Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/917071F4186E11F1A2AF7EB5DAE4EC9C.roa
File: 917071F4186E11F1A2AF7EB5DAE4EC9C.roa (raw, json)
Hash identifier: fZRJTBAau2M72z8zn3ciKzLoNHQkrkrWoNtMKvQjBZg=
Subject key identifier: 1A:7C:FA:D0:9A:76:A9:E4:86:BF:FE:A8:54:E9:A6:38:86:0B:0D:64
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1E4F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/917071F4186E11F1A2AF7EB5DAE4EC9C.roa
Signing time: Thu 05 Mar 2026 08:37:39 +0000
ROA not before: Thu 05 Mar 2026 08:37:35 +0000
ROA not after: Fri 05 Mar 2027 08:37:35 +0000
asID: 401819
IP address blocks: 154.127.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Mar 2026 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7759 (0x1e4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 5 08:37:35 2026 GMT
Not After : Mar 5 08:37:35 2027 GMT
Subject: CN=69a940d3-1868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bc:2c:15:e3:1a:88:0a:f8:5b:03:f5:65:0a:
3b:6c:6c:c6:cc:a5:f7:b8:59:61:8f:b7:ee:07:be:
91:89:0d:20:81:47:d7:fc:10:a8:20:8c:0f:84:83:
c4:93:ef:aa:16:2e:bc:bd:63:79:a9:34:45:45:81:
65:f2:6e:8c:7b:34:50:f4:1b:83:b6:0b:25:8c:8b:
5a:ec:6e:29:ae:1c:ab:0b:1f:b1:2c:f5:ea:1f:80:
44:9f:28:cf:a9:e4:b3:43:b2:1f:27:15:61:b7:88:
c0:86:19:24:c4:cd:bc:85:cf:39:5d:d4:95:95:c3:
52:9f:4d:e2:3a:11:cf:58:d2:97:84:27:68:3c:8e:
50:99:5a:bc:3f:d1:70:dd:ab:f5:5a:9d:eb:df:27:
4f:38:f2:4d:77:88:a5:52:09:8d:ee:cf:80:91:01:
6e:48:c7:55:a3:e5:b7:8d:97:a0:5f:62:6c:76:47:
66:45:98:1c:3e:9e:c8:02:34:be:e0:34:ea:00:1a:
d2:a3:ea:b0:69:2f:e9:bf:37:ae:eb:3e:eb:65:18:
75:f9:9b:a7:41:8f:4f:2f:d4:e9:46:22:9d:57:ce:
26:75:82:2d:ac:08:64:b1:af:3f:7f:e5:94:13:65:
d3:b4:bb:a8:8b:15:ee:5f:98:12:93:88:59:98:76:
35:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7C:FA:D0:9A:76:A9:E4:86:BF:FE:A8:54:E9:A6:38:86:0B:0D:64
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/917071F4186E11F1A2AF7EB5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.50.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:4f:c1:84:06:7b:2d:df:e4:c0:1a:f5:9c:19:4c:da:71:a7:
4e:3d:0a:99:9e:1b:6a:79:0f:64:64:4a:65:dc:d3:d6:1a:60:
9d:81:6e:87:f0:c2:99:e8:2c:23:f6:96:c6:4a:95:d1:e8:41:
6b:d4:2c:14:40:cc:e8:d9:ba:6c:9c:ab:fd:c3:7f:bf:c0:71:
27:b6:82:52:74:15:fa:b8:9f:22:32:8f:cf:eb:32:16:8f:07:
c7:bd:6a:97:ce:e0:5a:08:b5:7d:8a:8d:56:24:26:cf:e6:e6:
34:22:bf:35:35:29:96:bc:f8:aa:f5:66:54:ff:db:79:a1:c8:
c2:11:79:40:28:c2:e6:a7:c0:ba:16:96:0f:b2:9a:04:a9:56:
a1:96:ac:ca:cc:91:40:45:fc:fb:57:11:56:05:d4:56:b6:cc:
e8:12:52:ea:c0:df:e9:ba:f2:6f:37:8f:e1:9d:dc:a9:87:33:
61:68:af:f1:43:19:9c:57:ed:ab:bb:07:5c:65:e5:a0:58:65:
54:02:37:50:f2:9c:f4:2c:8b:4e:53:5f:4f:a4:e9:c0:c5:4f:
b2:68:28:2d:6d:bb:a3:01:3d:16:f4:f1:74:63:74:b1:77:2c:
48:f9:22:1b:28:1c:7f:00:c1:da:d1:c1:f0:78:47:d1:3c:de:
d3:1b:4e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 09:34:59 2026 by rpki-client