Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/69F07A9026A411F19E385F9BDAE4EC9C.roa
File: 69F07A9026A411F19E385F9BDAE4EC9C.roa (raw, json)
Hash identifier: H2G1VuWJy+a+0x37x67woKlvCj0MET7VrVPuZGBbqzw=
Subject key identifier: BD:C2:3E:8E:6B:C4:3F:59:4A:04:1E:74:63:56:8B:D4:BF:A8:4A:B7
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1E94
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/69F07A9026A411F19E385F9BDAE4EC9C.roa
Signing time: Mon 23 Mar 2026 10:38:22 +0000
ROA not before: Mon 23 Mar 2026 10:38:17 +0000
ROA not after: Thu 23 Mar 2028 10:38:17 +0000
asID: 4766
IP address blocks: 154.16.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 25 Mar 2026 10:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7828 (0x1e94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 23 10:38:17 2026 GMT
Not After : Mar 23 10:38:17 2028 GMT
Subject: CN=69c1181e-349d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:64:9e:68:58:ce:2f:92:d8:41:75:3a:9b:a2:
cb:3a:5a:2a:0b:73:2c:09:6d:62:51:3f:67:f0:20:
84:08:61:90:c0:bd:9d:af:06:be:f5:e9:02:9e:a1:
c5:b6:cd:c2:4e:15:88:da:5c:84:10:08:13:cb:ca:
34:63:36:43:ca:71:cf:3b:14:86:68:84:b8:7d:14:
df:80:1d:45:6b:6f:82:84:b0:1c:5f:ee:f6:25:10:
d0:ed:d9:35:21:78:83:43:67:c6:31:cb:74:18:60:
46:d2:a6:f7:bd:0a:6f:a6:56:b9:86:ba:3a:96:27:
27:01:d3:4c:db:a6:be:d2:05:c1:1f:75:ce:44:15:
ac:38:7e:30:84:a4:ea:58:1b:01:1c:f7:53:4f:96:
7f:2e:44:83:36:60:e4:5c:8a:1e:5b:9f:82:1d:cc:
4d:bf:b1:78:58:28:98:e8:7b:bf:39:f4:cb:f0:2c:
03:48:48:3b:f6:6f:be:4c:cf:e2:27:46:4f:1d:65:
06:81:e4:f8:26:2c:cc:3b:c7:dc:7e:81:d4:c0:4f:
e3:d3:3e:cb:c1:6d:7a:21:bf:a6:05:02:8b:c5:7b:
f4:23:87:d9:80:ad:8c:92:2b:75:77:4e:c3:48:b1:
89:b6:c6:5c:fd:4e:51:81:37:a3:13:cf:a1:5a:de:
d7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C2:3E:8E:6B:C4:3F:59:4A:04:1E:74:63:56:8B:D4:BF:A8:4A:B7
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/69F07A9026A411F19E385F9BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.244.0/23
Signature Algorithm: sha256WithRSAEncryption
29:17:15:f0:e6:16:7c:24:96:cd:9e:01:d4:d0:24:f6:08:9b:
f5:b4:dd:58:f9:7f:c1:13:50:30:0c:cc:4b:92:af:59:22:20:
fe:11:4a:14:f7:98:f9:ba:16:3f:67:c5:42:1c:db:17:4a:e9:
8c:04:3b:32:f9:7b:dc:14:7a:9e:d2:1d:75:cf:38:d4:f2:b3:
f0:45:57:38:3c:56:9b:f5:03:37:7b:a6:02:f8:ba:f8:b5:9b:
10:4c:17:cc:6d:b0:e3:7a:a5:d4:0f:1d:36:16:03:53:b0:55:
8f:00:45:fe:64:0a:35:b6:ad:db:ab:a7:2c:33:e0:29:21:1d:
c3:97:e4:c4:45:99:9d:ce:36:a1:fe:14:3d:2c:05:b5:cc:4d:
10:38:3a:72:7c:14:73:7e:c3:b8:d7:66:2a:6a:9b:6e:f4:17:
44:bf:42:f9:1c:ef:ed:6c:bc:23:7c:9d:d1:cc:d7:9c:aa:b8:
89:65:8e:be:24:bf:70:4d:3d:13:93:44:48:31:04:54:44:a4:
f2:1f:4e:80:82:4d:ed:d9:d6:45:9b:55:1e:45:30:e8:0c:db:
59:63:6d:1e:3b:c5:d7:13:a6:f9:fd:66:8f:46:40:91:e6:4b:
3f:55:17:ac:56:1d:4e:5e:1a:90:ee:6b:50:c1:55:e3:17:ab:
2b:72:9d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 22:42:16 2026 by rpki-client