Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C8336C9638EE11F19BC30DA6CE1D38B0.roa
File: C8336C9638EE11F19BC30DA6CE1D38B0.roa (raw, json)
Hash identifier: NZ7w4MThq7URYvXIK951N87CGS9nzrj5wZNbZCkt3wY=
Subject key identifier: 9D:4D:70:7C:4A:27:C5:CC:FC:D1:A0:86:3C:AB:AC:22:6C:69:9A:CA
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1EE2
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C8336C9638EE11F19BC30DA6CE1D38B0.roa
Signing time: Wed 15 Apr 2026 17:16:04 +0000
ROA not before: Wed 15 Apr 2026 17:15:59 +0000
ROA not after: Sat 15 Apr 2028 17:15:59 +0000
asID: 198250
IP address blocks: 154.16.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 17 Apr 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7906 (0x1ee2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 15 17:15:59 2026 GMT
Not After : Apr 15 17:15:59 2028 GMT
Subject: CN=69dfc7d4-bc3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a4:37:8e:f7:99:fa:ab:b2:3f:ea:61:b6:29:
14:15:27:a0:c6:6a:0b:f2:f5:8d:d4:8e:5f:d3:d7:
55:25:8c:a0:76:a7:df:00:c8:ab:0f:52:67:27:9f:
d6:ca:e5:b6:83:7c:a0:d8:f5:97:7a:a8:f1:b7:13:
8d:68:5c:c3:7c:d9:b1:7e:f5:c4:a3:d5:84:67:89:
3b:71:4c:00:b1:0b:c9:9f:58:ea:06:79:c7:2a:bf:
02:c0:c7:50:a7:ae:3d:4e:40:21:ba:cd:4d:6e:d7:
b4:3f:1a:a1:92:13:f3:50:6b:bb:c3:51:6b:82:ab:
a8:00:be:38:b8:96:5d:79:4e:bb:ad:9a:02:ed:90:
d8:b7:e7:53:3b:9b:35:22:cf:9e:7d:5c:ca:88:45:
f6:71:09:24:dc:44:bb:19:a5:68:42:49:8d:8a:c5:
ce:2f:66:63:31:5a:a6:1d:de:a2:96:5b:47:c4:14:
6e:aa:a1:02:91:1e:29:07:27:79:dc:2e:b6:ab:8f:
35:b3:76:c6:0d:90:15:bb:e8:a3:6b:e4:6a:de:10:
cc:24:0f:89:62:a8:c3:be:58:b3:5e:43:63:02:5b:
30:dd:0a:1f:47:df:5f:f6:2a:68:a4:52:a3:f8:5e:
89:c8:99:8a:a0:5a:1e:b4:ab:7b:ea:4b:2b:aa:8e:
37:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4D:70:7C:4A:27:C5:CC:FC:D1:A0:86:3C:AB:AC:22:6C:69:9A:CA
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C8336C9638EE11F19BC30DA6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.12.0/24
Signature Algorithm: sha256WithRSAEncryption
51:0f:ac:ba:5d:b0:b4:69:5a:11:12:ca:8d:9c:94:84:ce:16:
7a:95:32:76:66:2b:cc:0a:f9:6e:a1:d3:be:c1:22:7c:20:e6:
e3:0f:90:0f:b9:af:36:37:92:f3:ca:c6:2d:9c:4e:40:06:46:
d2:f1:5a:24:d2:3f:c0:6c:91:d4:f2:23:67:ec:87:0c:90:ac:
19:d2:6a:db:7f:2d:d1:da:03:35:be:83:eb:19:72:41:18:2f:
26:51:a5:e5:cd:c4:b2:fa:ae:fc:5f:1f:2d:31:56:49:72:eb:
64:09:9b:d1:d5:a5:ee:5e:42:ec:9f:9d:f3:65:91:27:ad:28:
b5:9a:36:76:a1:54:b9:7e:8d:ae:82:a2:eb:99:4c:24:be:18:
75:50:cc:35:2e:ea:90:f2:14:7e:16:a6:02:df:2b:94:88:d5:
4d:64:93:a4:d7:8f:62:51:43:ab:48:0a:d4:c0:ac:16:a8:a4:
dd:ac:df:08:3f:79:f6:18:28:13:3d:38:2b:9b:3a:4b:7c:3f:
8f:d2:8d:b4:f4:81:47:71:14:af:af:51:b6:75:a9:af:80:f4:
1d:48:de:f2:68:52:5d:57:90:68:f8:f1:c4:4c:49:22:04:64:
87:26:3b:c3:ce:1c:00:ec:6c:67:4e:8b:94:97:da:38:34:91:
06:e2:81:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 22:32:03 2026 by rpki-client