Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/51A2461C37D411F18AD8F4EFCE1D38B0.roa
File: 51A2461C37D411F18AD8F4EFCE1D38B0.roa (raw, json)
Hash identifier: wKugVi7Nvh3RHpkhgcfVpVGyQNm3UF6Z26KxHCLQpB0=
Subject key identifier: 4B:1F:E1:E8:F8:94:9D:A7:63:80:D8:B8:56:B8:EE:61:1D:B3:74:77
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1EDA
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/51A2461C37D411F18AD8F4EFCE1D38B0.roa
Signing time: Tue 14 Apr 2026 07:34:07 +0000
ROA not before: Tue 14 Apr 2026 07:34:02 +0000
ROA not after: Fri 14 Apr 2028 07:34:02 +0000
asID: 22168
IP address blocks: 154.16.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 16 Apr 2026 00:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7898 (0x1eda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 14 07:34:02 2026 GMT
Not After : Apr 14 07:34:02 2028 GMT
Subject: CN=69ddedef-222a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a0:21:fa:9d:9c:54:58:53:4c:91:e9:bf:56:
9b:81:57:4e:98:08:b1:fe:49:af:4c:06:f8:c0:15:
6f:6b:2a:df:6c:ac:af:a8:89:b9:49:bd:7a:14:01:
27:aa:dd:93:aa:23:60:87:33:ac:6c:5d:82:12:1c:
10:5c:60:d0:b3:a5:29:eb:d9:53:4e:b3:46:c7:a6:
49:4b:01:23:10:06:0a:68:71:61:06:98:99:0b:f2:
07:59:df:20:7c:5a:ac:32:09:83:99:0e:a7:47:76:
33:52:3b:92:92:8d:28:39:10:6d:79:29:b3:11:18:
a9:46:62:ff:ce:94:22:61:08:56:e2:b1:4e:4e:4c:
3c:12:19:f1:b4:13:ec:7c:d7:d0:2e:ed:65:52:d5:
7b:5e:4a:a7:89:90:5c:dd:0a:76:62:c0:7e:60:97:
5b:6b:a2:42:eb:66:68:3d:0e:bd:c0:cd:d1:1b:2b:
f4:10:fe:5c:8f:56:11:2e:d3:f3:9d:6b:f4:e9:af:
21:76:0b:16:8a:9c:2e:d5:f2:f0:6a:38:1a:c4:32:
72:22:6c:c5:7f:62:63:12:a5:02:22:21:0f:2a:0a:
f9:76:9f:e9:05:16:8a:64:f3:54:33:ab:08:5b:9f:
42:09:ba:5b:ba:af:8e:8a:ff:25:6a:bb:e5:1d:d3:
a6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1F:E1:E8:F8:94:9D:A7:63:80:D8:B8:56:B8:EE:61:1D:B3:74:77
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/51A2461C37D411F18AD8F4EFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.240.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:25:c1:53:48:ef:03:2a:52:99:74:b8:bd:38:f0:5e:98:d9:
d8:ea:4a:59:ae:30:fb:16:db:01:56:b0:0f:f1:68:3d:d2:b0:
f6:b3:3a:cf:c0:e6:b0:c9:63:5e:99:8a:9b:ec:21:47:75:72:
22:34:3e:35:82:bd:c5:f0:b0:e4:e2:09:10:23:58:26:ff:46:
09:46:52:a2:5f:44:9e:b6:dd:1d:ed:ea:83:a8:03:4c:02:0b:
69:9d:9d:d9:8c:50:c7:85:d0:e9:23:ac:d3:4b:38:28:34:94:
7d:4c:dc:18:2a:22:79:78:43:6a:d8:99:f5:23:5f:d3:b5:ab:
8e:f9:84:e7:4c:bf:4f:e3:02:90:94:91:8b:aa:a3:aa:21:5a:
4a:a1:08:bd:51:b5:d7:83:37:06:bc:40:cf:82:6d:41:52:4c:
9c:1a:d6:e7:f1:21:f7:94:9b:af:19:da:b7:a0:93:db:28:5a:
8c:62:dd:81:bc:42:1a:ba:44:1b:8e:e2:a8:d8:cf:ab:49:b0:
5f:81:5a:e4:cc:96:bf:60:ee:6f:73:32:64:a9:b4:ee:58:5f:
79:b1:d6:18:62:b7:f5:e7:b5:12:98:a3:cf:a3:02:59:8d:14:
41:9d:07:14:cc:e9:7a:4a:fb:fa:db:43:de:7b:5a:1b:ed:0d:
ca:d9:a3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 14 21:42:59 2026 by rpki-client