Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/143C4154121F11F1A80058F4DAE4EC9C.roa
File: 143C4154121F11F1A80058F4DAE4EC9C.roa (raw, json)
Hash identifier: 8nhwUcJPmeY6uqcXcUEll2pGcPT7x24GLXbEBgwRjnA=
Subject key identifier: 23:74:3A:A8:CF:BA:03:9C:0F:8A:31:52:82:CE:22:3B:90:18:5E:D0
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1E3E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/143C4154121F11F1A80058F4DAE4EC9C.roa
Signing time: Wed 25 Feb 2026 07:53:32 +0000
ROA not before: Wed 25 Feb 2026 07:53:28 +0000
ROA not after: Fri 25 Feb 2028 07:53:28 +0000
asID: 201341
IP address blocks: 154.16.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7742 (0x1e3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 25 07:53:28 2026 GMT
Not After : Feb 25 07:53:28 2028 GMT
Subject: CN=699eaa7c-5d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b8:c9:e6:22:6a:3b:85:2c:b0:d3:c0:ed:b8:
4e:b6:2a:a1:da:43:ec:cd:1d:d0:19:55:52:43:16:
58:5f:d4:07:44:7c:3d:10:75:94:36:3e:70:53:f5:
99:f8:9e:09:c4:f7:5c:c7:c3:82:fa:f1:46:9b:8f:
82:9a:40:a6:f3:a0:26:e1:f3:ee:11:8c:c9:2b:60:
6d:3f:78:3f:57:09:a7:8b:89:34:b1:a3:4d:25:ad:
75:98:b3:4e:f0:11:8c:e3:45:9f:c7:68:69:9e:89:
35:96:ee:d2:79:1a:6f:2c:70:a1:2e:cb:2e:a2:7f:
87:30:70:95:86:a1:8f:e4:64:c5:af:23:b5:56:b1:
48:aa:80:7a:a0:06:f0:95:87:6d:45:fd:e1:04:bc:
29:5c:b9:98:1a:e5:a5:5f:b1:61:31:2c:c4:ff:a3:
8d:63:de:01:94:75:ee:a2:ab:29:1b:43:ae:26:67:
cb:c2:15:85:01:47:07:0b:28:93:8f:db:ca:a7:3a:
8a:d4:55:9b:bf:da:c5:a9:91:35:72:e0:62:87:fd:
51:74:8a:91:b6:be:41:56:45:7c:a1:e2:05:c0:3c:
f7:24:38:d8:fc:2d:6b:8e:5f:ee:f3:4d:10:b5:bb:
c3:2a:64:ad:7b:1c:23:d7:ea:f1:b9:fd:90:b0:42:
a7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:74:3A:A8:CF:BA:03:9C:0F:8A:31:52:82:CE:22:3B:90:18:5E:D0
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/143C4154121F11F1A80058F4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.107.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:38:d2:7a:b3:ad:a0:ee:e9:80:0c:10:e5:78:81:fc:90:e6:
be:c4:37:21:13:9d:8f:23:33:25:b0:54:50:74:9a:40:47:3e:
7f:0f:c6:7e:d9:0d:de:23:3e:7d:2c:38:ad:c1:0c:a3:a6:21:
7f:e7:14:f9:48:bb:92:47:6c:6f:31:3f:e2:9e:b7:81:75:78:
61:4c:51:50:62:67:b7:03:22:17:65:3b:d9:94:04:4c:a0:ba:
ae:ff:15:c9:d0:61:34:35:78:2d:ff:8c:17:d1:2c:5c:72:bc:
e2:87:bb:f4:e8:1f:77:d9:98:3c:7e:e8:bc:9a:bc:8b:27:4a:
27:f4:81:e8:15:d4:19:58:f5:db:e5:d9:6f:4d:62:b2:87:86:
0f:2b:da:00:0b:75:2a:44:49:ed:d3:17:3c:99:1a:c0:63:54:
c7:65:c4:5b:02:8d:8c:cb:69:d5:fa:63:7c:99:fc:79:9d:b2:
05:cc:e1:09:f9:a5:2e:d1:58:e2:ac:0a:be:61:fc:a3:7d:5c:
17:ed:58:cf:94:15:83:0e:9a:8c:87:13:79:a4:25:08:c5:46:
75:c5:80:18:7d:8e:78:d6:8b:c4:f0:d2:8e:61:1f:29:26:89:
b0:75:34:10:4f:8d:87:81:0a:b0:53:e8:4f:46:2f:60:6f:39:
4b:0f:6f:a9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICHj4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjAyMjUwNzUzMjhaFw0yODAyMjUwNzUzMjhaMBgxFjAU
BgNVBAMTDTY5OWVhYTdjLTVkMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJuMnmImo7hSyw08DtuE62KqHaQ+zNHdAZVVJDFlhf1AdEfD0QdZQ2PnBT
9Zn4ngnE91zHw4L68Uabj4KaQKbzoCbh8+4RjMkrYG0/eD9XCaeLiTSxo00lrXWY
s07wEYzjRZ/HaGmeiTWW7tJ5Gm8scKEuyy6if4cwcJWGoY/kZMWvI7VWsUiqgHqg
BvCVh21F/eEEvClcuZga5aVfsWExLMT/o41j3gGUde6iqykbQ64mZ8vCFYUBRwcL
KJOP28qnOorUVZu/2sWpkTVy4GKH/VF0ipG2vkFWRXyh4gXAPPckONj8LWuOX+7z
TRC1u8MqZK17HCPX6vG5/ZCwQqeTAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUI3Q6
qM+6A5wPijFSgs4iO5AYXtAwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzE0M0M0MTU0MTIxRjExRjFBODAwNThGNERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEGswDQYJKoZIhvcNAQEL
BQADggEBAKE40nqzraDu6YAMEOV4gfyQ5r7ENyETnY8jMyWwVFB0mkBHPn8Pxn7Z
Dd4jPn0sOK3BDKOmIX/nFPlIu5JHbG8xP+Ket4F1eGFMUVBiZ7cDIhdlO9mUBEyg
uq7/FcnQYTQ1eC3/jBfRLFxyvOKHu/ToH3fZmDx+6LyavIsnSif0gegV1BlY9dvl
2W9NYrKHhg8r2gALdSpESe3TFzyZGsBjVMdlxFsCjYzLadX6Y3yZ/HmdsgXM4Qn5
pS7RWOKsCr5h/KN9XBftWM+UFYMOmoyHE3mkJQjFRnXFgBh9jnjWi8Tw0o5hHykm
ibB1NBBPjYeBCrBT6E9GL2BvOUsPb6k=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:36:02 2026 by rpki-client