Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C8E6EE6E0D6111F1AD1852D2DAE4EC9C.roa
File: C8E6EE6E0D6111F1AD1852D2DAE4EC9C.roa (raw, json)
Hash identifier: UJUg4cKLQIM3IGBaqiM7oywjlTYH9Yxf8hdIfqBEapo=
Subject key identifier: 79:19:33:45:63:C5:22:D7:48:0B:E7:2A:5D:11:73:5C:6F:2D:2F:43
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1DF4
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C8E6EE6E0D6111F1AD1852D2DAE4EC9C.roa
Signing time: Thu 19 Feb 2026 07:08:26 +0000
ROA not before: Thu 19 Feb 2026 07:08:17 +0000
ROA not after: Sat 19 Feb 2028 07:08:17 +0000
asID: 201341
IP address blocks: 154.16.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 24 Feb 2026 00:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7668 (0x1df4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 19 07:08:17 2026 GMT
Not After : Feb 19 07:08:17 2028 GMT
Subject: CN=6996b6ea-1a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e8:81:62:6b:f4:ea:e9:4c:b7:64:17:f4:fb:
b2:f8:b6:d4:12:8f:9c:f4:de:41:af:c2:9c:f4:50:
5f:fc:d7:41:e4:f3:4b:ae:45:0d:b4:a6:8e:be:2b:
06:95:3a:bf:4e:18:65:7c:20:fa:7e:a1:cd:c0:71:
6b:58:90:6d:2a:c3:6a:ab:92:e7:1a:79:85:bb:29:
1b:bf:d8:3a:f6:42:02:82:11:0e:fb:97:44:18:37:
24:49:7f:8e:95:1b:83:13:b8:fd:5e:52:16:ba:3f:
66:db:fa:67:ec:3a:37:e6:22:fd:e2:06:5a:40:69:
20:6a:ac:fa:08:a4:6e:ff:2a:02:a6:10:97:03:6f:
dc:75:e4:1b:9f:81:a7:bc:57:37:47:ec:6c:0a:82:
4e:23:1a:93:91:bd:7d:12:41:e5:3e:ca:fe:41:16:
5f:de:f3:c1:1b:a4:c6:9b:9c:68:35:59:52:27:a9:
39:8d:e8:32:8e:df:ea:4a:5f:0c:5a:73:b1:19:b2:
6d:78:0b:2b:92:69:e1:4b:d4:03:4c:27:4b:2a:4b:
58:bc:50:95:85:89:57:ea:cf:a5:57:17:41:91:96:
8c:f1:78:8c:1d:a9:62:43:64:81:d5:44:6a:50:34:
78:c1:75:3d:d4:5e:b7:c0:d0:29:5d:cc:9b:24:ce:
04:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:19:33:45:63:C5:22:D7:48:0B:E7:2A:5D:11:73:5C:6F:2D:2F:43
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C8E6EE6E0D6111F1AD1852D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.21.0/24
Signature Algorithm: sha256WithRSAEncryption
94:d5:60:68:79:54:e0:64:0a:65:64:6b:ad:14:7c:34:c7:e9:
79:80:4e:6a:69:28:5c:61:f0:d6:ef:cb:a7:5e:f7:62:32:ed:
cd:e5:b3:82:c9:f4:b6:6e:80:8c:bb:07:75:69:0c:d4:2b:0c:
7d:0b:21:a1:bb:8f:97:31:b9:e7:42:86:ab:47:3c:cd:77:cc:
2c:45:5b:1a:22:64:e9:5f:ac:34:61:c2:93:45:ff:70:45:00:
81:57:39:69:65:8a:e4:24:85:2e:d3:95:0c:6d:12:81:a4:ab:
22:5e:f2:f6:f9:cc:82:c0:b1:a5:d4:1a:61:20:8f:af:c2:79:
f1:a2:20:eb:3e:b1:64:ee:8a:e9:35:e4:f6:f5:2c:75:e0:f4:
4f:31:43:4b:84:23:56:5e:20:22:7c:66:75:d9:8d:f8:a4:41:
dd:bd:16:02:d2:1c:8b:f4:68:03:d3:5b:46:f0:8f:4b:19:4f:
ad:27:ac:84:1b:5b:7a:13:5c:b6:3e:f0:2b:5c:10:e9:47:84:
7d:f3:ba:18:70:f7:62:a1:00:87:2e:d7:6f:0c:b8:7d:65:39:
0d:6b:3e:3e:27:70:82:19:c4:5a:07:8f:20:05:e4:fc:6f:5d:
21:3d:31:dd:1a:af:3a:d3:43:9a:31:0e:cd:c9:0c:dd:85:87:
bc:63:21:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 01:17:35 2026 by rpki-client