Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/649A0CA60D6C11F1A7185494DAE4EC9C.roa
File: 649A0CA60D6C11F1A7185494DAE4EC9C.roa (raw, json)
Hash identifier: yEoJEKmSRkWYmULxjwLVMeNdI6b+fB8EMm0kzOcyk5E=
Subject key identifier: 90:28:8A:FC:19:39:92:ED:80:A4:AF:93:B7:2F:B9:DC:90:9A:0D:CD
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1E1A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/649A0CA60D6C11F1A7185494DAE4EC9C.roa
Signing time: Thu 19 Feb 2026 08:24:22 +0000
ROA not before: Thu 19 Feb 2026 08:24:12 +0000
ROA not after: Sat 19 Feb 2028 08:24:12 +0000
asID: 201341
IP address blocks: 154.16.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 24 Feb 2026 00:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7706 (0x1e1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 19 08:24:12 2026 GMT
Not After : Feb 19 08:24:12 2028 GMT
Subject: CN=6996c8b6-ab4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:77:a6:53:8e:1a:6b:07:04:48:5c:3f:80:a9:
fd:53:ce:5d:a3:b2:bc:ed:e9:84:84:5d:14:06:07:
b6:df:46:45:ca:1d:1b:5c:5c:1d:19:d3:ce:0e:80:
b4:6e:86:97:99:b9:3d:e4:b5:ad:a1:77:ed:e7:54:
55:db:c1:39:c0:81:fc:18:66:08:c8:5c:35:2d:30:
77:8b:f9:1f:ee:a8:d5:69:c8:b2:15:66:25:2c:50:
c4:bd:bb:76:c0:64:db:8b:3a:81:fc:f4:3d:b1:2b:
88:ab:ee:7c:68:c7:df:48:0a:e5:ee:8c:7b:ef:d3:
a2:64:df:da:52:05:1e:d0:a4:95:ca:20:13:07:ba:
0e:4f:23:e4:fd:f8:2b:c0:d3:71:cb:6f:53:90:4b:
a5:22:c0:4e:ed:dc:b2:80:03:bc:16:b8:46:08:45:
6d:d2:81:1e:94:b9:5f:92:13:dc:79:2e:aa:39:5c:
80:3b:dd:1a:cb:b0:65:0e:72:33:51:0d:e0:0b:42:
9c:35:cb:fc:ae:99:7a:45:d9:29:8f:73:82:96:65:
4a:ff:b5:1a:11:d8:54:4e:b6:68:f2:59:2c:18:b5:
30:04:81:30:40:2e:54:8d:3a:76:37:55:34:38:5d:
6e:31:e7:df:11:60:5e:a3:f5:2c:dd:c4:1e:ec:fd:
c7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:28:8A:FC:19:39:92:ED:80:A4:AF:93:B7:2F:B9:DC:90:9A:0D:CD
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/649A0CA60D6C11F1A7185494DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.84.0/24
Signature Algorithm: sha256WithRSAEncryption
32:26:af:0c:4e:62:44:37:c3:f0:7c:7c:5f:1a:dd:a9:0d:50:
df:22:aa:d2:f2:d1:a4:70:8a:ad:7d:c8:b1:11:84:b3:7f:38:
ad:cc:e2:1f:87:87:36:41:8b:6a:0f:02:44:f7:b9:d4:bf:72:
42:54:bb:9c:99:08:93:3d:2f:c8:a5:db:75:16:35:38:1e:cb:
ea:a6:b0:52:2b:f9:99:59:18:a0:c5:2c:68:89:da:ee:44:f6:
d6:a5:bb:34:35:6d:8c:d7:37:a1:91:24:1e:68:0e:23:46:df:
03:6d:ac:5d:9a:41:56:a3:a4:80:62:20:8e:be:19:dc:71:35:
0f:43:e8:09:9e:9e:90:12:68:b0:6c:8d:27:70:1b:c8:43:0b:
c9:95:01:71:a2:00:5b:da:8e:41:72:22:f4:07:9e:2e:fe:e5:
2c:55:49:f6:a8:17:eb:54:5d:49:a9:3f:79:46:44:7f:72:e2:
23:b8:4d:71:50:b2:64:51:98:64:ed:2f:a4:e0:c5:1d:1c:b4:
51:e8:42:f6:d1:33:47:f4:14:a2:1c:e1:9f:57:0f:24:e1:32:
b4:c3:34:eb:60:d1:ba:59:b3:3b:b0:c5:ea:3b:dd:0b:5a:e6:
b8:72:7c:22:08:71:bd:88:0f:b0:4b:2d:23:56:34:4a:ea:e7:
db:b1:b8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 01:13:04 2026 by rpki-client