Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9B76933443B811F18A7614A7CE1D38B0.roa
File: 9B76933443B811F18A7614A7CE1D38B0.roa (raw, json)
Hash identifier: JORpjmbIE/+zAu/8YzDMON6jx5NeC3Av44EBkjlNGRY=
Subject key identifier: 39:7E:8C:D8:55:8D:0C:19:36:49:EC:A4:6A:A0:69:B4:FC:A4:6A:45
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1EFC
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9B76933443B811F18A7614A7CE1D38B0.roa
Signing time: Wed 29 Apr 2026 10:45:59 +0000
ROA not before: Wed 29 Apr 2026 10:45:54 +0000
ROA not after: Sat 29 Apr 2028 10:45:54 +0000
asID: 402215
IP address blocks: 154.16.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 May 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7932 (0x1efc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 29 10:45:54 2026 GMT
Not After : Apr 29 10:45:54 2028 GMT
Subject: CN=69f1e167-364f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fa:31:50:0a:90:7d:ae:00:fb:fe:5a:e9:6c:
7c:7b:17:f5:3b:5f:20:fc:38:19:1f:51:d3:78:63:
55:b4:e5:4d:9c:e7:a0:02:02:b7:eb:ad:fa:cc:9a:
ff:fb:05:6b:62:f8:c0:8b:30:70:1d:ef:43:5e:44:
86:43:20:2a:e7:ee:e5:9a:b3:f6:6e:aa:1b:5a:0d:
9a:0b:c9:4b:e7:da:bf:b7:16:a2:eb:d2:89:2e:6a:
cd:cc:48:6d:99:d3:d7:f0:aa:9e:8c:f8:4e:fc:c1:
48:d3:aa:57:86:67:d0:44:6d:e0:61:e6:5f:71:cf:
79:6b:83:e2:cb:98:d6:3a:9c:6f:b1:da:88:b8:45:
0f:b6:c8:c0:d3:10:d2:06:58:8c:df:8b:58:27:d1:
f5:79:0f:e6:6c:05:40:1b:98:e9:87:c3:ae:93:6a:
c2:51:6c:4d:09:ec:76:f4:f2:9b:32:de:b3:b6:c8:
32:58:82:ae:93:32:13:97:16:20:5b:09:00:b7:5a:
29:a7:78:08:2e:12:ae:1f:8e:85:36:3f:12:79:79:
5c:4a:0a:5e:dd:b6:05:fd:8f:c9:b9:5a:fe:e2:e1:
8d:b3:03:96:b6:f1:13:ac:ec:34:a0:c8:b9:4d:67:
47:36:d1:ee:af:67:54:94:57:72:ff:c7:aa:ba:d0:
34:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7E:8C:D8:55:8D:0C:19:36:49:EC:A4:6A:A0:69:B4:FC:A4:6A:45
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9B76933443B811F18A7614A7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.12.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:6b:eb:55:69:36:8f:fb:94:01:79:a5:7d:08:84:da:b5:16:
6d:71:5d:fa:4f:20:b0:c6:4c:db:3e:05:60:88:01:7f:c7:11:
48:e0:11:34:17:73:ed:cb:a6:8e:18:ec:40:70:9f:16:23:a5:
91:45:94:ed:ef:af:8e:ff:7b:09:63:be:f1:90:c3:76:25:0d:
15:b9:c6:f1:5d:b9:ff:10:a4:76:ae:6f:5c:23:38:2a:9b:5f:
c7:c5:3d:da:35:c3:61:cd:58:3f:9e:6c:44:e9:3b:d6:a9:9d:
b4:f4:79:88:8d:e2:d9:41:12:6f:47:a4:63:83:e4:3d:2d:ff:
6d:08:33:2e:cd:4e:20:44:cb:78:9a:22:cc:90:d9:16:fb:38:
59:bf:85:da:40:1c:47:7d:e3:33:82:7c:95:b6:09:f0:03:87:
52:0f:93:97:0c:5b:46:2a:7e:5b:b2:10:55:c5:ae:a5:af:12:
02:8d:2f:93:e4:c6:36:f7:88:53:8b:ea:fd:99:59:aa:9d:21:
e5:dd:89:20:03:56:35:3e:74:df:b5:ff:7c:87:db:c3:3b:2c:
54:c4:78:d7:ae:d1:ea:72:b0:17:7d:dc:ed:05:99:97:a1:1f:
46:df:35:c4:b4:8b:09:20:94:30:16:ae:05:4a:fd:73:94:ea:
38:1d:3b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:43:47 2026 by rpki-client