Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D42711C21C6C11F192C04F82DAE4EC9C.roa
File: D42711C21C6C11F192C04F82DAE4EC9C.roa (raw, json)
Hash identifier: aGTzWYqrtdc2evM+ipTsZD2OE4ni1WzAJEvcOhFVKtQ=
Subject key identifier: 6B:8C:05:FA:4F:C0:D4:44:10:1A:25:3F:CB:4B:22:C1:82:63:27:AA
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1E74
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D42711C21C6C11F192C04F82DAE4EC9C.roa
Signing time: Tue 10 Mar 2026 10:35:17 +0000
ROA not before: Tue 10 Mar 2026 10:35:12 +0000
ROA not after: Fri 10 Mar 2028 10:35:12 +0000
asID: 63199
IP address blocks: 154.16.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 12 Mar 2026 16:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7796 (0x1e74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 10 10:35:12 2026 GMT
Not After : Mar 10 10:35:12 2028 GMT
Subject: CN=69aff3e5-2aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8b:f0:f9:6d:54:9f:d8:25:f6:55:0d:f4:e9:
cb:97:ad:fd:ee:2b:4a:60:03:0e:94:58:ed:23:a0:
61:63:61:1b:0a:fb:c7:3c:a3:f6:12:14:d6:fc:9e:
e5:38:bd:12:7e:be:47:1d:94:f8:a3:6c:fe:a2:68:
1d:e2:3e:45:f0:31:0d:70:50:ed:b7:31:87:3f:5b:
07:c1:c8:a1:81:67:3b:2d:8e:e9:30:2b:d0:6c:c4:
a2:c9:01:4d:22:ac:a1:c0:11:3a:5e:34:e0:04:db:
f2:5c:01:2b:6e:8c:14:60:88:80:57:5d:e6:53:0d:
b2:63:02:45:eb:25:9b:6c:68:66:4f:ae:0c:48:bc:
dc:0c:65:f3:a0:85:24:f5:28:b7:e7:41:75:ac:ae:
a3:77:86:45:56:ba:62:18:45:ba:3b:b9:89:03:e2:
4f:fc:58:c5:a9:6f:0f:2f:5a:e2:e3:2f:2c:b8:05:
c8:c2:4e:39:eb:09:f9:33:6b:84:e6:73:c4:3c:e2:
d0:d5:0a:3d:9f:59:43:8c:e5:05:d3:25:a2:3c:d9:
f2:4c:f2:d6:5a:4d:b4:a2:1b:5a:8c:71:0c:d1:85:
f5:02:df:de:15:a3:3c:11:d1:25:3a:4c:18:ba:b5:
30:fb:6c:e5:ef:e0:a0:dc:ba:ab:b2:ec:e9:9a:3c:
49:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8C:05:FA:4F:C0:D4:44:10:1A:25:3F:CB:4B:22:C1:82:63:27:AA
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D42711C21C6C11F192C04F82DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.43.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:39:5f:30:53:a2:c1:6d:9d:74:78:6d:0d:6a:6f:61:b3:d3:
21:f9:1b:21:8c:53:bc:d8:95:47:a5:9d:12:41:53:92:5c:3a:
2b:93:aa:1e:73:18:ea:c4:2c:f4:f3:53:db:e0:59:d1:28:5d:
37:f0:93:b9:6e:2d:46:20:38:20:72:d3:3b:79:eb:9f:30:06:
f6:3d:80:dc:7a:e7:f6:fa:b3:e3:1b:45:dc:57:cb:10:95:ad:
96:34:39:9d:b2:33:63:10:b1:41:fa:74:58:24:7f:80:d2:47:
fa:55:c1:55:00:7c:9f:7a:91:4e:01:ee:2d:f0:62:1e:29:70:
e7:fd:c1:6a:af:b6:6e:a3:28:75:2d:86:71:ae:09:2c:b2:79:
c7:1c:d6:9a:21:5f:89:e4:3d:36:dc:98:bb:76:1e:ca:ab:31:
f4:22:35:09:2c:13:b8:44:61:a7:b9:69:8b:43:a2:1e:bf:8f:
f7:13:a1:9a:11:69:c4:ee:fe:b6:f8:b6:46:1e:15:6f:ee:ea:
22:fd:9d:fe:c4:98:0b:53:fc:b6:65:a9:2f:4c:9a:cf:ac:78:
a6:0a:30:49:ac:ec:c2:e4:e4:a6:ed:16:9b:f0:5f:f2:31:26:
23:7b:a4:66:7c:b8:e3:f1:fd:ed:39:a4:a7:f6:d2:da:c1:e1:
54:7e:66:c5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICHnQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjAzMTAxMDM1MTJaFw0yODAzMTAxMDM1MTJaMBgxFjAU
BgNVBAMTDTY5YWZmM2U1LTJhYTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMi/D5bVSf2CX2VQ306cuXrf3uK0pgAw6UWO0joGFjYRsK+8c8o/YSFNb8
nuU4vRJ+vkcdlPijbP6iaB3iPkXwMQ1wUO23MYc/WwfByKGBZzstjukwK9BsxKLJ
AU0irKHAETpeNOAE2/JcAStujBRgiIBXXeZTDbJjAkXrJZtsaGZPrgxIvNwMZfOg
hST1KLfnQXWsrqN3hkVWumIYRbo7uYkD4k/8WMWpbw8vWuLjLyy4BcjCTjnrCfkz
a4Tmc8Q84tDVCj2fWUOM5QXTJaI82fJM8tZaTbSiG1qMcQzRhfUC394VozwR0SU6
TBi6tTD7bOXv4KDcuquy7OmaPEmJAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUa4wF
+k/A1EQQGiU/y0siwYJjJ6owHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0Q0MjcxMUMyMUM2QzExRjE5MkMwNEY4MkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaECswDQYJKoZIhvcNAQEL
BQADggEBAF45XzBTosFtnXR4bQ1qb2Gz0yH5GyGMU7zYlUelnRJBU5JcOiuTqh5z
GOrELPTzU9vgWdEoXTfwk7luLUYgOCBy0zt5658wBvY9gNx65/b6s+MbRdxXyxCV
rZY0OZ2yM2MQsUH6dFgkf4DSR/pVwVUAfJ96kU4B7i3wYh4pcOf9wWqvtm6jKHUt
hnGuCSyyeccc1pohX4nkPTbcmLt2HsqrMfQiNQksE7hEYae5aYtDoh6/j/cToZoR
acTu/rb4tkYeFW/u6iL9nf7EmAtT/LZlqS9Mms+seKYKMEms7MLk5KbtFpvwX/Ix
JiN7pGZ8uOPx/e05pKf20trB4VR+ZsU=
-----END CERTIFICATE-----
Generated at Tue Mar 10 23:49:50 2026 by rpki-client