Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C841AEA242C911F198472401CF1D38B0.roa
File: C841AEA242C911F198472401CF1D38B0.roa (raw, json)
Hash identifier: Zvgca9tKlPwOCNf2p9E7WnEFaXIJr3HWJAwWUW0g8Ao=
Subject key identifier: 83:47:A1:C0:EE:58:12:AE:FF:30:C6:C7:33:61:CD:5E:CA:8B:15:81
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1EF9
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C841AEA242C911F198472401CF1D38B0.roa
Signing time: Tue 28 Apr 2026 06:16:24 +0000
ROA not before: Tue 28 Apr 2026 06:16:20 +0000
ROA not after: Fri 28 Apr 2028 06:16:20 +0000
asID: 212238
IP address blocks: 154.16.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Apr 2026 06:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7929 (0x1ef9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 28 06:16:20 2026 GMT
Not After : Apr 28 06:16:20 2028 GMT
Subject: CN=69f050b8-c330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:98:24:51:cb:6e:a4:7b:2d:ab:79:62:3f:f5:
42:2e:46:e2:ca:50:24:b3:d5:02:82:c5:ae:b4:3b:
71:c9:bf:ed:83:f1:ed:ec:42:24:40:28:68:2b:9d:
99:86:93:be:ca:08:d7:cf:00:6d:d2:a1:53:8a:12:
aa:19:b8:e2:56:5e:c9:28:30:fc:54:4e:bf:7e:a9:
59:30:92:ae:c1:7f:7b:5c:09:fc:68:ef:96:ec:b3:
f8:84:eb:d2:31:40:35:12:b0:3f:10:35:4a:5c:4b:
e7:51:f3:16:a2:b6:ce:d2:d5:c1:1a:2b:fe:3b:8f:
bf:51:26:da:bf:33:0a:41:16:7d:19:d8:9b:1d:f3:
d0:25:35:e5:80:3f:0a:4e:e3:44:cf:5f:ae:6f:2a:
c8:a0:2f:c9:d0:9e:c2:20:a3:05:3d:91:af:ce:07:
2d:d4:46:03:00:c5:f8:0b:1f:cf:bc:ce:60:1d:0d:
c3:ec:55:3c:97:c7:29:ae:5c:20:f0:0a:97:0d:09:
51:22:c7:39:e2:82:0d:f5:16:36:18:b0:6d:25:8f:
33:12:a0:9c:c9:59:a7:b6:d8:d8:43:58:1f:63:1d:
a4:6e:ea:23:85:25:07:17:5d:da:56:06:4e:88:67:
56:fc:f3:b5:14:d0:01:10:6b:d7:68:4d:df:16:f9:
53:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:47:A1:C0:EE:58:12:AE:FF:30:C6:C7:33:61:CD:5E:CA:8B:15:81
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C841AEA242C911F198472401CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.139.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:53:5e:a6:96:89:b3:15:98:8c:90:5d:a3:a8:eb:34:8a:6c:
0d:4e:f6:04:c4:ec:92:99:7d:51:14:6c:5c:52:c5:8d:05:a9:
d4:fd:39:89:b8:f9:8c:0d:90:00:62:48:67:c0:dc:60:c2:ef:
63:94:27:8d:f3:3b:44:c6:2e:e6:e5:5c:fa:ef:d7:67:58:f6:
cb:45:dc:28:f3:6a:42:41:9a:8c:a7:a2:60:0c:6b:07:03:87:
61:d8:d7:11:fd:fd:18:cf:83:80:32:14:86:ad:e9:fc:dc:66:
d3:8b:84:64:82:f3:95:55:99:16:58:87:28:c8:ae:7a:63:6e:
4b:0c:d8:39:9c:3a:09:21:a7:58:c2:38:67:fc:ca:ca:10:a1:
fa:e0:32:aa:fe:69:eb:a5:f4:2b:82:e7:44:87:11:3e:66:ad:
70:7b:99:df:46:ff:9d:a5:86:2a:3f:41:f5:9c:a9:74:e5:5a:
26:eb:8e:64:6d:0d:8a:d7:4f:b6:3b:a0:d3:17:b1:a9:33:c0:
31:e7:da:db:6e:70:f0:79:e9:95:e8:b3:e9:11:5b:c1:68:6a:
d4:c3:24:e0:02:ae:e3:fb:11:29:1f:d8:67:ba:3d:83:78:8b:
49:3e:6d:14:6d:64:05:3b:85:0c:16:73:ee:59:ad:5c:5f:f1:
15:a7:69:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 12:41:08 2026 by rpki-client