Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CF98856C33F711F1A01C20F2CE1D38B0.roa
File: CF98856C33F711F1A01C20F2CE1D38B0.roa (raw, json)
Hash identifier: MUDxRqavySZGvl15iEqMo1L7Rl3aHgyqp5Q3cKi0W7k=
Subject key identifier: AC:25:D8:D8:C3:FA:E0:23:65:98:95:F0:0C:66:DA:4D:CA:5B:A3:91
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1EC3
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CF98856C33F711F1A01C20F2CE1D38B0.roa
Signing time: Thu 09 Apr 2026 09:38:06 +0000
ROA not before: Thu 09 Apr 2026 09:38:01 +0000
ROA not after: Sun 09 Apr 2028 09:38:01 +0000
asID: 63199
IP address blocks: 154.16.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 12 Apr 2026 00:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7875 (0x1ec3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 9 09:38:01 2026 GMT
Not After : Apr 9 09:38:01 2028 GMT
Subject: CN=69d7737e-9251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dc:69:f2:0b:14:4a:fd:77:a3:23:d7:8e:2b:
1c:50:79:78:c3:47:22:fc:29:d1:98:1d:53:f8:20:
15:6d:e7:a9:ee:fb:55:1a:7a:5d:2c:1e:5c:79:23:
a7:b8:0f:9c:a4:24:c7:13:3d:09:85:69:64:eb:ad:
b2:e2:0d:0e:b3:aa:a4:b6:05:e0:16:38:33:36:20:
a5:33:6b:86:c0:f8:9f:02:f7:25:0d:61:59:82:f5:
71:86:e9:24:27:ce:6b:14:29:2c:7b:71:3f:03:31:
7c:02:ca:fb:43:bd:2d:8a:98:e0:22:ae:f9:86:ef:
67:41:04:a4:18:b4:5d:83:b7:00:b5:e7:58:b2:d3:
1e:45:fc:92:29:6b:50:c4:f8:89:3a:1b:42:3c:5e:
ce:7e:26:10:d2:5b:46:ef:58:34:6b:ef:38:d0:09:
a7:2e:0e:a7:5b:be:4d:e9:e4:b7:7c:fb:d3:8e:33:
ac:10:77:b7:3a:16:7b:7b:7a:8b:9e:06:24:bf:d8:
75:e9:27:9b:4d:0f:25:ae:92:34:ab:32:e7:5a:d2:
bc:73:bc:88:dc:5a:5d:be:b1:ee:aa:05:37:d5:24:
fb:a8:8a:aa:83:95:ba:b3:ae:fd:17:3b:07:bc:b3:
c4:4c:69:c1:d2:72:1b:38:53:a5:a0:64:88:3e:67:
4e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:25:D8:D8:C3:FA:E0:23:65:98:95:F0:0C:66:DA:4D:CA:5B:A3:91
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CF98856C33F711F1A01C20F2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.5.0/24
Signature Algorithm: sha256WithRSAEncryption
66:f2:b1:b3:b9:7a:ed:a5:d6:8f:a3:ea:a7:97:ba:84:5c:b7:
b4:d3:02:4f:3b:32:43:a6:2c:66:c9:de:59:d3:1b:b9:fd:ce:
9d:73:e5:77:f5:6d:ab:7e:c0:eb:f5:fd:9b:06:c2:20:aa:ae:
27:24:34:40:3d:bb:ec:0c:40:6a:e1:23:88:55:73:6c:a2:68:
78:eb:77:07:cc:61:f5:a6:1d:7b:98:dd:4b:3b:d7:8e:18:de:
e4:59:16:46:22:e8:6f:02:30:db:de:68:b5:56:18:b4:be:15:
2e:7c:21:60:e6:d8:83:c4:c2:22:e2:3e:07:51:c3:f1:dc:95:
64:e2:c6:d2:a9:88:00:15:dc:99:12:01:c6:e3:80:89:1f:c5:
8f:ca:a4:ef:ec:fb:ae:d0:8a:dd:a3:53:d0:8f:79:a4:79:20:
65:07:3b:b8:63:ee:d7:b1:14:fc:76:af:d1:a2:7a:b6:dc:10:
2b:49:28:ee:0c:1d:0b:18:0f:b5:54:cd:9a:2a:31:93:15:e9:
a8:a9:37:8a:ab:4e:df:de:60:1e:18:fb:a9:a2:a0:92:12:d2:
ea:75:7a:f3:e1:91:e5:49:5e:da:2d:e9:90:6b:8e:29:95:02:
18:ba:8a:82:08:d1:cf:53:7a:ca:27:9c:18:ee:84:fa:20:7e:
e0:e2:e7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 13:56:48 2026 by rpki-client