Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7CB4417C1C9D11F19F65EF96DAE4EC9C.roa
File: 7CB4417C1C9D11F19F65EF96DAE4EC9C.roa (raw, json)
Hash identifier: Lo0LQZcBzEkzVXl5vw6kuUZzUJ4Gxp3e/dmEBu05L1w=
Subject key identifier: 23:E7:1A:40:BB:20:09:D1:FB:4A:FC:64:01:82:8F:D8:34:87:BA:C8
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1E77
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7CB4417C1C9D11F19F65EF96DAE4EC9C.roa
Signing time: Tue 10 Mar 2026 16:23:36 +0000
ROA not before: Tue 10 Mar 2026 16:23:31 +0000
ROA not after: Sat 10 Mar 2029 16:23:31 +0000
asID: 834
IP address blocks: 154.16.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 12 Mar 2026 16:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7799 (0x1e77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 10 16:23:31 2026 GMT
Not After : Mar 10 16:23:31 2029 GMT
Subject: CN=69b04588-15ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:30:16:5b:42:ac:6a:db:12:82:c7:0e:37:58:
c6:29:70:7a:c8:0a:6f:4c:71:fa:32:3b:c8:bd:c6:
db:b6:1c:b8:7f:f5:eb:68:5a:18:c6:27:3f:01:a6:
55:05:1c:8d:ec:7f:e5:9d:bc:73:9b:86:1b:ad:90:
50:db:57:e5:65:b4:05:73:cc:68:3b:a4:53:91:ad:
ad:a7:5c:dd:1f:32:8c:34:fc:e7:50:0e:01:1f:f9:
32:0e:dd:e7:e7:87:83:f4:8e:7f:bf:2d:64:47:3a:
7d:89:1b:9d:1f:98:92:57:ee:36:7f:44:cc:bc:34:
70:79:b5:a1:fe:a0:5c:a7:0a:c2:c3:4c:2e:4b:af:
a9:22:96:88:1f:be:f8:72:7f:a6:9a:ee:e7:28:dd:
c4:41:bd:14:76:d3:26:6f:29:b5:02:d7:6a:66:d8:
48:47:18:e4:84:27:14:67:b1:b9:1e:ca:65:ee:db:
29:20:23:7e:f2:4e:a9:60:e9:68:04:40:cf:4d:fb:
f7:0b:36:20:18:3a:53:60:25:1d:0d:5c:9c:99:8f:
4c:67:2d:ac:36:fb:e0:f2:57:d9:85:ec:75:b8:32:
70:35:6b:bd:2a:b9:db:d7:89:ef:64:39:b0:1b:68:
9a:39:64:a6:46:c2:29:96:97:9e:51:9a:d9:24:ed:
68:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E7:1A:40:BB:20:09:D1:FB:4A:FC:64:01:82:8F:D8:34:87:BA:C8
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7CB4417C1C9D11F19F65EF96DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.12.0/24
Signature Algorithm: sha256WithRSAEncryption
54:fa:17:c1:ee:fc:e3:3b:f8:79:14:c7:27:68:27:ab:c7:39:
cd:2c:a2:9c:bc:81:f8:f8:56:f6:b7:a6:89:b9:63:ad:50:d3:
bb:0c:77:0a:ac:8f:06:09:61:89:3c:f0:6b:51:40:7f:83:e4:
98:04:4a:a0:47:c6:81:49:61:8b:58:95:2d:ef:20:2d:6d:01:
a6:8b:73:3e:3d:ed:1d:21:44:f2:30:d8:64:96:b5:84:68:e4:
0c:bb:82:d8:e2:1b:0b:3d:32:45:e2:66:dd:44:c3:cc:f1:50:
79:3f:e1:35:ce:15:73:43:1c:db:b7:ee:fc:3f:fe:e5:75:02:
3f:23:6d:e3:bb:9e:a0:da:0c:1e:78:18:a0:32:f5:a7:10:70:
f4:af:df:10:8a:46:f0:e3:70:be:85:d3:aa:9e:3c:42:e6:61:
04:4b:37:ea:ef:d7:fa:b9:8b:d4:43:7c:f0:84:b2:0d:b6:19:
46:8e:69:74:3d:7f:e5:28:81:46:a5:fa:d5:7e:d4:c3:f3:3f:
04:ac:63:7a:3a:39:bf:d8:2e:f4:9e:3e:e8:78:21:cc:8b:fe:
8c:40:ab:3a:b8:73:ed:72:65:30:da:c7:6b:61:92:6e:77:47:
04:c4:69:44:9e:ba:cb:83:8a:4b:c3:07:0d:0c:f6:67:78:3b:
b6:a9:70:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 23:49:00 2026 by rpki-client