Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A2099032494611F195BDF5EECE1D38B0.roa
File: A2099032494611F195BDF5EECE1D38B0.roa (raw, json)
Hash identifier: LSpAtf/sUcaaJAAAZK+VcqwFIx/1k5PAtBIxf71O0/A=
Subject key identifier: 5A:1B:48:62:76:DA:C4:FC:AE:F6:E7:88:A9:3D:8B:C6:43:4C:7A:89
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1F14
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A2099032494611F195BDF5EECE1D38B0.roa
Signing time: Wed 06 May 2026 12:25:14 +0000
ROA not before: Wed 06 May 2026 12:25:09 +0000
ROA not after: Sat 06 May 2028 12:25:09 +0000
asID: 9009
IP address blocks: 154.16.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7956 (0x1f14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 6 12:25:09 2026 GMT
Not After : May 6 12:25:09 2028 GMT
Subject: CN=69fb332a-edd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:29:63:f5:12:4d:59:a3:36:d4:9a:fc:2f:0a:
bd:b1:ae:e9:9b:3b:c4:14:af:13:68:3f:46:82:43:
25:6a:d4:8d:57:6f:e3:75:90:a9:e3:25:00:61:89:
08:39:24:5f:51:f4:f6:4a:cb:df:47:92:ef:ab:bb:
22:bf:47:22:67:8e:ee:47:52:d1:3b:fd:85:e2:a7:
d6:30:95:8d:b5:a4:dc:1b:db:0c:11:14:bf:01:41:
20:04:b0:e3:ec:eb:b4:5f:11:98:f4:c4:4e:33:65:
45:cc:d1:68:27:69:5c:5c:39:50:cd:46:3e:e9:2e:
7f:98:9b:19:46:e8:53:93:b5:a5:2b:21:78:c0:87:
d5:dc:ac:91:fe:ff:ef:69:09:3f:75:4a:88:ec:cb:
3b:c9:20:cb:b6:8b:d9:73:1b:64:3d:aa:8d:ad:5c:
df:70:e3:4b:26:51:44:f1:6e:9c:06:1a:e5:ec:9d:
7e:a3:fb:e0:8f:58:fd:28:46:7c:c1:8f:a9:6f:8d:
f3:42:90:d1:98:9f:a7:b4:c5:7f:2e:31:90:73:97:
60:cc:84:af:e6:f2:ef:f8:c6:59:dd:9e:73:71:d2:
35:4f:7c:3a:78:00:91:ac:33:37:22:33:c3:42:09:
00:6b:69:d4:4b:14:e7:42:db:5c:ac:3d:2e:7c:d5:
06:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1B:48:62:76:DA:C4:FC:AE:F6:E7:88:A9:3D:8B:C6:43:4C:7A:89
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A2099032494611F195BDF5EECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.251.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:02:70:6d:bd:4e:77:1b:e0:2f:8b:f2:d9:51:77:57:10:05:
1b:f6:e3:14:92:49:3b:39:e4:89:32:2e:1e:59:ea:b2:f0:7c:
89:f0:c0:09:8f:b0:0c:5c:32:31:f6:be:fd:2e:a3:23:6f:6c:
34:b6:bc:fc:96:70:23:ad:cc:8e:ea:7c:93:87:f0:b5:a8:84:
23:e1:08:57:a2:89:a2:03:f1:52:24:ab:04:7e:3a:74:77:b7:
c1:19:a1:e0:82:52:de:49:77:07:90:ea:1c:4b:c6:90:e8:aa:
a5:49:99:e9:2d:44:a1:c7:3d:92:52:e8:92:dc:7e:55:dc:9c:
95:8e:8f:d1:f7:eb:dd:5f:40:cd:7d:4e:50:00:29:8b:95:21:
98:eb:19:d9:09:74:30:16:71:b6:79:4d:dc:af:f6:0e:1b:84:
41:37:fb:92:03:da:73:0a:a9:6b:a6:6b:14:92:2e:29:63:8c:
5b:b4:9a:4b:51:e1:60:ef:e2:63:00:6b:8d:af:8c:e8:08:dd:
07:03:fc:91:2e:85:d9:d2:61:45:c5:97:d1:a7:1d:ef:05:5e:
97:d9:73:45:04:83:93:22:5b:61:fb:e6:48:7e:88:89:b5:8c:
fe:ef:db:ff:83:99:8d:5f:75:40:71:43:4b:c5:5d:ce:4d:b0:
f6:d6:ac:75
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICHxQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjA1MDYxMjI1MDlaFw0yODA1MDYxMjI1MDlaMBgxFjAU
BgNVBAMTDTY5ZmIzMzJhLWVkZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHKWP1Ek1ZozbUmvwvCr2xrumbO8QUrxNoP0aCQyVq1I1Xb+N1kKnjJQBh
iQg5JF9R9PZKy99Hku+ruyK/RyJnju5HUtE7/YXip9YwlY21pNwb2wwRFL8BQSAE
sOPs67RfEZj0xE4zZUXM0WgnaVxcOVDNRj7pLn+YmxlG6FOTtaUrIXjAh9XcrJH+
/+9pCT91SojsyzvJIMu2i9lzG2Q9qo2tXN9w40smUUTxbpwGGuXsnX6j++CPWP0o
RnzBj6lvjfNCkNGYn6e0xX8uMZBzl2DMhK/m8u/4xlndnnNx0jVPfDp4AJGsMzci
M8NCCQBradRLFOdC21ysPS581QYFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUWhtI
YnbaxPyu9ueIqT2LxkNMeokwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0EyMDk5MDMyNDk0NjExRjE5NUJERjVFRUNFMUQzOEIwLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEPswDQYJKoZIhvcNAQEL
BQADggEBAFoCcG29Tncb4C+L8tlRd1cQBRv24xSSSTs55IkyLh5Z6rLwfInwwAmP
sAxcMjH2vv0uoyNvbDS2vPyWcCOtzI7qfJOH8LWohCPhCFeiiaID8VIkqwR+OnR3
t8EZoeCCUt5JdweQ6hxLxpDoqqVJmektRKHHPZJS6JLcflXcnJWOj9H3691fQM19
TlAAKYuVIZjrGdkJdDAWcbZ5Tdyv9g4bhEE3+5ID2nMKqWumaxSSLiljjFu0mktR
4WDv4mMAa42vjOgI3QcD/JEuhdnSYUXFl9GnHe8FXpfZc0UEg5MiW2H75kh+iIm1
jP7v2/+DmY1fdUBxQ0vFXc5NsPbWrHU=
-----END CERTIFICATE-----
Generated at Sat May 9 04:54:44 2026 by rpki-client