Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A996750437D011F1A16445DBCE1D38B0.roa
File: A996750437D011F1A16445DBCE1D38B0.roa (raw, json)
Hash identifier: PBniS9d0ULT1L5Iso+MhX27/jasU/syvRrrecQb5YSE=
Subject key identifier: 16:E2:33:C0:A2:BA:FB:87:5D:6A:59:19:A3:4F:E5:E2:E1:CB:DE:49
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1ECE
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A996750437D011F1A16445DBCE1D38B0.roa
Signing time: Tue 14 Apr 2026 07:07:57 +0000
ROA not before: Tue 14 Apr 2026 07:07:52 +0000
ROA not after: Fri 14 Apr 2028 07:07:52 +0000
asID: 200017
IP address blocks: 154.16.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 16 Apr 2026 00:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7886 (0x1ece)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 14 07:07:52 2026 GMT
Not After : Apr 14 07:07:52 2028 GMT
Subject: CN=69dde7cc-7cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:99:ab:7f:28:44:10:71:64:24:1c:83:b4:e3:
e1:ff:02:6e:f7:c0:c6:c9:2b:d5:14:41:2f:da:01:
b8:6c:be:21:1c:e6:1e:b2:c6:75:5d:db:64:0d:6b:
c5:48:33:21:58:9b:f5:b1:e6:bf:b4:31:99:63:98:
f6:b2:15:c8:fc:7f:b1:3f:e1:5d:46:51:cc:4a:5d:
90:a9:50:19:50:57:86:09:c4:b6:5b:af:86:4c:2a:
e1:4e:cd:46:c9:52:31:c3:f8:e7:44:ec:0c:0a:0d:
b1:fd:c6:63:87:de:d6:c1:74:ec:d6:3a:d0:5c:57:
a3:4e:a4:c1:2b:c7:81:ae:66:ac:77:7a:62:69:36:
d1:dc:92:e9:87:b5:57:b9:20:d1:fb:b4:f4:e8:5a:
77:34:b6:51:ec:da:89:9e:52:c3:04:1d:7a:e7:79:
6f:00:61:93:c0:40:11:90:89:2f:07:3e:e9:f8:42:
4c:65:c7:bc:7e:1d:50:95:6a:d7:18:69:d4:2e:e6:
90:c0:6a:d0:4b:fd:de:af:48:ac:b8:02:dd:e8:fe:
60:13:dd:77:5b:2a:85:5e:6f:d6:93:a8:6b:cd:8b:
9c:d6:53:ac:9c:4f:d3:2e:30:51:c5:53:12:39:fc:
bf:93:64:17:a1:13:09:c5:82:e9:6b:44:a2:c1:21:
62:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E2:33:C0:A2:BA:FB:87:5D:6A:59:19:A3:4F:E5:E2:E1:CB:DE:49
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A996750437D011F1A16445DBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.152.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:a9:05:9f:1a:69:08:9d:a8:f0:12:94:d8:fd:0c:08:c3:16:
06:79:d7:51:c8:e4:9e:81:ca:60:57:0c:f3:41:6c:a2:bf:26:
67:03:8a:79:e6:92:88:01:cd:53:fc:b8:54:f9:f2:30:bb:79:
2e:43:3c:07:54:a4:f4:45:f0:75:db:fe:eb:fa:5b:2f:df:55:
50:4b:b9:d7:a9:ac:ff:d3:dc:78:d8:d8:28:21:42:1b:99:ba:
82:c0:7b:8e:69:ba:a0:fe:4e:14:36:a8:8e:2a:e5:82:5c:74:
28:90:ba:4b:54:0b:42:6f:9b:2c:89:e6:d1:02:a9:d0:23:13:
d0:88:e0:67:d5:6d:0d:73:c8:2c:85:d3:41:a2:b7:8c:b9:64:
ae:eb:1a:e2:6f:46:f5:53:e6:18:84:68:68:c6:2e:e9:7a:a5:
88:cc:82:bb:b4:d1:78:05:08:f8:da:0a:0c:28:b4:09:36:d0:
42:a3:04:0a:5d:c4:ac:57:df:3d:ac:0f:c2:13:ca:5e:e6:37:
8b:08:a4:d8:e8:e7:74:98:09:13:3d:1c:64:9f:bb:54:47:95:
52:be:75:bb:4c:7a:10:2d:2f:54:7d:36:2d:5e:ef:69:47:99:
8c:57:bc:c9:76:df:3f:12:32:e3:fd:a0:8c:0b:bc:d0:ea:92:
dc:76:a9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 14 21:44:23 2026 by rpki-client