Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/491A96F0121F11F19F4A5579DAE4EC9C.roa
File: 491A96F0121F11F19F4A5579DAE4EC9C.roa (raw, json)
Hash identifier: PsuP49piR6zU6fn7Yw2qfjD0vR72BSfW6qW/28+goIc=
Subject key identifier: 3F:2B:EF:08:21:FC:DA:29:64:2D:75:BA:CA:9B:81:CD:A1:38:0D:C6
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1E40
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/491A96F0121F11F19F4A5579DAE4EC9C.roa
Signing time: Wed 25 Feb 2026 07:55:00 +0000
ROA not before: Wed 25 Feb 2026 07:54:57 +0000
ROA not after: Fri 25 Feb 2028 07:54:57 +0000
asID: 397423
IP address blocks: 154.16.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7744 (0x1e40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 25 07:54:57 2026 GMT
Not After : Feb 25 07:54:57 2028 GMT
Subject: CN=699eaad4-c780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9e:07:c0:4e:46:7f:b2:bd:2b:3f:3a:26:e0:
2b:96:d9:99:ca:9d:15:df:3f:17:02:e3:43:11:f5:
87:37:f8:c6:c9:58:6b:3f:97:03:6f:5d:38:d7:13:
f5:c3:a5:60:df:bb:bd:65:8a:af:55:ee:69:fc:a2:
ff:b9:14:8f:b8:a6:72:fe:ab:96:ae:f1:40:10:59:
2b:ce:ff:d0:60:5a:8a:99:d6:a6:69:fd:56:8c:79:
ec:d5:03:76:2b:d5:ec:b4:bf:90:c2:b8:cd:2f:ad:
02:db:77:74:e2:e0:fe:6a:d1:3d:f8:09:3c:d3:3f:
69:93:e0:09:0a:b3:a6:bd:1e:f5:2d:74:19:19:50:
8c:5e:75:c1:c6:ca:03:df:b0:18:6a:b0:4c:7a:ea:
3f:b1:64:63:8e:37:85:37:a9:22:d8:9e:52:67:1c:
51:71:a9:da:16:a4:42:47:1d:51:a0:e0:8e:38:f2:
8b:68:b0:28:77:1b:44:9a:ff:9c:89:0a:d1:df:98:
3d:9c:38:fd:be:9d:8b:2d:1c:35:76:10:a5:a4:77:
af:e8:16:77:82:00:89:21:e8:ca:c3:29:d0:54:b7:
9f:b5:7d:0f:4c:b8:57:b1:9b:6f:87:89:41:dd:0a:
a4:ba:1c:e5:94:8f:e0:77:bb:b4:b4:7d:1d:e9:a9:
2d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2B:EF:08:21:FC:DA:29:64:2D:75:BA:CA:9B:81:CD:A1:38:0D:C6
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/491A96F0121F11F19F4A5579DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.137.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:96:66:30:e9:74:b3:2b:dd:36:f9:a2:28:fd:32:64:13:3b:
e4:f2:13:20:28:a5:96:ca:6c:c5:79:ab:b9:3e:64:94:1f:9c:
31:b2:bf:09:45:0d:98:aa:e2:c9:ad:87:4b:96:4b:5d:71:38:
b7:ac:c2:42:64:1a:2f:07:bf:7a:4e:ae:36:b4:b8:d4:61:d1:
60:28:28:eb:f6:b1:0e:ee:5a:0b:16:cd:cb:d2:c0:d6:ca:9b:
6c:de:c6:a6:d1:96:3c:8c:66:c0:cc:7f:77:88:89:6c:23:93:
e1:5e:63:03:ab:a4:63:e7:7e:d7:6d:3d:01:d7:62:94:16:c8:
88:80:cc:29:f7:5a:b2:36:45:57:fc:33:e9:bd:4e:c0:dc:1c:
14:5d:56:82:42:ec:73:51:d0:69:04:9b:ad:40:84:78:0a:09:
b7:cc:79:a0:7e:22:79:d4:b4:e3:36:35:be:a5:ae:14:0d:5d:
14:d5:58:d0:cc:ce:91:ff:05:dc:be:58:48:93:46:8b:4e:d7:
e9:7f:4f:07:92:f6:7a:13:0a:4b:da:57:8c:61:42:1b:eb:4a:
2b:7c:9b:04:c8:5e:4f:55:b1:d0:39:55:9d:46:f6:11:fd:ba:
b0:6a:72:95:f5:c4:7a:09:49:8a:34:fe:c6:a4:c9:63:9e:59:
e3:5a:06:6c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICHkAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjAyMjUwNzU0NTdaFw0yODAyMjUwNzU0NTdaMBgxFjAU
BgNVBAMTDTY5OWVhYWQ0LWM3ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCcngfATkZ/sr0rPzom4CuW2ZnKnRXfPxcC40MR9Yc3+MbJWGs/lwNvXTjX
E/XDpWDfu71liq9V7mn8ov+5FI+4pnL+q5au8UAQWSvO/9BgWoqZ1qZp/VaMeezV
A3Yr1ey0v5DCuM0vrQLbd3Ti4P5q0T34CTzTP2mT4AkKs6a9HvUtdBkZUIxedcHG
ygPfsBhqsEx66j+xZGOON4U3qSLYnlJnHFFxqdoWpEJHHVGg4I448otosCh3G0Sa
/5yJCtHfmD2cOP2+nYstHDV2EKWkd6/oFneCAIkh6MrDKdBUt5+1fQ9MuFexm2+H
iUHdCqS6HOWUj+B3u7S0fR3pqS0FAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUPyvv
CCH82ilkLXW6ypuBzaE4DcYwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzQ5MUE5NkYwMTIxRjExRjE5RjRBNTU3OURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEIkwDQYJKoZIhvcNAQEL
BQADggEBACqWZjDpdLMr3Tb5oij9MmQTO+TyEyAopZbKbMV5q7k+ZJQfnDGyvwlF
DZiq4smth0uWS11xOLeswkJkGi8Hv3pOrja0uNRh0WAoKOv2sQ7uWgsWzcvSwNbK
m2zexqbRljyMZsDMf3eIiWwjk+FeYwOrpGPnftdtPQHXYpQWyIiAzCn3WrI2RVf8
M+m9TsDcHBRdVoJC7HNR0GkEm61AhHgKCbfMeaB+InnUtOM2Nb6lrhQNXRTVWNDM
zpH/Bdy+WEiTRotO1+l/TweS9noTCkvaV4xhQhvrSit8mwTIXk9VsdA5VZ1G9hH9
urBqcpX1xHoJSYo0/sakyWOeWeNaBmw=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:11:01 2026 by rpki-client