Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/86FCFF800D6511F1B058A6EADAE4EC9C.roa
File: 86FCFF800D6511F1B058A6EADAE4EC9C.roa (raw, json)
Hash identifier: tWXvzsfsDrmX88i7uGR449yLMy2YSA+PdRy3Tx/0cf8=
Subject key identifier: 17:D0:3E:40:B8:BF:21:78:2A:4F:96:E3:9E:29:1F:A4:58:CC:05:BF
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1E00
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/86FCFF800D6511F1B058A6EADAE4EC9C.roa
Signing time: Thu 19 Feb 2026 07:35:14 +0000
ROA not before: Thu 19 Feb 2026 07:35:08 +0000
ROA not after: Sat 19 Feb 2028 07:35:08 +0000
asID: 201341
IP address blocks: 154.16.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 24 Feb 2026 00:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7680 (0x1e00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 19 07:35:08 2026 GMT
Not After : Feb 19 07:35:08 2028 GMT
Subject: CN=6996bd32-2405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:35:f8:d1:b9:57:6a:72:ea:57:bd:1b:35:89:
0f:0f:1a:54:d2:3f:fa:64:04:59:12:99:6a:7c:c1:
d6:91:a6:1c:7d:92:9d:02:1e:96:9a:66:f3:e8:bd:
0c:87:45:d0:10:95:66:03:08:cf:99:68:ea:a3:39:
da:ba:1e:f5:16:dd:d9:ec:01:9b:f4:a4:d2:f1:18:
d5:3c:fa:d3:a8:a8:99:9c:3a:42:5c:4c:df:aa:78:
76:de:1f:5d:ea:f2:e0:66:78:37:5c:03:e7:12:e3:
b5:94:4e:e3:45:b6:2b:7a:48:08:5c:2a:d3:99:de:
cb:9f:b8:a6:c4:22:58:a3:0f:55:7f:f5:44:3c:33:
f4:74:c4:f5:c2:17:54:7e:61:24:ab:ae:0d:fb:0b:
86:da:9e:03:2f:70:14:29:ae:fe:a9:6b:5e:4d:8f:
25:c6:25:1d:89:73:d2:04:6b:c8:1f:3f:c0:94:7d:
02:2d:33:06:9f:c7:47:6d:20:58:bb:14:48:de:05:
ee:50:02:17:20:e4:27:fb:7c:49:7b:93:f6:8e:38:
c5:3a:2d:0c:9d:e4:9f:4f:07:81:f0:01:17:62:4b:
4a:9a:51:99:5f:0a:fe:b6:d8:b0:74:7b:c3:04:6a:
72:78:58:5d:72:54:6e:47:aa:a0:68:22:05:e5:eb:
a4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D0:3E:40:B8:BF:21:78:2A:4F:96:E3:9E:29:1F:A4:58:CC:05:BF
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/86FCFF800D6511F1B058A6EADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.30.0/24
Signature Algorithm: sha256WithRSAEncryption
84:cf:7b:5b:6f:35:d1:8b:ff:2f:24:f0:02:da:eb:ed:c2:b7:
30:51:82:f2:75:b5:f1:cc:8c:b7:ef:a0:3a:c1:d4:9a:cc:65:
57:ed:6a:90:53:89:0f:03:ec:05:4a:10:bc:8e:0e:62:0f:1f:
2c:65:5c:c6:c3:98:48:d0:e3:a8:db:d6:0e:ee:71:4c:bc:ae:
31:e8:5b:ba:dd:cf:a0:84:8d:b8:ff:10:e8:db:a1:51:2b:bb:
fe:bd:21:6c:f7:70:45:a4:94:62:ec:db:0e:2f:8d:a9:ac:7b:
bf:48:ff:35:57:60:2e:01:d8:a4:a5:db:ca:41:82:36:fb:7b:
1d:a0:7e:55:b8:34:83:29:15:04:a6:0b:98:f6:c4:70:06:4f:
a7:63:d8:32:ce:86:cc:7b:c3:9c:f2:b2:81:21:46:53:cf:0f:
b5:c7:ec:49:92:4a:45:bb:9a:2e:ce:5e:25:b8:2d:20:a2:fa:
e5:d0:85:a8:c5:81:55:8c:83:00:66:4e:35:7a:49:cc:9a:a2:
c5:27:2b:77:d9:e9:c6:74:84:73:26:8a:81:d9:00:fb:c2:1c:
ef:17:ca:a9:df:13:63:09:a9:f6:55:74:eb:f5:74:cf:76:ef:
ec:b4:00:70:04:8a:ff:af:54:6e:b4:98:d3:09:45:b6:24:00:
09:99:fe:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 01:17:35 2026 by rpki-client