Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/593B6C800D6A11F1A0C66D87DAE4EC9C.roa
File: 593B6C800D6A11F1A0C66D87DAE4EC9C.roa (raw, json)
Hash identifier: DNZEKsHrgJBB3kEKfjNcs8uspj9Uc6gM3vcFPolYke8=
Subject key identifier: E1:8E:7A:19:3C:BA:0A:6B:7D:57:A4:66:55:9B:B1:D5:5D:7A:C8:27
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1E0E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/593B6C800D6A11F1A0C66D87DAE4EC9C.roa
Signing time: Thu 19 Feb 2026 08:09:44 +0000
ROA not before: Thu 19 Feb 2026 08:09:39 +0000
ROA not after: Sat 19 Feb 2028 08:09:39 +0000
asID: 201341
IP address blocks: 154.16.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 24 Feb 2026 00:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7694 (0x1e0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 19 08:09:39 2026 GMT
Not After : Feb 19 08:09:39 2028 GMT
Subject: CN=6996c548-8807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:63:30:7e:dc:03:b5:76:d3:dd:76:a4:b8:c5:
89:71:a2:96:6d:18:a7:25:29:bf:52:4c:66:eb:58:
bc:3c:ff:a4:c2:98:c0:17:1a:dd:cd:89:2f:72:ee:
6f:33:7d:4f:49:d9:73:6c:15:16:07:84:65:20:f5:
1f:de:e0:d9:7c:d6:7a:0f:d7:52:0e:9d:7b:87:b4:
6e:7e:1c:5a:8f:ac:b2:c5:f9:21:a0:14:e0:d7:59:
b0:38:51:f8:4f:07:a6:50:29:42:e2:d5:60:99:2d:
0a:2f:70:e1:69:9f:a9:54:92:4b:ee:c4:89:c0:ff:
56:c4:79:56:6c:18:d9:34:8c:37:ca:dc:5d:f4:63:
db:35:23:f4:d6:29:34:fb:52:d1:93:23:83:bd:c0:
f4:8f:b1:a4:2b:ca:56:e5:98:5e:69:5f:d3:48:26:
1c:2b:43:93:55:ff:78:6c:32:82:5f:e9:a9:a3:d1:
01:6c:00:3e:fe:9b:ce:d5:5c:7e:75:20:e2:11:81:
68:2b:aa:00:28:97:16:36:c3:a1:44:01:b6:4b:94:
1c:79:fb:95:77:69:d6:1d:0a:40:55:c3:aa:17:24:
c3:f3:72:12:80:f3:ee:77:15:6d:47:98:72:2f:b8:
e5:93:02:ab:24:4b:f5:11:af:c0:79:60:a0:b9:5d:
47:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8E:7A:19:3C:BA:0A:6B:7D:57:A4:66:55:9B:B1:D5:5D:7A:C8:27
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/593B6C800D6A11F1A0C66D87DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.47.0/24
Signature Algorithm: sha256WithRSAEncryption
38:98:8e:a5:9f:cb:f6:ee:20:7e:82:3f:56:cb:3b:ad:f1:b3:
df:b1:38:41:20:91:0f:43:94:9f:33:6b:ed:5c:8e:7b:e7:05:
31:0e:5b:27:6e:b2:d9:4d:f5:d0:a7:2d:8e:ec:20:ab:82:0c:
be:ee:e7:98:aa:44:57:61:e8:cc:82:9c:e4:26:b0:32:7c:78:
bb:c0:3b:3c:e0:0c:7e:6e:86:39:a1:bb:0e:14:88:9d:ec:82:
78:2c:ac:e6:c9:8d:4c:05:76:71:e5:c0:0e:e7:ad:87:dd:d4:
66:62:24:ea:82:a1:9e:39:ef:e5:7e:b6:e0:69:fb:79:ff:21:
42:e6:ed:9d:4a:99:2b:dc:4c:65:28:00:62:b6:36:f8:45:a0:
71:32:6a:89:10:0b:f4:03:44:22:d7:4c:13:35:88:81:37:9b:
5c:6a:7c:3f:48:5d:bd:79:b8:b2:a3:69:10:5d:77:43:3e:24:
73:ee:1a:d0:11:bb:7e:a1:c6:e0:0c:6c:b6:aa:53:36:00:11:
e6:e3:85:f1:99:b5:b9:b8:1a:bc:74:b9:a9:92:1f:30:cf:e5:
78:4f:de:30:24:4c:bb:41:24:f3:76:35:e8:8b:27:0d:d8:a2:
68:a4:3c:78:4f:e6:a0:12:b2:59:16:03:ba:3f:3c:17:25:a8:
d8:cd:84:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 01:12:48 2026 by rpki-client