Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0692E63A121E11F186EEE1EFDAE4EC9C.roa
File: 0692E63A121E11F186EEE1EFDAE4EC9C.roa (raw, json)
Hash identifier: UhO9fka8HXNwaBgB61jC/AXhoxvF2c4ZaKCI5mt8/Yk=
Subject key identifier: A2:A2:69:B8:36:67:E1:DA:98:DD:95:32:AA:A3:9C:57:70:62:1E:3D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1E38
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0692E63A121E11F186EEE1EFDAE4EC9C.roa
Signing time: Wed 25 Feb 2026 07:45:59 +0000
ROA not before: Wed 25 Feb 2026 07:45:55 +0000
ROA not after: Fri 25 Feb 2028 07:45:55 +0000
asID: 201341
IP address blocks: 154.16.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7736 (0x1e38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 25 07:45:55 2026 GMT
Not After : Feb 25 07:45:55 2028 GMT
Subject: CN=699ea8b7-98ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:01:d3:4a:1f:cb:31:e1:1e:e1:7d:b0:b8:12:
49:5a:ba:bd:05:bf:12:9e:19:88:91:51:eb:83:23:
e1:22:8c:8b:75:61:ef:0b:55:40:b0:56:7b:bb:3a:
70:b3:06:ac:2b:db:3b:a3:7f:9b:00:4c:92:89:d3:
02:3e:05:56:83:7d:28:e2:34:c3:dd:82:8a:f2:f3:
3c:b6:65:c1:51:a6:bd:d8:f9:1a:45:c5:8a:46:64:
17:eb:a4:69:d8:1c:a7:ef:ed:51:11:df:53:93:b6:
2a:11:5b:27:af:2e:ba:8e:37:47:81:0f:5b:6b:29:
77:78:4d:e2:b1:8a:7e:0c:b5:0c:de:86:22:db:d2:
42:55:20:fb:9b:ae:09:87:77:9b:ac:1f:63:d3:13:
cb:c2:4a:3f:f4:aa:a7:1f:e3:54:6b:ca:bf:11:7e:
5c:3a:b4:22:4b:ba:25:a4:6e:5d:55:71:a8:70:7a:
e2:c1:2d:d0:c7:ed:b6:3e:8c:06:e5:63:90:c8:98:
d2:70:48:65:00:9f:d5:ef:5a:f5:a6:7c:ff:ca:75:
82:4e:b5:5d:39:ba:ba:e9:f8:fc:68:71:fd:e4:21:
4b:38:9e:9a:bc:28:23:1e:4b:2a:66:7f:0e:33:0d:
e9:06:b5:18:4a:a2:99:2e:c4:14:e1:61:f8:53:b3:
15:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A2:69:B8:36:67:E1:DA:98:DD:95:32:AA:A3:9C:57:70:62:1E:3D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0692E63A121E11F186EEE1EFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.103.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:b9:eb:a6:d5:fb:6e:60:cd:e0:c7:dd:cf:e0:ac:94:eb:f5:
03:30:90:75:d3:65:a7:46:cb:cd:68:4e:52:15:ef:b4:67:52:
1a:5a:cb:ac:48:31:be:9e:3b:65:9a:d0:9e:13:cd:66:69:c0:
a3:cd:54:4b:cf:9c:bb:6f:32:aa:fe:ff:3f:52:59:2b:c4:9c:
b2:34:47:48:2a:69:59:84:e3:36:1e:41:9e:24:bd:a4:88:81:
bf:28:d3:30:92:25:93:e7:0a:a8:87:0a:7a:e3:10:c0:7c:04:
9f:50:01:d7:ce:b0:e9:4d:f5:65:25:3d:ab:72:00:bd:ab:b6:
ee:b8:85:f5:bb:96:a6:5a:a0:f1:0a:07:58:18:09:3a:91:cd:
b1:47:23:7a:48:2e:cc:1c:78:b1:d3:f6:b8:f7:eb:f2:97:68:
b3:0e:e0:06:6f:cb:e5:da:16:4c:35:ab:a5:e7:50:09:95:d5:
f6:f8:d9:25:f8:33:cd:33:f3:3a:40:7a:30:58:56:75:00:c6:
e5:a4:94:d8:85:21:e1:4c:e1:31:f0:56:20:5e:ee:ea:fa:30:
44:f0:79:52:62:d1:90:ef:ee:9c:6a:0b:77:f2:15:f9:b1:68:
f8:da:d6:2c:1d:ff:de:e1:7e:90:33:05:7d:0b:b9:78:46:d0:
4a:1c:8c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:56:37 2026 by rpki-client