Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CBB99D9E0D6611F1865EE4F0DAE4EC9C.roa
File: CBB99D9E0D6611F1865EE4F0DAE4EC9C.roa (raw, json)
Hash identifier: ewCzmK0fU2i4kbVDFCNHw2gnznKofHJt9y60F//8EXY=
Subject key identifier: 7C:BA:E2:BA:BF:A3:81:12:D4:CF:D8:D6:EC:30:A0:18:AC:3F:83:50
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1E06
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CBB99D9E0D6611F1865EE4F0DAE4EC9C.roa
Signing time: Thu 19 Feb 2026 07:44:35 +0000
ROA not before: Thu 19 Feb 2026 07:44:06 +0000
ROA not after: Sat 19 Feb 2028 07:44:06 +0000
asID: 201341
IP address blocks: 154.16.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 24 Feb 2026 00:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7686 (0x1e06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 19 07:44:06 2026 GMT
Not After : Feb 19 07:44:06 2028 GMT
Subject: CN=6996bf63-6565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:85:06:89:2d:e4:3c:e6:56:f5:3f:d7:4b:84:
c8:80:1c:0f:61:09:9b:6a:fd:e2:fe:34:20:33:f1:
7b:cc:d3:34:4e:8f:e9:f4:cb:19:42:14:1e:a5:5d:
fc:e0:a4:2a:9d:b8:f4:45:8e:50:4f:4c:b1:85:e7:
99:c4:36:69:19:6f:d7:a0:ba:8c:37:5f:d7:f0:37:
a6:21:37:34:07:14:14:56:9d:a5:e4:20:43:a6:18:
e8:16:e8:f8:f4:20:8d:67:2d:8c:a0:80:5c:86:57:
55:41:c2:af:05:33:83:d5:8e:70:f2:08:75:3e:7f:
3a:ea:f5:7a:df:e9:d5:29:0f:86:be:59:99:03:31:
42:fb:1c:03:7b:4a:a5:18:2e:a8:6f:8c:a6:83:6e:
64:e7:ef:72:43:f0:00:ba:b7:b9:d5:34:2a:ae:db:
f3:42:1f:f1:e9:30:53:50:41:c5:66:c6:44:11:08:
1e:1a:be:7b:c1:98:d1:d4:61:1a:2d:9f:5f:cc:60:
65:d6:2c:61:51:5c:d3:49:73:f8:77:fd:8e:d0:7f:
52:f7:41:23:cf:41:8e:2c:a7:ed:40:7b:1d:6b:7d:
86:c7:61:07:51:bb:c1:0d:f8:09:b4:40:ce:01:de:
76:fb:21:4a:67:31:c6:f1:d3:5c:4f:72:9b:c9:75:
8e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BA:E2:BA:BF:A3:81:12:D4:CF:D8:D6:EC:30:A0:18:AC:3F:83:50
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CBB99D9E0D6611F1865EE4F0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.39.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:fd:c9:d9:71:a3:01:4b:7b:96:2f:b7:3e:3d:91:bd:82:d7:
93:05:01:e9:4b:92:3f:26:88:0a:d1:97:10:16:1b:49:7e:57:
fc:4b:df:4e:4c:a5:87:06:3e:35:9f:78:70:6b:bf:ad:c8:69:
95:15:90:2c:7b:3a:38:23:61:3d:c4:ee:a0:02:f6:ba:b8:75:
1b:94:9c:d9:8c:f9:a4:d0:66:a1:7c:88:52:32:ec:43:bc:93:
b0:28:6f:35:d6:fd:90:dd:ac:09:1c:a6:50:43:a8:bc:35:ab:
7d:4e:d3:90:05:96:ef:01:ef:e1:75:2e:14:ff:23:be:a2:0f:
2d:b0:82:e5:27:27:eb:22:05:14:a2:ff:36:28:5f:5d:98:a8:
78:35:7c:d0:e8:76:fb:8c:69:02:4a:79:ff:cb:8d:15:00:ca:
76:a4:b7:d5:a0:93:1b:a4:56:e2:1c:8b:e0:80:e0:e5:e7:71:
a4:d1:39:13:25:7f:2c:82:8b:7c:04:a6:52:62:d8:2c:13:a1:
ec:22:82:78:f4:b6:5a:a4:0a:92:3a:fe:c1:a9:12:94:60:20:
3c:7e:27:57:9d:b5:96:cb:0a:68:38:24:6b:2a:cd:98:10:b1:
cd:26:0a:16:98:00:db:21:7d:54:5a:aa:fd:98:9c:34:84:75:
38:93:56:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 01:13:04 2026 by rpki-client