Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2F9126BC7ACB11F18E3039CECE1D38B0.roa
File: 2F9126BC7ACB11F18E3039CECE1D38B0.roa (raw, json)
Hash identifier: Y3GaeG4DPOPtLJKVrqTSngwV85Lj3lksjbqnj6SBcOE=
Subject key identifier: 99:00:6F:C9:78:0B:4D:13:27:CF:23:9E:58:06:0F:55:FE:BE:AA:65
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 2049
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2F9126BC7ACB11F18E3039CECE1D38B0.roa
Signing time: Wed 08 Jul 2026 12:47:32 +0000
ROA not before: Wed 08 Jul 2026 12:47:28 +0000
ROA not after: Sat 08 Jul 2028 12:47:28 +0000
asID: 397423
IP address blocks: 154.16.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Jul 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8265 (0x2049)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 8 12:47:28 2026 GMT
Not After : Jul 8 12:47:28 2028 GMT
Subject: CN=6a4e46e4-1f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b0:b4:4d:be:56:89:4b:7c:b1:10:80:be:10:
b2:e4:70:97:8c:e8:31:4f:18:e6:b4:3e:ad:fc:01:
be:c3:46:08:6c:93:b2:1c:35:67:71:38:d2:ac:c9:
04:74:8a:4d:b1:e4:61:87:d4:e0:4b:be:22:60:1d:
ad:94:c7:69:2b:d7:77:56:b7:ec:81:00:cc:a6:fd:
fc:4d:66:01:16:24:de:24:4e:73:9f:35:55:d9:8c:
be:d5:ae:d1:9b:20:b6:66:00:44:f7:ef:14:fa:5c:
25:fa:6c:b4:8e:c3:c5:4d:b8:e2:c8:df:9b:e1:7c:
e6:2d:de:9f:14:a8:7e:74:19:95:32:23:f5:e1:72:
fc:d0:72:9d:6f:8b:19:59:1b:a8:a8:32:5c:66:9f:
8a:20:80:66:cc:53:68:53:20:6a:19:d1:d3:ae:2b:
8e:f1:f5:6a:87:a9:ae:42:1c:62:be:90:d0:8d:18:
58:7d:23:3e:1d:fe:fb:aa:ec:43:5f:9a:f7:da:67:
bc:e1:8e:af:86:f1:d5:21:19:34:91:07:df:06:31:
87:84:f7:4f:43:7f:97:b2:7c:d4:39:f8:d6:69:73:
35:e6:34:d8:b4:44:38:5e:cf:7a:f4:b1:ab:2d:14:
02:e8:2a:bb:3c:d6:db:71:05:4c:90:7c:d6:1c:c4:
62:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:00:6F:C9:78:0B:4D:13:27:CF:23:9E:58:06:0F:55:FE:BE:AA:65
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2F9126BC7ACB11F18E3039CECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.200.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:f3:65:11:cf:72:d4:b6:d9:ff:22:1e:8c:c8:42:b8:c7:fc:
4b:a9:c7:6e:2b:59:6b:b4:26:87:0a:fd:9d:a0:c9:e1:7d:10:
f9:44:5d:56:49:3d:b2:76:07:91:83:df:99:8f:33:db:cf:06:
3c:9f:10:77:9c:29:e8:90:a3:74:e1:9e:80:44:86:c1:05:87:
90:64:6d:9b:a9:86:95:42:2c:43:2d:c3:1e:cc:ad:f9:6e:97:
71:40:c7:79:cf:e3:70:18:c1:cc:f5:9e:69:10:97:54:a9:91:
07:90:ea:48:dc:73:87:b9:5d:1d:96:6e:aa:1c:be:24:49:8d:
e8:61:db:d0:70:2f:ba:26:f3:9d:54:42:46:c7:b2:53:c3:74:
56:f6:d5:1d:07:36:93:05:7d:0c:d8:77:c7:f0:86:09:36:e4:
a5:6b:c8:0b:c6:e9:c3:38:9c:40:a3:a0:9c:6a:fc:5e:85:1e:
9c:4b:99:d2:65:ea:12:f8:d7:ae:af:fa:2c:75:4c:ca:2d:84:
da:9f:e5:f0:87:84:ae:dd:90:31:af:25:34:9b:c9:2f:db:74:
3d:49:a6:28:fa:b7:25:58:5f:9b:29:46:91:d5:c5:88:87:32:
e9:f5:45:e2:b4:d3:ef:91:19:de:39:29:0f:3d:94:c5:f2:7c:
b8:38:97:a1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICIEkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjA3MDgxMjQ3MjhaFw0yODA3MDgxMjQ3MjhaMBgxFjAU
BgNVBAMTDTZhNGU0NmU0LTFmMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDisLRNvlaJS3yxEIC+ELLkcJeM6DFPGOa0Pq38Ab7DRghsk7IcNWdxONKs
yQR0ik2x5GGH1OBLviJgHa2Ux2kr13dWt+yBAMym/fxNZgEWJN4kTnOfNVXZjL7V
rtGbILZmAET37xT6XCX6bLSOw8VNuOLI35vhfOYt3p8UqH50GZUyI/XhcvzQcp1v
ixlZG6ioMlxmn4oggGbMU2hTIGoZ0dOuK47x9WqHqa5CHGK+kNCNGFh9Iz4d/vuq
7ENfmvfaZ7zhjq+G8dUhGTSRB98GMYeE909Df5eyfNQ5+NZpczXmNNi0RDhez3r0
sastFALoKrs81ttxBUyQfNYcxGLBAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUmQBv
yXgLTRMnzyOeWAYPVf6+qmUwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzJGOTEyNkJDN0FDQjExRjE4RTMwMzlDRUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEMgwDQYJKoZIhvcNAQEL
BQADggEBALnzZRHPctS22f8iHozIQrjH/Eupx24rWWu0JocK/Z2gyeF9EPlEXVZJ
PbJ2B5GD35mPM9vPBjyfEHecKeiQo3ThnoBEhsEFh5BkbZuphpVCLEMtwx7Mrflu
l3FAx3nP43AYwcz1nmkQl1SpkQeQ6kjcc4e5XR2WbqocviRJjehh29BwL7om851U
QkbHslPDdFb21R0HNpMFfQzYd8fwhgk25KVryAvG6cM4nECjoJxq/F6FHpxLmdJl
6hL4166v+ix1TMothNqf5fCHhK7dkDGvJTSbyS/bdD1Jpij6tyVYX5spRpHVxYiH
Mun1ReK00++RGd45KQ89lMXyfLg4l6E=
-----END CERTIFICATE-----
Generated at Wed Jul 8 21:21:04 2026 by rpki-client