Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6849D3DA228F11F19DA071D2DAE4EC9C.roa
File: 6849D3DA228F11F19DA071D2DAE4EC9C.roa (raw, json)
Hash identifier: 8soNbgoLOdVljI1gcJR4xisJzk44XbhERYRi/81SBBo=
Subject key identifier: CD:2D:AA:61:F9:5F:46:6A:79:E6:C8:E4:4C:E5:B4:CE:28:F1:4E:08
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1E8B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6849D3DA228F11F19DA071D2DAE4EC9C.roa
Signing time: Wed 18 Mar 2026 05:57:56 +0000
ROA not before: Wed 18 Mar 2026 05:57:50 +0000
ROA not after: Sat 18 Mar 2028 05:57:50 +0000
asID: 203446
IP address blocks: 154.16.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 20 Mar 2026 05:37:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7819 (0x1e8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 18 05:57:50 2026 GMT
Not After : Mar 18 05:57:50 2028 GMT
Subject: CN=69ba3ee3-f3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:98:20:28:55:13:0f:20:4c:fd:f3:0d:0d:78:
ee:48:54:7b:32:71:1b:c9:4a:60:d9:81:63:cc:72:
5b:74:28:24:69:bb:12:94:28:d0:2e:5a:d6:03:2d:
80:94:21:d9:55:5c:cb:e3:a3:e2:29:6f:5f:c6:cc:
d5:d8:cd:9a:24:7b:af:af:f9:5a:11:c0:2d:80:eb:
1d:99:0f:39:52:48:98:f5:4e:71:b5:00:f6:ac:33:
95:15:b0:99:65:7d:2e:33:95:7c:3a:59:6a:e5:f5:
fc:f1:2d:9a:d0:e9:8a:39:4c:6b:5a:65:b3:1b:94:
08:e8:1b:f8:07:cd:17:04:ed:07:61:6d:e0:89:9a:
43:1e:ca:77:a1:c7:8a:3e:1f:90:f8:a7:dc:a6:73:
e5:52:b0:98:3a:bc:33:b0:04:e5:25:af:3d:de:35:
3c:68:28:08:9e:6c:7d:77:7d:2d:48:52:21:64:ec:
b1:e0:8e:6d:f0:4a:d1:f6:33:4a:45:83:65:f5:f7:
18:ab:a5:51:73:15:52:0f:9c:ad:a0:7a:a9:5a:e9:
99:84:0a:7b:df:92:bb:1f:d2:bc:20:a6:a0:48:13:
12:e8:9a:8c:93:94:57:17:6a:6c:ab:60:12:d1:74:
89:a9:6e:eb:57:74:97:a4:55:47:1d:49:f8:4a:80:
9c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2D:AA:61:F9:5F:46:6A:79:E6:C8:E4:4C:E5:B4:CE:28:F1:4E:08
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6849D3DA228F11F19DA071D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.92.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:60:86:61:ad:8f:1a:66:2f:ae:25:40:db:94:6b:6e:95:ff:
dc:73:10:68:f4:f4:9f:48:e7:50:40:70:16:a3:2c:e2:dd:4f:
e8:26:ae:c4:64:43:a5:ba:7c:55:e6:e8:40:dd:64:71:40:2e:
06:7b:1c:f1:8e:fd:e2:66:bb:7d:ac:e1:9f:00:76:f2:46:e0:
c6:df:44:ed:ac:90:20:a2:49:0b:94:20:07:97:42:37:5d:66:
c6:dd:af:8c:67:88:72:73:14:e6:ec:14:e7:e2:4c:5e:18:8d:
57:ec:77:af:1a:60:46:0a:ad:46:25:33:5c:65:d2:28:e2:bd:
cd:98:06:32:56:4c:05:82:57:b4:9d:0d:17:e9:9b:4a:e4:7a:
94:e9:c8:d3:cb:44:b8:91:25:4c:7f:d8:78:b2:c0:21:d8:92:
01:7b:b2:75:28:1d:c5:69:ee:e8:d6:32:e4:11:95:00:19:9e:
ef:48:fc:b4:0c:8f:04:06:af:cd:c4:9c:12:3b:4b:25:f3:eb:
96:15:ae:9e:96:d4:46:99:88:b7:b7:0d:7e:96:88:06:1d:9f:
a0:d1:a1:27:c1:58:ff:34:b5:d6:f3:8a:0b:ab:eb:71:c1:16:
80:1e:76:6e:a7:1d:c3:cb:de:2e:fa:e8:16:2f:21:bc:71:18:
2e:61:4a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 23:56:49 2026 by rpki-client