Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5D9E55203D6D11F1BF30A8B2CE1D38B0.roa
File: 5D9E55203D6D11F1BF30A8B2CE1D38B0.roa (raw, json)
Hash identifier: 4pcMYwKMERH11YDxBl3QYUQx3mISP2RnHQb3JZMERws=
Subject key identifier: 16:46:82:9E:A0:72:7F:D9:7E:54:91:18:41:4A:EC:54:70:F1:D4:A0
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1EEC
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5D9E55203D6D11F1BF30A8B2CE1D38B0.roa
Signing time: Tue 21 Apr 2026 10:32:16 +0000
ROA not before: Tue 21 Apr 2026 10:32:11 +0000
ROA not after: Fri 21 Apr 2028 10:32:11 +0000
asID: 200017
IP address blocks: 154.16.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Apr 2026 10:32:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7916 (0x1eec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 21 10:32:11 2026 GMT
Not After : Apr 21 10:32:11 2028 GMT
Subject: CN=69e75230-ac9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:aa:d6:8e:81:3c:7a:07:3f:fb:39:3e:01:25:
5e:8d:38:3f:a2:e9:49:6c:48:cf:91:d6:d9:0d:ad:
13:99:df:f9:0e:5b:8f:31:fd:3a:85:db:18:c5:85:
2e:1c:7b:21:01:78:f1:4f:0a:0d:02:74:8b:b1:b6:
59:8a:19:8d:51:e1:fc:60:ae:26:db:dd:fa:d5:94:
51:cc:99:70:33:8f:e6:49:ab:40:2e:b5:1e:7a:41:
a3:22:00:9f:17:31:97:f4:83:11:38:e6:c9:2a:3e:
31:c8:bc:1b:1a:ec:0e:53:8d:7e:68:7a:e8:80:0c:
83:f6:e3:32:ce:40:3a:0e:1c:62:39:68:3c:09:80:
8c:0a:d4:76:70:25:bf:e5:35:de:7c:3c:7a:dc:db:
91:81:02:5d:eb:98:14:99:fc:91:8c:1b:71:28:69:
13:32:3e:e0:5c:d4:8f:1d:60:79:c7:3a:01:0d:f3:
a9:28:63:4d:37:aa:3a:af:ad:7e:3f:cf:5f:71:8b:
2f:73:bd:2b:d1:3f:5c:3a:5d:de:66:d3:2b:7a:f2:
c6:b5:77:08:4f:f1:c0:cc:12:0d:9e:6d:91:7b:1d:
3f:e2:71:65:e7:0e:b6:a9:02:e4:c8:31:65:ed:f0:
c5:41:81:bb:ac:44:8e:53:d9:48:2b:43:7d:4a:96:
68:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:46:82:9E:A0:72:7F:D9:7E:54:91:18:41:4A:EC:54:70:F1:D4:A0
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5D9E55203D6D11F1BF30A8B2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.181.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:ec:d2:50:97:8b:e7:3d:ae:b5:74:46:ac:b6:e7:e3:fe:a5:
27:a3:72:2a:7d:b0:72:f5:12:bf:4b:22:2a:df:71:50:21:0c:
31:1c:d9:af:a5:e2:34:4a:96:9c:2b:a6:c8:38:55:2c:d5:47:
49:cb:fd:ed:83:65:a5:ce:9e:79:fe:18:79:49:34:c9:19:2f:
44:86:d5:db:0d:e1:48:e9:14:0d:25:e6:6c:be:8f:1b:6e:ec:
70:e0:24:de:51:f0:6c:25:86:25:e4:ac:58:73:e0:ee:d2:41:
40:24:db:00:00:ea:6f:12:47:96:46:f2:12:1e:49:2e:2c:a2:
77:ef:74:fb:e3:a7:c9:1f:a2:82:2c:b6:ea:1f:63:19:2c:9d:
09:74:ee:83:dc:47:82:a8:07:42:5b:8e:48:c4:a4:c7:c9:a5:
b3:9b:4f:5e:21:d0:2e:9b:e2:d1:fa:86:4a:09:f2:27:09:a1:
80:81:92:17:77:27:4b:fd:9a:a8:73:03:c3:14:39:0b:d6:5a:
56:44:44:0f:f1:d2:de:ba:14:84:10:af:4e:13:d0:aa:2a:96:
84:03:08:89:fb:c3:ac:e8:c0:fa:c9:8b:f6:da:15:df:33:3e:
ab:52:46:9a:50:52:ff:a1:13:1e:e7:be:f5:e1:93:c2:97:3e:
42:8f:fd:9e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICHuwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjA0MjExMDMyMTFaFw0yODA0MjExMDMyMTFaMBgxFjAU
BgNVBAMTDTY5ZTc1MjMwLWFjOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCyqtaOgTx6Bz/7OT4BJV6NOD+i6UlsSM+R1tkNrROZ3/kOW48x/TqF2xjF
hS4ceyEBePFPCg0CdIuxtlmKGY1R4fxgribb3frVlFHMmXAzj+ZJq0AutR56QaMi
AJ8XMZf0gxE45skqPjHIvBsa7A5TjX5oeuiADIP24zLOQDoOHGI5aDwJgIwK1HZw
Jb/lNd58PHrc25GBAl3rmBSZ/JGMG3EoaRMyPuBc1I8dYHnHOgEN86koY003qjqv
rX4/z19xiy9zvSvRP1w6Xd5m0yt68sa1dwhP8cDMEg2ebZF7HT/icWXnDrapAuTI
MWXt8MVBgbusRI5T2UgrQ31KlmjDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUFkaC
nqByf9l+VJEYQUrsVHDx1KAwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzVEOUU1NTIwM0Q2RDExRjFCRjMwQThCMkNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaELUwDQYJKoZIhvcNAQEL
BQADggEBANDs0lCXi+c9rrV0Rqy25+P+pSejcip9sHL1Er9LIirfcVAhDDEc2a+l
4jRKlpwrpsg4VSzVR0nL/e2DZaXOnnn+GHlJNMkZL0SG1dsN4UjpFA0l5my+jxtu
7HDgJN5R8GwlhiXkrFhz4O7SQUAk2wAA6m8SR5ZG8hIeSS4sonfvdPvjp8kfooIs
tuofYxksnQl07oPcR4KoB0JbjkjEpMfJpbObT14h0C6b4tH6hkoJ8icJoYCBkhd3
J0v9mqhzA8MUOQvWWlZERA/x0t66FIQQr04T0KoqloQDCIn7w6zowPrJi/baFd8z
PqtSRppQUv+hEx7nvvXhk8KXPkKP/Z4=
-----END CERTIFICATE-----
Generated at Tue Apr 21 21:33:01 2026 by rpki-client