Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F7743CF40D6C11F1A6B0B396DAE4EC9C.roa
File: F7743CF40D6C11F1A6B0B396DAE4EC9C.roa (raw, json)
Hash identifier: eH39YIsDYLGnSLbjjI01ljAq0vFFUr09Yb3XDDgXhns=
Subject key identifier: B4:98:3E:3A:B6:76:EC:67:B6:5E:EE:F7:04:A7:07:69:4E:67:9F:E4
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1E1D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F7743CF40D6C11F1A6B0B396DAE4EC9C.roa
Signing time: Thu 19 Feb 2026 08:28:29 +0000
ROA not before: Thu 19 Feb 2026 08:28:24 +0000
ROA not after: Sat 19 Feb 2028 08:28:24 +0000
asID: 201341
IP address blocks: 154.16.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 24 Feb 2026 00:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7709 (0x1e1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 19 08:28:24 2026 GMT
Not After : Feb 19 08:28:24 2028 GMT
Subject: CN=6996c9ad-373b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f9:5c:42:5b:2d:7e:f4:1f:f2:68:3d:c0:70:
b3:2f:7f:9d:bc:0d:82:96:98:c3:25:fd:27:80:d4:
6b:97:92:7e:1b:29:3e:4a:dc:44:28:66:12:26:78:
33:94:f6:3a:80:2a:60:e4:e6:ad:8e:60:57:2b:af:
4d:15:70:56:e1:4d:7f:2b:b6:28:ad:08:17:bb:e0:
ba:01:9d:3a:24:4d:a9:5b:1d:a9:7f:2c:d7:81:11:
ad:a3:ea:e3:c6:7e:47:be:21:13:ae:3c:62:33:89:
45:59:ef:93:38:2d:b6:3c:9d:45:79:71:5c:00:1f:
cd:47:75:9c:1b:40:31:b2:ea:27:f5:a6:18:e5:6e:
6d:43:80:01:69:58:b5:8d:cd:32:0a:16:ab:c5:91:
53:04:ca:2e:22:26:21:b0:77:10:f0:09:0b:a7:bc:
78:16:75:b4:3f:32:8a:57:e8:9c:ab:7c:fc:c6:a0:
86:72:3c:12:7e:ea:f4:c6:1f:ed:fd:90:c4:76:91:
e8:b5:45:86:82:11:a8:4d:a2:1e:dc:9a:d9:69:6e:
c3:c8:e5:73:f1:7a:51:19:19:a2:ee:9a:51:1a:89:
df:a4:2a:86:41:d9:f4:a7:ce:a4:2f:02:c6:7e:b3:
6f:ee:80:55:90:8e:d3:be:b9:e4:5a:9b:a0:19:2b:
62:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:98:3E:3A:B6:76:EC:67:B6:5E:EE:F7:04:A7:07:69:4E:67:9F:E4
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F7743CF40D6C11F1A6B0B396DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.85.0/24
Signature Algorithm: sha256WithRSAEncryption
34:72:c1:c1:33:3e:4f:f5:be:ad:f9:ae:13:ed:35:d9:0e:f8:
77:c1:36:fa:cd:8e:40:0f:24:f8:45:92:f0:a6:b5:b3:41:ff:
f1:92:3d:f0:0d:8d:d0:5a:14:7b:a2:06:f6:d5:2b:7e:38:00:
c6:38:f4:ca:db:f6:19:69:91:11:1d:a1:e7:1b:6c:1e:18:79:
89:7e:07:66:8b:f1:d2:7c:b1:4b:be:8b:7d:d3:2f:4b:4d:77:
55:3f:9e:fc:ee:dd:ec:ff:1c:a4:8d:49:b2:16:87:85:d3:56:
6d:d9:4c:60:fa:cf:92:c1:f2:e4:e6:44:2c:94:40:91:a8:31:
f4:34:15:24:c0:f2:75:38:4b:f2:51:bd:15:79:d9:30:88:9e:
5a:71:23:15:f1:55:89:c3:a2:80:ab:0c:b5:53:5a:2b:cf:61:
ef:c8:db:06:14:bc:97:97:0a:4e:84:c5:d6:26:75:12:9b:70:
86:a4:60:2d:4a:68:95:a1:01:b2:28:fa:fb:d3:5a:f2:35:ae:
f8:e7:a7:c3:0b:4b:b6:ad:a0:b2:ad:19:e3:34:d6:ad:e6:0f:
a5:b9:b3:0f:8f:83:32:7e:07:68:1d:67:16:38:87:14:63:2b:
15:b9:ed:62:9b:76:c0:07:86:25:94:23:bb:80:0f:8c:51:b8:
42:e0:0e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 01:12:48 2026 by rpki-client