Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D252C6B01C4F11F18CBC63DADAE4EC9C.roa
File: D252C6B01C4F11F18CBC63DADAE4EC9C.roa (raw, json)
Hash identifier: R1U6aCbUqlciihnF/Pb4zN0tpZJsHhwX3g4FHKwkha8=
Subject key identifier: 7E:20:F9:83:3A:DF:C9:C7:BF:5B:B8:F6:D8:93:02:47:82:CE:2F:AF
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1E5F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D252C6B01C4F11F18CBC63DADAE4EC9C.roa
Signing time: Tue 10 Mar 2026 07:07:39 +0000
ROA not before: Tue 10 Mar 2026 07:07:33 +0000
ROA not after: Fri 10 Mar 2028 07:07:33 +0000
asID: 29802
IP address blocks: 154.16.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 12 Mar 2026 16:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7775 (0x1e5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 10 07:07:33 2026 GMT
Not After : Mar 10 07:07:33 2028 GMT
Subject: CN=69afc33a-f3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4c:cb:3d:46:9d:d8:21:08:f3:bf:b6:8a:37:
d2:5b:34:fc:77:ae:b1:47:7a:6b:66:ed:f4:82:3f:
7c:b7:18:83:cc:0c:24:bc:24:15:2e:b3:32:d7:33:
85:22:f2:f3:c4:28:69:b3:7e:38:e0:b8:f1:12:02:
e9:30:71:0b:b3:8b:69:48:67:3b:05:00:29:4b:60:
bf:38:73:1e:62:73:bd:e4:3b:61:1d:eb:aa:3e:3a:
3c:08:bd:8a:7d:51:6a:88:72:63:14:03:73:21:dc:
e2:e0:7a:7c:5f:df:80:c5:32:6c:4c:8e:e4:c4:25:
8d:a2:b5:16:0e:dc:da:92:6f:8b:c9:7f:f1:6a:90:
4c:5d:db:31:ac:91:54:62:09:fb:9b:a0:da:cd:89:
2c:bc:a2:a5:39:70:dd:8c:ce:50:7e:0b:0e:8c:dc:
51:7d:7a:9d:73:85:18:14:4e:14:3d:ee:cb:cb:75:
1c:2a:e5:86:ce:9f:db:eb:5d:fe:57:ff:bc:56:a0:
b6:90:e9:7c:72:02:fb:18:ba:a9:96:11:94:9e:11:
19:fe:9b:d8:77:2d:d3:18:d3:f2:e8:8c:a7:b8:d2:
13:89:d2:59:eb:7e:2a:77:5b:0a:c0:92:a8:25:01:
ed:28:ed:c6:74:d6:fe:78:c2:7d:4f:9c:1d:83:42:
a0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:20:F9:83:3A:DF:C9:C7:BF:5B:B8:F6:D8:93:02:47:82:CE:2F:AF
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D252C6B01C4F11F18CBC63DADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.126.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:c4:d3:8a:1a:ea:a3:93:78:99:f1:65:7e:eb:36:32:6f:eb:
c2:68:42:1b:91:8f:cb:6b:54:ef:c5:22:52:bd:18:c5:0f:4d:
b3:30:3a:bd:af:97:d3:42:2a:d6:4c:37:31:24:27:85:fe:77:
00:45:70:07:45:59:2c:8b:89:5c:24:10:bb:ad:cc:bb:02:7e:
86:8f:0d:c0:f6:15:be:f6:1b:02:2b:16:93:8a:8e:9a:a0:c7:
e9:68:17:e0:2e:8b:75:53:8c:9e:5c:c9:27:a5:87:24:37:67:
3a:65:6d:a4:a2:91:4a:54:f2:6e:65:14:3e:e1:ef:40:f3:41:
2d:df:7e:08:33:bc:a5:eb:b4:28:a8:47:3a:86:52:37:15:2a:
2c:64:91:bc:93:22:e4:61:b7:eb:03:c4:92:4f:b5:79:7e:bd:
53:0c:dd:bd:dd:6c:00:04:f3:cc:88:e5:36:a0:ef:1b:97:bf:
76:0b:5a:51:7f:30:8e:79:cf:e7:b1:d4:c7:32:a9:c2:38:e0:
60:f5:51:60:76:a7:08:52:65:4b:e0:03:9c:fa:84:16:6d:1b:
b7:fa:22:ca:fc:11:db:13:b2:87:3f:a7:33:54:41:af:20:30:
f1:b9:6c:87:50:ed:4d:1b:66:a8:78:c9:02:36:8d:84:e7:d1:
ef:c6:3f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 23:48:49 2026 by rpki-client