Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EF58C1400D6A11F1AC50CC89DAE4EC9C.roa
File: EF58C1400D6A11F1AC50CC89DAE4EC9C.roa (raw, json)
Hash identifier: TnCbhh11/qBnuVHtG4P+7X4i1glhh6ZVFVKrvKed2/c=
Subject key identifier: 2F:72:4E:BA:41:25:70:D7:B3:85:37:D5:4A:5F:AE:43:E6:F4:61:F7
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1E11
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EF58C1400D6A11F1AC50CC89DAE4EC9C.roa
Signing time: Thu 19 Feb 2026 08:13:59 +0000
ROA not before: Thu 19 Feb 2026 08:13:48 +0000
ROA not after: Sat 19 Feb 2028 08:13:48 +0000
asID: 201341
IP address blocks: 154.16.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 24 Feb 2026 00:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7697 (0x1e11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 19 08:13:48 2026 GMT
Not After : Feb 19 08:13:48 2028 GMT
Subject: CN=6996c647-dd43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6b:78:28:1a:c3:20:02:9c:20:e3:8f:47:da:
d0:32:82:44:bc:ca:34:36:c9:40:f0:38:54:8a:9a:
a7:73:7e:29:7e:b3:d2:f6:10:0f:b7:8d:27:be:cb:
a5:97:ef:a4:97:6c:6c:49:ea:55:56:c3:ad:62:52:
2d:95:03:3b:df:67:7a:15:46:83:6b:90:43:da:28:
82:5f:89:1b:ff:bb:4d:78:27:7c:8e:c1:47:1a:94:
ad:b9:fa:8c:12:99:e8:c8:97:ff:14:be:aa:43:5f:
c4:31:ae:4e:bf:c9:52:78:32:5f:59:3b:80:03:0d:
40:77:4b:ff:6c:8a:bb:20:37:be:54:63:1b:2d:15:
5a:55:1a:1f:9e:1e:37:53:31:33:9c:65:f4:04:0f:
a2:aa:5b:24:b9:f9:4d:9e:12:9b:d9:2c:2c:a9:4d:
af:28:07:25:54:ee:52:75:46:82:19:39:9d:0f:6d:
7e:ba:b2:cd:37:19:d7:7f:38:ce:ac:c1:5c:27:fb:
f8:c6:46:fc:eb:b7:53:e4:57:59:a7:da:11:80:26:
b2:82:2e:10:f9:34:06:b9:ca:6f:9c:e6:36:99:d8:
d9:a4:03:09:09:0e:67:84:d0:c2:b0:a0:a9:b9:d9:
6b:28:0c:8d:c7:c6:a5:a4:2c:09:45:64:f2:b6:a5:
7f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:72:4E:BA:41:25:70:D7:B3:85:37:D5:4A:5F:AE:43:E6:F4:61:F7
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EF58C1400D6A11F1AC50CC89DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.53.0/24
Signature Algorithm: sha256WithRSAEncryption
16:ce:31:9e:d3:6d:a4:8b:ea:70:2f:37:f7:2c:72:f6:57:df:
a9:d6:43:ca:d6:05:ed:5d:e7:f2:2e:2b:b1:c9:67:44:c7:62:
fd:57:c1:81:91:c4:79:0d:d8:93:c0:9d:0c:34:37:20:74:1d:
da:66:37:a6:7b:93:ba:70:85:0c:3f:e8:37:0b:4e:50:57:b1:
3c:3d:8e:ee:c1:d3:74:0b:80:23:b1:fb:82:36:c7:ec:95:80:
21:d6:19:63:d0:b2:cd:67:c7:f9:fb:78:82:d5:a5:f4:ad:bc:
c2:68:e2:1a:e7:4a:15:cd:84:a9:87:4e:17:d8:22:be:fb:10:
73:64:57:f2:a7:15:fc:40:de:1b:c9:c1:16:60:95:da:08:ae:
19:8c:ff:89:6b:5c:bd:f3:d1:35:25:5f:1c:a9:b6:c5:34:c8:
01:44:7c:06:7e:48:a6:67:fc:f8:c1:d2:12:6e:9e:43:f9:33:
1d:79:08:de:16:a8:b2:b9:01:41:68:49:8b:89:e9:18:f7:22:
8f:5b:8f:57:ce:fc:28:13:0a:53:68:7b:7f:6f:08:f0:3d:7b:
6f:8e:3d:d1:bc:b4:40:f5:50:2a:0d:80:1a:d8:00:be:10:fa:
99:2e:37:dc:16:ed:c1:fa:02:4e:db:16:35:0e:29:c9:d1:c3:
b5:01:7c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 01:12:48 2026 by rpki-client