Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C5D7A086121D11F187E5BCEDDAE4EC9C.roa
File: C5D7A086121D11F187E5BCEDDAE4EC9C.roa (raw, json)
Hash identifier: o1G/uCfUfTB43tXys/aJRERj1AyangdEXT3YCAli4IM=
Subject key identifier: A4:16:5B:25:DE:2C:50:81:36:B4:FD:6A:C8:DA:8F:B4:17:E5:28:5B
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1E35
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C5D7A086121D11F187E5BCEDDAE4EC9C.roa
Signing time: Wed 25 Feb 2026 07:44:11 +0000
ROA not before: Wed 25 Feb 2026 07:44:07 +0000
ROA not after: Fri 25 Feb 2028 07:44:07 +0000
asID: 201341
IP address blocks: 154.16.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7733 (0x1e35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 25 07:44:07 2026 GMT
Not After : Feb 25 07:44:07 2028 GMT
Subject: CN=699ea84b-52ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d6:7c:30:62:b0:87:64:8b:cf:0f:f4:77:9c:
62:ed:75:54:a4:2c:b5:08:77:0a:bc:31:17:23:58:
a6:42:81:9f:bc:4f:fa:ff:b5:cc:4e:50:36:ca:88:
eb:f8:e8:b5:d8:ff:7a:0a:8b:06:0f:7d:2b:4e:bd:
9a:54:ce:b3:e2:65:71:af:bd:88:0f:e7:01:c0:42:
68:6e:bd:24:fe:ab:83:32:a1:28:c2:a7:2c:45:e1:
e4:b9:17:3b:e2:bd:28:17:13:d0:7c:2c:e5:24:a8:
a4:29:c7:3a:fa:44:76:01:51:54:55:69:cf:31:52:
26:02:ea:4d:a9:e5:bd:7a:d4:e9:47:69:08:fe:94:
31:7d:be:15:1a:4b:12:b5:22:51:e4:bc:c7:3c:8a:
34:1c:4a:13:c7:d1:f4:0f:ed:ee:1c:b9:07:24:1d:
9d:3c:fc:17:45:f0:de:57:da:25:75:63:12:b0:43:
27:12:24:76:51:de:f8:a0:7c:d1:d7:c1:a2:64:30:
f1:89:6c:32:9a:8a:cc:cb:b0:d8:79:55:0b:b9:ba:
39:5e:43:00:f6:9b:6c:37:d6:e8:45:50:b5:f0:7f:
21:9d:39:b2:d8:2c:45:15:43:c4:7f:57:b3:4f:56:
74:87:cd:49:86:8e:e6:38:1e:08:c2:b2:2e:29:3d:
13:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:16:5B:25:DE:2C:50:81:36:B4:FD:6A:C8:DA:8F:B4:17:E5:28:5B
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C5D7A086121D11F187E5BCEDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.102.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:21:0e:33:87:b8:09:74:8f:52:96:b3:72:6a:23:f7:5b:12:
2c:6c:c2:00:ae:fe:34:ec:0c:a1:40:83:1e:70:1f:4b:53:f7:
0c:8c:7f:75:9a:2f:0a:00:85:45:a7:d8:1e:3a:d5:2d:41:37:
e5:9c:d4:92:e3:54:f2:45:92:bb:b9:ef:93:d2:58:fa:25:8d:
b3:d3:28:6d:ab:01:4f:f3:de:85:a4:f3:67:90:2b:87:58:fb:
53:1a:f8:a2:0b:06:bb:c1:b5:4f:b8:23:d6:fe:00:e2:0c:2e:
2d:e5:29:eb:2b:e4:d9:c4:e6:2a:d4:e9:e2:e9:a1:8d:23:0b:
58:4b:eb:59:93:d5:78:65:54:fe:81:2d:82:d0:46:f7:63:81:
fb:ac:4c:29:80:34:da:41:b8:cc:e6:41:c9:db:39:a5:fd:55:
62:48:01:28:e3:45:4c:8a:5c:60:2c:5d:bf:36:da:e7:bb:ed:
33:fc:06:22:0c:47:6b:44:a8:7c:ea:fe:b6:30:e8:46:57:3e:
56:60:77:39:af:73:db:f6:91:08:69:7d:c8:63:56:2a:8e:e5:
98:55:62:f1:58:46:49:0c:96:16:aa:06:54:89:23:62:9b:81:
a6:8b:4e:64:eb:d9:97:0b:45:6a:a5:53:94:49:5a:ae:59:3c:
be:06:ab:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:43:19 2026 by rpki-client