Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8D53395A1EB611F18BA906E3DAE4EC9C.roa
File: 8D53395A1EB611F18BA906E3DAE4EC9C.roa (raw, json)
Hash identifier: 6kWmO9c3LHZKh5vkse4/+iysQgbnyCJFztbySTMMTYg=
Subject key identifier: 2C:6E:E6:73:59:0F:69:9B:B9:AC:E2:2A:BB:41:BA:DE:44:7D:25:7D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1E83
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8D53395A1EB611F18BA906E3DAE4EC9C.roa
Signing time: Fri 13 Mar 2026 08:28:03 +0000
ROA not before: Fri 13 Mar 2026 08:27:58 +0000
ROA not after: Mon 13 Mar 2028 08:27:58 +0000
asID: 834
IP address blocks: 154.127.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Mar 2026 00:06:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7811 (0x1e83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 13 08:27:58 2026 GMT
Not After : Mar 13 08:27:58 2028 GMT
Subject: CN=69b3ca93-f43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:16:fa:a5:e5:9f:a1:a8:3f:4c:b8:76:70:ff:
36:ea:b8:48:c3:c4:62:71:69:c6:31:14:b5:69:53:
86:c6:65:08:1b:c1:25:94:c7:07:16:db:4b:e8:c0:
f7:c9:b4:16:6d:3f:78:fe:5a:b7:a0:fa:f3:fb:7c:
2a:ad:bf:20:72:2b:26:9f:5f:2c:69:31:f0:50:e0:
94:ce:30:e9:da:5c:49:86:03:36:5d:b0:f9:64:60:
ee:5a:a1:be:d4:f1:75:d3:2e:df:41:a0:f9:6f:e7:
e3:3d:32:48:d4:c7:2c:96:16:5a:47:62:0f:c2:1f:
96:d2:5f:4c:ff:94:a3:64:26:ba:75:a9:d7:e0:7b:
85:46:43:42:19:67:7b:6f:4c:06:2d:44:3c:d0:62:
fc:5c:8f:1c:ac:c4:08:11:19:21:c4:44:60:72:ed:
80:8a:7c:5d:b2:ac:e6:7a:20:2a:73:c5:b5:99:9e:
81:b0:ce:29:57:d4:69:17:5b:d7:54:21:35:a4:27:
0a:5f:6e:47:a2:ae:47:5a:ea:73:53:5c:9b:6e:e3:
8a:54:16:61:4b:05:39:c8:9f:29:71:07:42:c5:9f:
82:54:97:c3:09:e7:13:c5:53:9f:a6:4f:09:d5:f1:
37:4b:4e:65:36:4f:47:b2:b9:74:4d:c2:98:28:96:
47:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6E:E6:73:59:0F:69:9B:B9:AC:E2:2A:BB:41:BA:DE:44:7D:25:7D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8D53395A1EB611F18BA906E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.50.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:6e:2f:a3:9a:36:bc:ad:08:0c:95:02:ef:e6:72:9b:9c:0a:
57:b5:e0:9c:10:5d:ca:ec:56:49:7a:8d:2d:a6:2c:70:26:d7:
91:5b:b3:a0:c2:4c:62:61:70:ce:01:5f:ce:55:e6:03:62:3b:
58:1f:b8:9a:54:94:74:fa:1e:a6:e5:15:ac:c7:2c:04:73:6b:
ec:fe:f7:63:ce:8c:81:7a:24:24:08:8c:03:56:03:01:ea:14:
9c:a9:39:f0:86:af:93:6f:33:1c:41:8b:8a:60:45:50:7e:b4:
34:d1:dc:ed:02:d8:c5:f9:a3:22:c2:66:ed:f7:89:39:e8:87:
d5:9d:b7:db:a8:f2:b3:b2:9c:b5:1f:a5:95:5e:9c:7d:8c:5c:
02:ec:82:e0:79:84:b5:73:36:83:c4:8a:a1:71:0d:a7:8e:b5:
9f:12:fc:28:99:aa:2a:54:a7:d4:4e:af:7b:01:fd:c2:2c:01:
e2:8b:97:2d:14:80:59:10:ae:e3:c4:c7:be:6b:2d:53:10:1b:
99:20:ee:93:77:de:51:50:f5:79:4e:24:08:3b:36:76:d3:cf:
9a:5c:65:3e:72:ab:58:01:35:ec:7c:7a:86:20:be:05:69:9e:
4f:b8:98:71:1d:46:57:bd:78:c9:36:6d:b3:af:a6:d0:2b:3d:
dd:0c:40:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 21:54:44 2026 by rpki-client