Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/599496220D6311F1BB9762DCDAE4EC9C.roa
File: 599496220D6311F1BB9762DCDAE4EC9C.roa (raw, json)
Hash identifier: DgLopt1rxYWGNrgt+CI3NXKKov+5n860L3EFAFFRp0U=
Subject key identifier: DC:09:E4:0F:98:13:8F:AD:15:19:09:7B:C2:4D:94:6E:5B:C2:FB:1B
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1DFA
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/599496220D6311F1BB9762DCDAE4EC9C.roa
Signing time: Thu 19 Feb 2026 07:19:41 +0000
ROA not before: Thu 19 Feb 2026 07:19:34 +0000
ROA not after: Sat 19 Feb 2028 07:19:34 +0000
asID: 201341
IP address blocks: 154.16.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 24 Feb 2026 00:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7674 (0x1dfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 19 07:19:34 2026 GMT
Not After : Feb 19 07:19:34 2028 GMT
Subject: CN=6996b98d-b57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f4:88:5c:51:2b:76:de:22:de:12:a5:50:04:
0f:ab:54:1b:a6:d9:40:53:f8:36:a8:2d:58:85:c8:
52:af:98:40:83:07:73:36:08:65:8d:75:70:62:76:
4d:62:14:c4:67:2e:36:37:72:76:e1:e5:63:84:05:
30:a5:85:18:5d:64:4f:07:fe:e8:c7:3a:c3:da:5d:
a6:9c:b0:ff:ee:2f:29:9d:a1:1f:a5:79:37:89:60:
8f:45:0a:75:b7:38:f5:98:72:73:64:63:06:90:f1:
31:f8:f3:18:6b:4c:0b:0f:a9:61:55:18:b1:f0:54:
7c:7d:ea:f9:9f:e4:0d:72:a0:ad:98:59:d2:02:c0:
bf:cf:32:08:d0:22:01:84:14:e2:6b:ff:0e:a0:f4:
e1:1f:4f:0d:ad:3c:9b:30:2a:20:be:c4:9a:9b:cf:
ae:00:1b:0a:07:56:a4:54:27:83:d4:a4:ba:be:27:
6f:8c:d4:26:63:51:97:8c:2c:dd:32:7e:a5:cc:47:
d3:79:c3:62:95:8d:d2:47:65:9e:ee:d5:c7:f7:ca:
7c:9e:f1:8a:52:95:d9:2e:32:30:0d:04:ad:02:8d:
01:7b:76:95:50:17:6a:8c:07:0c:db:1b:72:03:31:
ac:a1:cf:13:72:3e:c4:cd:e7:f3:5b:b4:53:de:84:
79:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:09:E4:0F:98:13:8F:AD:15:19:09:7B:C2:4D:94:6E:5B:C2:FB:1B
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/599496220D6311F1BB9762DCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.24.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:a0:1d:1b:b2:96:e9:2c:4d:79:2f:ad:44:c6:80:f7:a9:cd:
66:be:87:7c:b9:c8:3f:25:c9:82:3f:c0:80:fa:d6:f6:56:e4:
65:7b:82:6f:b6:77:f6:e2:34:6c:e9:3c:d9:a4:27:47:3d:5c:
5c:d7:b7:f7:5a:39:0c:50:bd:b4:3c:ba:be:de:5a:b3:28:e8:
2b:75:c8:e3:a7:db:99:d5:1e:79:b9:1b:60:f8:7f:67:07:fd:
04:9e:46:ae:94:9d:5e:41:ee:b6:e8:bb:49:3c:fa:2b:f7:51:
59:10:20:20:f6:28:c3:7a:ad:01:4d:a1:ef:b1:13:45:7a:a2:
71:f3:e0:4a:2a:7e:be:e5:be:38:1d:7b:db:fb:81:93:56:7b:
70:21:b2:83:7f:29:d4:59:99:b3:7b:84:b5:93:ac:b3:a3:2a:
ae:d7:4f:29:74:ef:a6:6e:fa:34:3c:56:91:6a:1f:c7:1d:17:
58:e8:53:2a:19:99:7e:ea:83:97:74:37:93:59:25:64:1a:82:
77:7f:4e:21:f5:3f:1b:b0:3c:99:ee:1d:14:a9:f8:82:51:ba:
74:fd:51:3c:47:b8:95:86:0e:c0:a8:8a:c7:af:b0:6d:91:dd:
f8:cf:92:77:89:1d:34:06:af:47:7c:0a:90:99:14:fc:58:84:
bb:8a:14:c3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICHfowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjAyMTkwNzE5MzRaFw0yODAyMTkwNzE5MzRaMBgxFjAU
BgNVBAMTDTY5OTZiOThkLWI1N2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDv9IhcUSt23iLeEqVQBA+rVBum2UBT+DaoLViFyFKvmECDB3M2CGWNdXBi
dk1iFMRnLjY3cnbh5WOEBTClhRhdZE8H/ujHOsPaXaacsP/uLymdoR+leTeJYI9F
CnW3OPWYcnNkYwaQ8TH48xhrTAsPqWFVGLHwVHx96vmf5A1yoK2YWdICwL/PMgjQ
IgGEFOJr/w6g9OEfTw2tPJswKiC+xJqbz64AGwoHVqRUJ4PUpLq+J2+M1CZjUZeM
LN0yfqXMR9N5w2KVjdJHZZ7u1cf3ynye8YpSldkuMjANBK0CjQF7dpVQF2qMBwzb
G3IDMayhzxNyPsTN5/NbtFPehHnTAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU3Ank
D5gTj60VGQl7wk2UblvC+xswHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzU5OTQ5NjIyMEQ2MzExRjFCQjk3NjJEQ0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEBgwDQYJKoZIhvcNAQEL
BQADggEBALmgHRuyluksTXkvrUTGgPepzWa+h3y5yD8lyYI/wID61vZW5GV7gm+2
d/biNGzpPNmkJ0c9XFzXt/daOQxQvbQ8ur7eWrMo6Ct1yOOn25nVHnm5G2D4f2cH
/QSeRq6UnV5B7rbou0k8+iv3UVkQICD2KMN6rQFNoe+xE0V6onHz4Eoqfr7lvjgd
e9v7gZNWe3AhsoN/KdRZmbN7hLWTrLOjKq7XTyl076Zu+jQ8VpFqH8cdF1joUyoZ
mX7qg5d0N5NZJWQagnd/TiH1PxuwPJnuHRSp+IJRunT9UTxHuJWGDsCoisevsG2R
3fjPkneJHTQGr0d8CpCZFPxYhLuKFMM=
-----END CERTIFICATE-----
Generated at Mon Feb 23 01:13:04 2026 by rpki-client