9DDCDAE4EC9C.roa (raw, json)
Hash identifier: zhwmb7CK8k6WDyx/s7DElLQyPzfLINtsCGTLWA6qRr8=
Subject key identifier: C7:98:0E:19:D4:83:40:8A:0D:87:30:BD:B3:3D:62:A4:20:9B:9D:06
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1E62
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2E8898881C5011F1882C9DDCDAE4EC9C.roa
Signing time: Tue 10 Mar 2026 07:10:13 +0000
ROA not before: Tue 10 Mar 2026 07:10:08 +0000
ROA not after: Fri 10 Mar 2028 07:10:08 +0000
asID: 29802
IP address blocks: 154.16.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 12 Mar 2026 16:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7778 (0x1e62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 10 07:10:08 2026 GMT
Not After : Mar 10 07:10:08 2028 GMT
Subject: CN=69afc3d5-7ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d4:ba:d9:56:56:a8:e8:1c:df:9f:d5:27:f0:
11:a8:49:c7:53:1e:1f:f2:fa:28:6f:f7:5e:f1:f0:
ea:8c:23:3f:a6:ce:71:4c:3a:08:1b:d0:71:cd:41:
f2:74:3b:f9:70:ff:49:17:44:57:98:78:55:4c:9f:
51:57:ca:c3:f2:41:58:1e:64:20:18:fb:f2:24:a3:
9f:80:26:a0:5b:e4:98:db:fe:15:2b:f4:a2:fe:aa:
7a:ce:58:f0:ad:95:f0:95:c9:98:04:e3:37:6a:a3:
fb:14:82:a2:db:c2:00:a8:d1:58:48:e6:27:25:24:
cd:9e:86:7b:ca:f5:05:73:49:de:89:77:e7:e4:9e:
4c:91:74:75:6e:a1:0d:bd:fd:94:fa:78:20:b2:e2:
40:2b:65:f7:49:4d:ab:1a:04:65:84:ff:bd:9b:0b:
bc:78:0a:c9:1a:04:c6:bc:01:cb:cf:ba:d8:ed:14:
06:29:98:ea:48:cd:88:3b:3a:13:8a:e6:ba:7b:cd:
b3:a1:b1:9b:6d:7d:38:9d:ef:25:7e:15:c8:0d:af:
d7:de:1d:db:4a:35:31:34:5b:63:c7:9b:16:b1:8e:
e8:9f:fa:85:ed:85:2c:c2:fa:36:35:71:7b:eb:df:
3b:67:f7:cc:dc:af:b5:80:72:05:d5:66:48:33:d2:
98:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:98:0E:19:D4:83:40:8A:0D:87:30:BD:B3:3D:62:A4:20:9B:9D:06
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2E8898881C5011F1882C9DDCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.126.0/24
Signature Algorithm: sha256WithRSAEncryption
58:df:fd:b5:a2:78:ad:e2:22:8d:76:ac:9c:de:03:4d:36:e5:
c3:96:18:35:3c:1d:11:7b:11:c8:81:60:8c:47:ca:e9:f9:d9:
85:39:32:30:47:21:bc:80:d1:5e:04:a3:06:cd:8d:02:38:db:
8d:b3:d0:e1:c4:5d:4f:e2:6f:e6:7d:bb:14:39:07:5c:0a:1b:
ea:d3:50:58:81:35:82:fc:63:d4:11:27:78:e6:e7:b1:de:9e:
0e:9d:18:d2:81:d0:72:ff:cb:ad:59:7b:ed:23:9f:92:ce:b5:
c8:2a:a3:e6:e5:28:3f:08:af:ec:63:3c:6d:54:74:f6:b7:e5:
07:70:11:29:9e:4b:0c:69:c0:87:bc:63:40:91:25:c5:a6:5b:
4f:8b:0f:3b:86:99:3f:6c:c1:ac:24:d5:ee:f3:89:a4:21:1a:
37:ec:f6:72:01:c3:26:fc:78:7c:3e:bd:0c:34:f6:c1:f3:bd:
a0:03:fe:36:67:a4:b7:5c:fa:53:75:9a:b2:31:ed:4d:bf:9c:
ed:12:2e:03:75:98:15:6e:32:f9:ea:32:ba:0e:f9:a6:ac:d9:
4c:a6:34:6f:40:fb:0e:24:c8:39:fb:51:a0:c5:95:c8:32:ba:
d8:0a:91:18:51:a1:28:ac:85:a8:83:cb:5d:01:75:f2:e5:09:
ea:1b:98:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 23:49:00 2026 by rpki-client