Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6DE1CB260D6911F183BD7781DAE4EC9C.roa
File: 6DE1CB260D6911F183BD7781DAE4EC9C.roa (raw, json)
Hash identifier: 9Lnqh/wKrb6XiOEmDA46FUtZcORZ/w+ImgK+OFhBG7w=
Subject key identifier: 3D:9F:07:69:CE:7F:B7:A6:4F:5E:4B:9D:92:E4:90:96:0A:AD:93:8A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1E0B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6DE1CB260D6911F183BD7781DAE4EC9C.roa
Signing time: Thu 19 Feb 2026 08:03:12 +0000
ROA not before: Thu 19 Feb 2026 08:03:02 +0000
ROA not after: Sat 19 Feb 2028 08:03:02 +0000
asID: 201341
IP address blocks: 154.16.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 24 Feb 2026 00:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7691 (0x1e0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 19 08:03:02 2026 GMT
Not After : Feb 19 08:03:02 2028 GMT
Subject: CN=6996c3c0-60f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:25:2e:50:b5:bb:2d:9c:a8:72:52:59:f5:5b:
77:66:72:86:be:ee:cc:09:96:a2:01:3f:e9:f9:5b:
a9:21:2f:13:d0:4e:2b:0c:cd:73:d0:bb:e2:7e:d9:
33:55:49:22:bf:f8:c1:84:a2:02:82:d4:e4:c5:ee:
29:46:05:24:91:4b:db:0a:98:40:89:0a:08:12:68:
f0:65:f2:fa:67:72:79:f1:8a:e0:2a:53:e4:e2:f1:
d3:c6:ac:d9:47:fc:33:a7:53:00:86:c8:ef:0c:40:
28:88:f6:3b:a8:19:c0:be:c4:1a:69:3f:ca:bb:77:
a0:bb:7a:63:6e:25:41:af:eb:e7:de:14:7f:79:49:
fc:8d:e9:03:f3:65:2d:af:97:72:51:a2:df:fd:6b:
43:27:da:53:f1:48:28:07:7d:4f:95:d3:ae:aa:56:
99:65:52:e1:32:fe:44:ef:2b:86:72:1b:f7:eb:36:
00:b7:6d:34:62:3e:fd:91:9e:e6:fa:d5:4e:5b:01:
c6:15:3d:e8:8d:68:80:2c:80:1f:43:13:f7:bb:7e:
ad:44:95:64:39:eb:e8:67:f4:f3:f8:87:22:2c:c1:
8d:04:54:8b:cb:09:55:c6:4c:91:b0:4e:b2:20:45:
5b:55:88:62:e8:9f:cb:01:ca:65:b3:1e:02:e8:ad:
74:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9F:07:69:CE:7F:B7:A6:4F:5E:4B:9D:92:E4:90:96:0A:AD:93:8A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6DE1CB260D6911F183BD7781DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.45.0/24
Signature Algorithm: sha256WithRSAEncryption
23:fc:c0:78:05:21:f9:f9:a3:3b:88:77:2f:6e:00:7c:30:fd:
24:49:64:eb:db:44:d8:aa:ff:e5:3a:90:d7:00:6a:2b:c2:d8:
2d:e3:da:01:5b:c9:c8:e5:b4:bf:8d:a5:c5:bc:0a:59:8e:2d:
96:91:a9:5d:de:92:0b:ba:e2:7b:93:91:a7:e1:98:62:1a:e8:
87:1f:23:68:00:fb:f9:6c:57:55:f1:60:c4:3e:9a:59:e1:bf:
cb:77:49:8d:98:22:2f:1f:40:39:cd:e3:a1:b4:97:db:0d:94:
52:9e:e7:c5:68:8e:1d:b6:7d:28:a2:e3:bf:3e:4f:a2:69:a6:
40:bf:95:55:bf:48:83:79:c6:4b:0d:81:97:3c:4e:16:e1:c8:
79:80:0a:73:a9:53:c5:17:9a:8b:cc:24:a8:06:87:e3:68:0a:
0a:42:e2:41:fd:60:b7:e2:f6:06:d8:43:cf:2c:c5:46:84:cc:
81:bd:8c:27:5b:ce:5e:1a:e9:df:4c:1f:5f:55:45:ac:a3:a3:
46:fc:41:40:25:b5:69:8a:8e:8e:94:04:96:27:40:91:93:10:
d8:4a:71:39:43:7c:54:81:e0:4a:3c:4b:35:49:7d:b2:09:93:
c6:a7:b8:e0:bf:25:82:7e:0d:a3:1c:53:0d:cf:c1:67:cb:30:
94:58:91:b1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICHgswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjAyMTkwODAzMDJaFw0yODAyMTkwODAzMDJaMBgxFjAU
BgNVBAMTDTY5OTZjM2MwLTYwZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMJS5QtbstnKhyUln1W3dmcoa+7swJlqIBP+n5W6khLxPQTisMzXPQu+J+
2TNVSSK/+MGEogKC1OTF7ilGBSSRS9sKmECJCggSaPBl8vpncnnxiuAqU+Ti8dPG
rNlH/DOnUwCGyO8MQCiI9juoGcC+xBppP8q7d6C7emNuJUGv6+feFH95SfyN6QPz
ZS2vl3JRot/9a0Mn2lPxSCgHfU+V066qVpllUuEy/kTvK4ZyG/frNgC3bTRiPv2R
nub61U5bAcYVPeiNaIAsgB9DE/e7fq1ElWQ56+hn9PP4hyIswY0EVIvLCVXGTJGw
TrIgRVtViGLon8sBymWzHgLorXQzAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUPZ8H
ac5/t6ZPXkudkuSQlgqtk4owHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzZERTFDQjI2MEQ2OTExRjE4M0JENzc4MURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEC0wDQYJKoZIhvcNAQEL
BQADggEBACP8wHgFIfn5ozuIdy9uAHww/SRJZOvbRNiq/+U6kNcAaivC2C3j2gFb
ycjltL+NpcW8ClmOLZaRqV3ekgu64nuTkafhmGIa6IcfI2gA+/lsV1XxYMQ+mlnh
v8t3SY2YIi8fQDnN46G0l9sNlFKe58Vojh22fSii478+T6JppkC/lVW/SIN5xksN
gZc8ThbhyHmACnOpU8UXmovMJKgGh+NoCgpC4kH9YLfi9gbYQ88sxUaEzIG9jCdb
zl4a6d9MH19VRayjo0b8QUAltWmKjo6UBJYnQJGTENhKcTlDfFSB4Eo8SzVJfbIJ
k8anuOC/JYJ+DaMcUw3PwWfLMJRYkbE=
-----END CERTIFICATE-----
Generated at Mon Feb 23 01:13:04 2026 by rpki-client