Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8E837E3A121C11F1AC1A73E7DAE4EC9C.roa
File: 8E837E3A121C11F1AC1A73E7DAE4EC9C.roa (raw, json)
Hash identifier: tBuc+IuDXOZ0T6JF5m5VOLrIEyN3SjX1kuLN5lb1me8=
Subject key identifier: F8:AE:AB:27:00:29:65:4A:4D:36:6B:A4:83:1F:A0:E5:59:88:3C:30
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1E2C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8E837E3A121C11F1AC1A73E7DAE4EC9C.roa
Signing time: Wed 25 Feb 2026 07:35:28 +0000
ROA not before: Wed 25 Feb 2026 07:35:24 +0000
ROA not after: Fri 25 Feb 2028 07:35:24 +0000
asID: 201341
IP address blocks: 154.16.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7724 (0x1e2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 25 07:35:24 2026 GMT
Not After : Feb 25 07:35:24 2028 GMT
Subject: CN=699ea640-796c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:19:ca:44:46:71:9a:a0:c4:3d:8b:6f:51:75:
08:56:62:c9:1f:76:9d:60:9c:60:6d:2d:ba:25:bc:
77:53:a1:a1:da:85:1e:bf:e9:92:84:1f:f5:e5:26:
30:66:ac:6a:9b:75:7e:15:14:fe:93:bf:13:8a:1f:
51:1d:de:2c:0c:61:af:fd:55:69:95:7b:65:e0:f2:
0e:53:07:7b:24:ee:1f:a9:39:c7:ea:c9:0e:59:ff:
47:89:5a:ce:ed:ff:76:41:20:cb:95:b5:43:fa:e0:
87:c5:f5:11:b6:0b:39:20:31:d3:47:85:ef:da:e6:
bb:ab:07:3d:f2:27:ca:5b:94:7d:a4:32:3f:e9:88:
55:fb:1a:4c:eb:3f:22:f4:a5:1e:f9:8b:18:59:e3:
57:a7:7e:92:29:86:ac:c3:c3:c2:19:f2:86:d5:bd:
84:27:1c:66:bb:60:7c:aa:4e:8b:12:a5:94:db:a2:
a2:a6:13:52:6b:f1:ea:1b:0f:95:ce:56:29:77:6a:
70:7d:95:62:7a:86:f6:02:7b:e7:a7:5d:30:e7:d0:
40:e4:05:6a:62:94:ae:a2:38:5d:4c:8d:40:f0:ab:
d1:65:19:ba:a7:32:18:90:6d:03:56:c4:6e:42:39:
3e:22:0b:e2:02:e5:97:a5:82:9e:77:0f:5d:1a:73:
21:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AE:AB:27:00:29:65:4A:4D:36:6B:A4:83:1F:A0:E5:59:88:3C:30
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8E837E3A121C11F1AC1A73E7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.93.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:85:83:5f:ef:11:b0:a8:44:e5:8d:22:35:41:98:6b:9f:61:
81:2d:93:a3:96:c3:7e:3e:38:a2:b7:e8:1e:d6:55:f4:12:d1:
ee:da:1e:ba:66:9b:cc:81:87:1f:d0:f8:69:80:6e:e2:08:ac:
43:f2:05:a3:26:eb:27:90:75:f0:8f:39:ba:20:5d:8b:31:ab:
4c:42:15:39:06:9f:ea:95:a4:51:62:69:d8:23:3b:00:e6:51:
96:56:0e:22:a3:29:ee:1b:a2:3c:48:18:59:7c:f3:33:b2:ae:
fe:e1:c2:14:3f:ae:1d:1e:7f:a7:e6:86:53:08:fb:13:3f:0b:
ed:c0:aa:7d:7a:2f:07:90:a4:12:ec:f3:15:58:05:a7:54:0d:
6c:36:7e:08:a6:3d:a7:d0:3d:bf:99:b6:2f:a8:b4:7d:fc:b5:
6e:99:80:23:fe:d4:6d:d5:85:e7:50:91:d3:60:f0:0b:bc:a5:
15:39:c2:09:fd:cc:fa:7e:fd:47:ad:f3:5c:af:0b:ef:9c:a7:
fa:08:c2:e9:18:a9:a4:08:6b:9b:eb:d9:20:01:73:16:a8:b9:
93:83:1d:27:77:06:32:11:82:c7:79:e5:60:ae:d7:7d:56:89:
e5:fb:bf:39:44:f3:b6:a1:20:8b:3a:6a:45:22:2d:75:32:0f:
12:d8:8c:8d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICHiwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjAyMjUwNzM1MjRaFw0yODAyMjUwNzM1MjRaMBgxFjAU
BgNVBAMTDTY5OWVhNjQwLTc5NmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDWGcpERnGaoMQ9i29RdQhWYskfdp1gnGBtLbolvHdToaHahR6/6ZKEH/Xl
JjBmrGqbdX4VFP6TvxOKH1Ed3iwMYa/9VWmVe2Xg8g5TB3sk7h+pOcfqyQ5Z/0eJ
Ws7t/3ZBIMuVtUP64IfF9RG2CzkgMdNHhe/a5rurBz3yJ8pblH2kMj/piFX7Gkzr
PyL0pR75ixhZ41enfpIphqzDw8IZ8obVvYQnHGa7YHyqTosSpZTboqKmE1Jr8eob
D5XOVil3anB9lWJ6hvYCe+enXTDn0EDkBWpilK6iOF1MjUDwq9FlGbqnMhiQbQNW
xG5COT4iC+IC5Zelgp53D10acyH3AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU+K6r
JwApZUpNNmukgx+g5VmIPDAwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzhFODM3RTNBMTIxQzExRjFBQzFBNzNFN0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEF0wDQYJKoZIhvcNAQEL
BQADggEBAHuFg1/vEbCoROWNIjVBmGufYYEtk6OWw34+OKK36B7WVfQS0e7aHrpm
m8yBhx/Q+GmAbuIIrEPyBaMm6yeQdfCPObogXYsxq0xCFTkGn+qVpFFiadgjOwDm
UZZWDiKjKe4bojxIGFl88zOyrv7hwhQ/rh0ef6fmhlMI+xM/C+3Aqn16LweQpBLs
8xVYBadUDWw2fgimPafQPb+Zti+otH38tW6ZgCP+1G3VhedQkdNg8Au8pRU5wgn9
zPp+/Uet81yvC++cp/oIwukYqaQIa5vr2SABcxaouZODHSd3BjIRgsd55WCu131W
ieX7vzlE87ahIIs6akUiLXUyDxLYjI0=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:56:39 2026 by rpki-client