Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D73DF73231A111F1B727ACDFDAE4EC9C.roa
File: D73DF73231A111F1B727ACDFDAE4EC9C.roa (raw, json)
Hash identifier: tpGlz4XYP8cqCxJ9J5pGlGYrc9zVWX/6eWupNyfy4+g=
Subject key identifier: 64:3F:98:07:62:0F:A1:0D:82:04:07:B5:2E:73:76:27:0D:BD:6E:8C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1EB3
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D73DF73231A111F1B727ACDFDAE4EC9C.roa
Signing time: Mon 06 Apr 2026 10:17:40 +0000
ROA not before: Mon 06 Apr 2026 10:17:35 +0000
ROA not after: Fri 06 Apr 2029 10:17:35 +0000
asID: 834
IP address blocks: 154.16.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 Apr 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7859 (0x1eb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 6 10:17:35 2026 GMT
Not After : Apr 6 10:17:35 2029 GMT
Subject: CN=69d38844-a50c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b5:d1:cc:11:cd:fb:0d:3e:d6:5a:bf:5c:e3:
c7:03:ca:47:44:53:39:58:c1:00:92:e3:d5:8c:62:
e3:56:14:51:ef:02:60:f0:6b:0a:2d:ab:31:a7:64:
70:3a:15:b4:b2:79:56:db:e8:be:ed:b7:7c:28:3b:
90:fc:5f:fb:e0:68:41:ef:af:05:6f:ff:fc:62:1a:
d6:76:e2:3c:b6:90:7c:9c:6f:cd:a5:98:76:e1:90:
4d:5e:b8:20:5f:70:dd:27:c3:b8:75:9c:4d:1f:92:
a5:de:b5:bc:10:c3:9f:9b:93:a5:5b:05:a0:ff:69:
71:51:07:86:c9:fe:44:6b:c2:bd:0c:5b:12:66:1c:
7a:cc:db:54:b8:28:ca:69:04:59:40:31:74:f3:e0:
62:6e:7c:17:3f:02:81:91:aa:0d:ab:69:a1:83:19:
bf:8f:c5:32:24:e8:50:04:cc:12:26:75:3a:b8:33:
07:ab:9f:5a:f6:8c:8f:dd:e7:40:a6:1d:d9:ff:98:
aa:3e:f3:9e:21:27:6b:1a:be:85:2e:14:36:a5:28:
e1:57:a8:c5:62:91:4c:54:43:f8:21:0a:5c:23:3e:
f4:8c:ec:c2:64:4f:04:e9:f1:64:3e:db:56:8f:e0:
12:55:da:9a:44:f7:a3:02:61:4d:2b:40:d2:98:41:
71:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3F:98:07:62:0F:A1:0D:82:04:07:B5:2E:73:76:27:0D:BD:6E:8C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D73DF73231A111F1B727ACDFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.80.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:b1:4d:1a:8f:da:d4:37:20:92:f3:03:7e:fa:14:45:14:5a:
88:93:c1:ff:dc:51:1b:f6:a1:16:d0:0c:b8:9b:ae:f1:1a:c2:
02:3e:38:29:95:8d:17:16:78:b1:bc:5f:bd:aa:d1:1c:4c:f8:
dc:be:1f:c7:a4:04:c7:37:c3:40:a6:44:9f:5c:4a:d5:ff:22:
8e:d7:b6:18:ac:74:c5:96:a6:cb:7b:3a:b8:0e:48:01:3d:06:
97:85:78:a7:7c:c4:b8:66:f5:b4:69:51:38:42:d0:2e:60:dd:
30:75:cc:e2:5c:3d:c0:ef:7a:27:2b:fe:4a:49:05:34:03:64:
79:56:fa:b6:53:ce:7a:7a:1d:a9:bf:69:73:e8:3c:80:bf:12:
0c:f0:e7:2c:14:12:ce:9f:7a:bc:de:d4:d8:89:90:be:17:28:
bb:3c:45:2f:22:87:7e:07:4c:e8:d4:62:b5:c6:1c:59:a3:ad:
3d:c3:9b:c9:3c:ce:fe:8e:fc:89:f8:63:5c:54:86:cf:47:c8:
b6:75:63:59:70:c1:ee:24:38:85:ae:7b:79:34:63:65:61:09:
4b:26:92:52:54:89:73:1e:73:c2:57:02:15:7f:17:6f:47:8e:
4f:55:b9:8b:2d:52:67:79:01:a0:32:20:3f:3d:8a:5f:6e:63:
81:72:65:c2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICHrMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjA0MDYxMDE3MzVaFw0yOTA0MDYxMDE3MzVaMBgxFjAU
BgNVBAMTDTY5ZDM4ODQ0LWE1MGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDjtdHMEc37DT7WWr9c48cDykdEUzlYwQCS49WMYuNWFFHvAmDwawotqzGn
ZHA6FbSyeVbb6L7tt3woO5D8X/vgaEHvrwVv//xiGtZ24jy2kHycb82lmHbhkE1e
uCBfcN0nw7h1nE0fkqXetbwQw5+bk6VbBaD/aXFRB4bJ/kRrwr0MWxJmHHrM21S4
KMppBFlAMXTz4GJufBc/AoGRqg2raaGDGb+PxTIk6FAEzBImdTq4Mwern1r2jI/d
50CmHdn/mKo+854hJ2savoUuFDalKOFXqMVikUxUQ/ghClwjPvSM7MJkTwTp8WQ+
21aP4BJV2ppE96MCYU0rQNKYQXF9AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUZD+Y
B2IPoQ2CBAe1LnN2Jw29bowwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0Q3M0RGNzMyMzFBMTExRjFCNzI3QUNERkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEFAwDQYJKoZIhvcNAQEL
BQADggEBADqxTRqP2tQ3IJLzA376FEUUWoiTwf/cURv2oRbQDLibrvEawgI+OCmV
jRcWeLG8X72q0RxM+Ny+H8ekBMc3w0CmRJ9cStX/Io7XthisdMWWpst7OrgOSAE9
BpeFeKd8xLhm9bRpUThC0C5g3TB1zOJcPcDveicr/kpJBTQDZHlW+rZTznp6Ham/
aXPoPIC/Egzw5ywUEs6ferze1NiJkL4XKLs8RS8ih34HTOjUYrXGHFmjrT3Dm8k8
zv6O/In4Y1xUhs9HyLZ1Y1lwwe4kOIWue3k0Y2VhCUsmklJUiXMec8JXAhV/F29H
jk9VuYstUmd5AaAyID89il9uY4FyZcI=
-----END CERTIFICATE-----
Generated at Mon Apr 6 15:15:21 2026 by rpki-client