Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C1FA9486494611F19070C3F0CE1D38B0.roa
File: C1FA9486494611F19070C3F0CE1D38B0.roa (raw, json)
Hash identifier: vr8xyNxQWkfs363NK8Z4RPU16wRYnNU3nz2mO68iI0s=
Subject key identifier: BE:39:AE:DD:F2:A4:99:E3:F0:80:3C:4C:A0:74:B2:D6:87:9D:BB:E1
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1F16
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C1FA9486494611F19070C3F0CE1D38B0.roa
Signing time: Wed 06 May 2026 12:26:08 +0000
ROA not before: Wed 06 May 2026 12:26:03 +0000
ROA not after: Sat 06 May 2028 12:26:03 +0000
asID: 9009
IP address blocks: 154.16.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7958 (0x1f16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 6 12:26:03 2026 GMT
Not After : May 6 12:26:03 2028 GMT
Subject: CN=69fb3360-5904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:26:5b:86:ba:5d:9b:c0:e6:2e:f2:13:54:3e:
50:cc:cf:a1:86:7a:fc:48:25:ee:27:e8:2d:03:f3:
ee:a6:f4:08:5b:49:ff:25:79:79:ad:49:88:16:91:
8a:55:54:8a:15:3c:8b:65:41:cb:0c:63:6b:51:05:
85:72:62:ab:c7:f9:4c:7e:fe:fe:46:e4:d0:20:a8:
7a:c8:d4:43:bd:ed:7f:3b:63:df:5d:56:88:23:3f:
17:04:8f:dd:03:2d:ee:5d:38:03:ce:04:0b:5e:c0:
25:a6:dd:0f:9f:b7:12:b6:c2:bc:3c:c2:42:eb:f2:
c9:fd:dd:1b:c9:2e:de:42:ef:28:01:07:85:2c:bf:
2d:2b:2a:4d:14:1f:c1:a6:82:1b:46:9f:d8:78:03:
dd:64:ae:e5:58:aa:9f:f4:1f:9f:56:71:de:90:25:
da:56:45:dd:2e:c3:99:34:71:7e:02:c9:37:23:ef:
ca:1e:a5:33:b4:e2:95:71:b3:b9:8a:74:4c:cc:f9:
f0:ac:c7:0f:eb:bd:46:0d:55:cd:1c:20:76:af:e3:
3d:dd:20:c2:2b:35:34:a1:85:17:9d:de:a6:e5:54:
69:fc:9e:79:63:9b:31:78:11:c4:0e:c1:12:61:74:
30:43:dc:85:87:b6:55:30:13:58:b8:32:20:6b:92:
42:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:39:AE:DD:F2:A4:99:E3:F0:80:3C:4C:A0:74:B2:D6:87:9D:BB:E1
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C1FA9486494611F19070C3F0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.211.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:41:1b:de:2e:e3:fd:6c:88:86:e9:a1:7a:4a:9d:fa:be:ba:
16:99:52:8c:b3:94:da:a4:6a:8d:78:32:f1:92:a2:c5:b4:41:
26:52:bc:96:fe:80:ad:d1:64:59:64:ce:fd:88:52:fc:83:73:
99:fe:c4:d8:bd:de:60:f2:3b:18:60:68:c0:93:8a:2f:a4:af:
42:83:b3:8a:56:c8:bb:8e:ba:a9:7c:da:3a:52:19:a5:da:13:
4b:8d:0b:01:91:e7:f7:08:c8:09:b8:01:9f:85:9e:ed:3f:37:
53:0c:c9:89:fb:f3:72:28:14:b0:0f:a6:9b:11:7f:81:8a:15:
61:58:c9:2d:05:b2:e1:3d:41:20:e3:b0:38:85:2b:99:4d:62:
f2:b9:a3:92:32:26:55:58:e0:39:b7:3e:ae:1f:7c:5b:45:67:
0d:4a:49:cc:2b:83:f5:45:cf:af:db:35:c0:85:51:7d:19:e6:
f1:55:6f:cf:22:29:eb:23:b5:35:ae:a8:f9:a0:36:40:f4:b5:
9b:57:90:1d:a9:fb:30:c3:bf:4b:1f:1a:34:3c:83:53:1f:04:
3b:b4:41:10:17:41:92:f6:54:ba:8f:78:56:4f:e0:10:02:84:
97:bf:bd:bd:c2:de:7b:5f:70:a3:c4:e3:53:25:51:6c:45:da:
ae:36:a2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 04:54:43 2026 by rpki-client