Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F503C27E0D6B11F1B46D5492DAE4EC9C.roa
File: F503C27E0D6B11F1B46D5492DAE4EC9C.roa (raw, json)
Hash identifier: IImfw+8VMeykLxX0JG14JVWQWXcgIFp+J3cGixd7cAA=
Subject key identifier: B4:59:07:D2:EA:03:82:7C:0C:6A:EB:78:0B:A5:04:EB:35:91:A7:95
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1E17
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F503C27E0D6B11F1B46D5492DAE4EC9C.roa
Signing time: Thu 19 Feb 2026 08:21:17 +0000
ROA not before: Thu 19 Feb 2026 08:21:01 +0000
ROA not after: Sat 19 Feb 2028 08:21:01 +0000
asID: 201341
IP address blocks: 154.16.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 24 Feb 2026 00:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7703 (0x1e17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 19 08:21:01 2026 GMT
Not After : Feb 19 08:21:01 2028 GMT
Subject: CN=6996c7fd-b92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a0:d3:95:5c:6d:79:34:fe:54:64:6b:dd:20:
2e:75:7e:76:81:37:2b:7c:bd:b6:8c:33:a4:c0:50:
96:24:c1:92:7a:6a:c7:c4:95:6a:97:64:80:b7:c8:
72:f3:a0:24:a5:27:6e:fa:c7:46:84:ca:aa:e9:b5:
3d:c6:fa:3b:25:70:f5:17:fb:c3:bc:68:ba:8c:bf:
5b:f0:5f:6d:61:7a:ea:a7:cd:90:7c:f7:f9:c4:8d:
ca:52:31:45:05:38:5a:6d:72:42:19:19:78:2f:e7:
d1:ca:8b:46:42:18:c9:4e:ba:e9:be:0c:e2:f6:de:
7d:a0:46:e2:49:88:a4:36:d5:be:86:86:e3:0d:85:
ce:02:e0:77:1c:17:d5:2e:b8:5b:af:49:39:33:21:
82:01:36:71:37:6a:bd:a3:41:fd:1c:b6:85:1b:80:
0f:82:05:5e:b8:1c:84:d2:b0:66:78:cf:86:bf:06:
8f:0e:51:83:93:40:e1:a8:73:2b:55:5c:e6:1e:e6:
66:10:db:98:c1:92:ec:d7:39:fe:ea:b9:fe:19:0b:
a1:fe:f3:f1:4e:fb:89:43:dc:ca:34:5a:c0:0a:3a:
e9:38:91:42:66:dc:35:8e:2a:b3:54:c2:b6:b3:d3:
81:f1:55:06:e4:aa:d7:5c:61:ff:0c:59:31:80:0f:
bc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:59:07:D2:EA:03:82:7C:0C:6A:EB:78:0B:A5:04:EB:35:91:A7:95
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F503C27E0D6B11F1B46D5492DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.75.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:78:73:9a:fb:be:b8:d4:c0:e5:89:08:b2:c8:31:46:45:fd:
64:c6:50:3a:63:2f:24:a0:da:bb:59:cb:6b:f5:25:c7:5d:ba:
0c:18:35:52:6f:ba:46:c7:23:e6:f2:f6:a5:95:d9:b7:f3:6e:
cb:5a:67:f6:cc:f1:86:d8:03:c2:bb:4a:5d:ed:2f:c9:2f:69:
7f:4b:b8:2d:4a:50:59:68:bf:b9:b9:fa:b5:87:5b:30:df:be:
4f:75:42:18:7e:c8:83:9c:df:59:72:ff:9d:da:c9:c6:d8:76:
ff:d4:26:2e:53:b1:bc:f0:1f:c5:8f:78:5b:cb:ea:8d:78:3e:
7f:33:e7:de:73:4f:12:00:95:f0:a0:e1:65:ac:a3:9a:1b:00:
d2:4f:1b:ca:d1:25:fe:54:7a:7c:24:2a:88:b6:2b:77:f2:f3:
3f:55:4f:32:81:47:9c:59:a4:e7:7a:e6:14:44:90:60:4e:83:
58:95:8a:f9:00:81:1a:f1:ee:cc:a3:99:76:06:6a:b3:27:88:
ea:23:f4:2d:11:01:34:9b:10:5f:c7:6b:5c:1c:62:b5:fe:1c:
32:3d:76:92:83:d7:7f:11:b3:3e:0c:09:fa:85:1d:46:da:fd:
3c:6c:53:34:73:89:bb:b5:fe:b9:c7:75:01:1f:d4:e8:be:1d:
74:2f:6e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 01:17:35 2026 by rpki-client