Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CF2EB3BC4A3611F1982FC9A0CE1D38B0.roa
File: CF2EB3BC4A3611F1982FC9A0CE1D38B0.roa (raw, json)
Hash identifier: FuL9lSRX+iMt28eSWHScTycirPoRvm7+SA0gZVFqLJo=
Subject key identifier: 22:3C:7E:63:67:75:9B:FD:4B:59:6E:47:59:F9:12:FA:38:0B:D2:27
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1F22
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CF2EB3BC4A3611F1982FC9A0CE1D38B0.roa
Signing time: Thu 07 May 2026 17:04:29 +0000
ROA not before: Thu 07 May 2026 17:04:25 +0000
ROA not after: Sun 07 May 2028 17:04:25 +0000
asID: 55201
IP address blocks: 154.16.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7970 (0x1f22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 7 17:04:25 2026 GMT
Not After : May 7 17:04:25 2028 GMT
Subject: CN=69fcc61d-4c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:71:28:c9:60:73:54:c0:77:d3:6b:0b:58:16:
10:9a:67:47:5c:5a:87:02:f6:1d:e4:20:d3:59:8a:
16:df:80:95:d5:02:54:fb:16:eb:d7:b0:42:66:bd:
2a:61:bb:cd:a4:00:1b:2d:80:9b:d5:ff:dc:c8:1d:
1f:2c:be:30:b3:c7:49:49:43:2e:d3:41:db:ce:04:
8c:e5:17:b0:b9:a8:c4:7a:6c:49:ee:0d:be:cb:66:
65:2a:ff:4f:93:6a:74:0c:a6:25:97:7c:84:fd:c1:
1c:fa:0b:fe:c2:f2:08:67:a7:1f:29:30:ef:8e:98:
8e:53:e8:f6:e5:fd:44:7b:cc:a3:83:1c:42:2d:2a:
37:18:f5:fc:42:69:4f:c1:d4:0b:c1:6a:1e:cb:61:
db:32:30:68:b4:5b:b3:21:44:be:e0:ba:5e:48:6b:
14:ad:79:cb:c0:db:9a:9f:bc:8b:13:27:89:a5:32:
ad:dc:ee:49:ed:ee:95:02:15:75:e2:0d:87:83:9d:
26:b7:ff:fc:8b:1b:9a:cb:60:22:ff:f1:03:a2:5c:
9a:d2:13:60:16:56:c7:be:e0:6c:67:d0:ae:68:ae:
cc:fb:ab:60:1b:78:07:df:98:fc:8b:e3:84:c2:f7:
f1:b4:c7:5d:f0:30:fe:fe:5a:37:bc:0b:fc:7e:bb:
1e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3C:7E:63:67:75:9B:FD:4B:59:6E:47:59:F9:12:FA:38:0B:D2:27
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CF2EB3BC4A3611F1982FC9A0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.43.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:ad:a0:76:e6:fc:02:97:d2:80:8f:08:60:80:8d:85:1c:a5:
5b:28:24:65:60:cf:bc:ac:de:88:89:75:13:4d:2f:2e:4a:a0:
f9:93:db:e1:4b:59:18:54:a2:de:3c:26:64:d2:9a:91:95:c2:
53:fe:c8:2b:18:f8:7b:f7:d2:e9:bd:2f:20:f8:a5:ad:ba:8c:
37:1c:79:22:a3:bd:a7:18:01:99:19:7d:fa:4d:e4:20:06:c3:
ea:42:75:fb:b6:7e:8a:d3:cf:a3:55:0c:d9:ac:76:ca:c8:21:
ce:fa:0e:ba:b2:82:0e:5b:f6:8b:29:ea:59:2d:cc:d8:0c:a9:
bd:9f:e9:90:3e:94:ae:14:f5:ea:e7:1a:d9:bb:01:df:4c:df:
b7:68:07:d7:b4:99:ad:86:48:e7:c4:99:fc:bf:80:c7:b9:32:
ba:99:2a:7e:9b:fe:7d:74:68:b4:5a:34:37:05:a0:d7:31:bc:
e6:d2:6a:34:aa:9b:e4:48:39:8e:5f:f1:1b:21:44:ee:07:c6:
f6:6a:48:a0:42:f9:aa:12:ae:92:ad:35:d4:b7:ff:a0:99:85:
df:79:9a:67:11:78:e4:8f:57:e4:d9:0e:2f:4c:6e:7a:d0:f2:
c8:a7:e4:65:f5:b5:b5:ae:93:1e:fc:56:8d:dc:60:ed:23:d9:
be:ea:e2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 04:54:34 2026 by rpki-client