Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/685166C4186F11F1A944ACB9DAE4EC9C.roa
File: 685166C4186F11F1A944ACB9DAE4EC9C.roa (raw, json)
Hash identifier: KG1ShD8CFK+nmbUA6qQRFwvBg2GkZMR2iiqN2KS/DoA=
Subject key identifier: CE:C7:00:E1:CE:AC:B6:6B:3C:2C:92:D9:D3:7F:B0:E8:33:0C:6F:12
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1E51
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/685166C4186F11F1A944ACB9DAE4EC9C.roa
Signing time: Thu 05 Mar 2026 08:43:40 +0000
ROA not before: Thu 05 Mar 2026 08:43:35 +0000
ROA not after: Fri 05 Mar 2027 08:43:35 +0000
asID: 402047
IP address blocks: 154.127.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Mar 2026 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7761 (0x1e51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 5 08:43:35 2026 GMT
Not After : Mar 5 08:43:35 2027 GMT
Subject: CN=69a9423b-107b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fb:66:8b:8c:4c:21:df:e6:e6:f6:84:75:1c:
ca:58:ba:67:9a:8d:cc:2e:ba:22:79:c3:97:bd:99:
19:ee:a8:88:66:2d:9c:91:7b:0d:84:b5:15:c2:3e:
1f:ac:08:71:71:9f:8f:96:5a:da:08:b6:ff:19:27:
42:15:6f:f0:70:11:c2:29:39:bb:d2:c1:77:06:c3:
7e:61:81:33:4c:ce:af:97:69:ee:41:a2:83:79:d0:
be:2e:43:49:36:b7:62:19:23:36:cc:66:11:2c:64:
25:e3:02:c1:c5:70:cb:62:4f:43:ef:02:c8:9f:32:
70:ff:c6:42:5a:81:6a:4c:25:f9:8e:c8:52:30:c6:
11:42:90:4c:3b:5d:f4:62:8e:24:ef:b6:cf:cd:be:
bd:8e:ff:04:72:fb:b4:96:68:00:99:dd:d9:52:2f:
0c:65:a5:79:4f:43:a0:d6:7b:2c:43:53:2d:14:24:
ca:74:21:a1:54:c6:52:60:d1:ca:07:f6:c4:41:f1:
66:bb:0e:86:bc:58:6a:29:0d:45:df:3d:b6:31:ff:
03:3f:a7:59:fd:08:f5:c9:6a:28:9d:f0:cf:17:51:
2c:82:84:db:b7:4d:15:f9:c3:09:e3:24:40:36:27:
93:bd:4a:aa:01:7e:c9:38:f9:88:69:ea:31:e7:5f:
8c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C7:00:E1:CE:AC:B6:6B:3C:2C:92:D9:D3:7F:B0:E8:33:0C:6F:12
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/685166C4186F11F1A944ACB9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.50.0/24
Signature Algorithm: sha256WithRSAEncryption
21:5f:0c:b0:52:24:0e:de:ca:da:8e:a8:a5:42:26:68:49:8f:
5c:a4:eb:d7:82:45:f0:cf:18:81:5c:8e:be:cb:f8:91:54:78:
af:c3:08:72:fd:be:5e:b4:cb:35:23:98:9d:e7:36:e5:80:d4:
7f:7f:c6:53:df:77:cb:96:1d:cf:48:2e:f9:2d:6c:0e:f4:f0:
d3:b8:14:46:fb:86:fd:6a:6a:55:ff:6b:6e:40:dd:04:93:bd:
ce:8f:b9:ed:34:fb:40:be:60:29:31:17:55:6f:ec:89:0b:5e:
dd:29:d7:ef:ed:09:de:60:99:ab:18:02:10:da:3f:93:c7:0c:
1e:29:81:e8:13:6c:d7:f4:4e:e3:76:e8:de:6e:11:07:c2:77:
05:40:a5:db:53:9b:7a:f0:fd:51:95:c0:02:17:0b:f8:c6:ff:
fb:55:f7:31:69:70:be:19:74:c9:13:e8:12:f7:c6:da:7f:45:
a0:11:7b:06:01:0c:c6:ce:39:3f:15:53:e7:de:2e:7d:69:56:
8a:ec:0e:0d:3f:31:86:ed:79:f6:4c:4d:a8:33:c4:87:cb:73:
5f:37:6f:f5:e6:3b:a6:74:f4:62:59:a9:43:66:4a:d1:aa:4b:
4a:c0:de:90:66:04:0d:e6:8f:9a:ab:08:e4:bb:63:4b:8d:dd:
48:d5:44:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 09:41:07 2026 by rpki-client