Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9E24D4261C5111F1BAE198E4DAE4EC9C.roa
File: 9E24D4261C5111F1BAE198E4DAE4EC9C.roa (raw, json)
Hash identifier: dBEnuHuWbHZm4CpGUwHa+V3zqPn+M4j8uUuCg20MY2M=
Subject key identifier: C5:78:B5:DD:F6:F6:AC:2A:B6:00:2A:BE:3F:47:CC:7F:46:BA:02:E1
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1E6E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9E24D4261C5111F1BAE198E4DAE4EC9C.roa
Signing time: Tue 10 Mar 2026 07:20:30 +0000
ROA not before: Tue 10 Mar 2026 07:20:25 +0000
ROA not after: Fri 10 Mar 2028 07:20:25 +0000
asID: 29802
IP address blocks: 154.127.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 12 Mar 2026 16:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7790 (0x1e6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 10 07:20:25 2026 GMT
Not After : Mar 10 07:20:25 2028 GMT
Subject: CN=69afc63e-0a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:a4:d7:ff:b7:08:cc:02:55:be:a5:45:b4:
81:65:7b:70:82:13:37:19:5f:8c:92:1f:81:1a:c1:
58:3c:fc:5c:46:1d:8d:db:c1:50:d5:ff:40:04:9d:
d5:53:7d:e4:28:ea:17:29:ea:a4:b6:dd:f9:39:33:
1c:6d:81:f7:47:8c:de:9a:4d:3d:6a:a1:68:e1:0b:
7d:11:b9:7b:ea:7f:66:65:b1:32:ed:7b:2a:dc:41:
3e:60:cb:38:b7:52:1e:81:47:7a:11:d8:7b:c4:44:
cf:44:8a:9d:63:3d:98:d2:0f:0c:98:6a:89:19:ad:
50:3b:ed:25:1a:0f:6b:78:c6:07:b4:af:8a:10:db:
c3:64:28:8f:e8:1a:0d:29:e1:da:64:9e:e3:07:7e:
80:f0:21:15:10:5e:08:a5:5f:3a:0f:6f:c8:f4:e4:
fd:da:20:59:7c:fa:64:8c:84:f4:09:79:23:e7:75:
28:a3:06:19:5d:cf:c3:ee:4d:88:72:99:76:f4:73:
2e:b8:8a:19:8b:6d:0e:69:64:d5:74:72:86:a9:d1:
8a:ab:31:cc:46:2a:67:4a:5b:14:f3:92:ad:9f:fe:
e0:80:6a:17:f3:52:fc:53:ab:5d:61:d9:83:19:7c:
3c:1a:b7:73:75:9f:2a:e8:94:ae:76:70:e0:ba:a3:
fc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:78:B5:DD:F6:F6:AC:2A:B6:00:2A:BE:3F:47:CC:7F:46:BA:02:E1
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9E24D4261C5111F1BAE198E4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.52.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:3f:57:33:41:0c:d1:4b:92:66:f0:07:e6:1d:65:f4:fa:01:
6c:f3:53:54:9e:1e:08:3d:e6:03:78:97:65:4a:38:9a:16:d1:
8e:38:59:2b:a9:8e:ef:a1:a4:4f:45:da:23:fc:5f:2a:b0:4f:
31:36:12:c2:29:ad:86:b7:ec:dd:1c:9c:51:12:82:9e:0a:f7:
32:b9:0e:67:48:ae:a5:85:7d:a2:0f:00:34:70:53:61:f0:08:
19:44:e4:d2:5a:a5:5a:01:26:d8:c3:32:42:1a:c3:67:30:eb:
41:ae:c5:08:fd:3b:eb:44:5e:a1:14:9b:a6:f1:7f:63:bb:17:
68:27:b2:69:d1:20:c8:c9:6e:f8:44:cb:e8:e4:79:b2:53:08:
74:ed:80:4c:59:45:1d:d3:c9:2d:b2:1a:c6:1f:4a:74:a5:b3:
08:e8:52:cb:6e:a0:6b:2e:16:92:17:d5:f1:2f:9e:72:b0:d3:
33:15:0f:3f:a6:a4:d6:9b:49:29:44:8e:48:8f:b6:aa:21:19:
9c:93:27:19:88:e8:94:32:07:02:55:6f:45:e0:3a:04:1a:10:
e0:83:f0:8d:44:13:5c:73:15:a1:14:e1:5c:e8:d7:8d:9a:64:
cd:a6:61:37:b7:ae:aa:67:04:51:3a:cd:1e:62:7b:43:4f:15:
9e:00:40:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 23:49:51 2026 by rpki-client