Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C65CDF0C121E11F1A77F15F4DAE4EC9C.roa
File: C65CDF0C121E11F1A77F15F4DAE4EC9C.roa (raw, json)
Hash identifier: d5ZTDWnQX/OXX1U2tGWMMeHPKm2wo3Q1jlAIl2fmVvM=
Subject key identifier: 89:91:74:8D:FB:6D:FD:A6:DC:A8:8E:9E:AA:05:1E:9C:BD:A2:D8:62
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1E3B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C65CDF0C121E11F1A77F15F4DAE4EC9C.roa
Signing time: Wed 25 Feb 2026 07:51:21 +0000
ROA not before: Wed 25 Feb 2026 07:51:17 +0000
ROA not after: Fri 25 Feb 2028 07:51:17 +0000
asID: 201341
IP address blocks: 154.16.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7739 (0x1e3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 25 07:51:17 2026 GMT
Not After : Feb 25 07:51:17 2028 GMT
Subject: CN=699ea9f9-203b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:98:fd:1e:20:8d:e3:f6:e7:57:cf:81:cc:e5:
f7:d7:c8:c7:36:4f:64:16:da:61:d4:ee:d5:ac:1a:
32:25:13:da:58:a7:06:c5:ef:d0:86:26:ec:a2:b0:
53:92:8d:b4:fe:8b:97:d7:c6:48:4f:20:30:c0:85:
c7:5b:79:ae:b8:65:99:ef:1d:ee:3b:e6:55:49:54:
60:e2:23:ed:38:24:f7:26:82:a7:58:94:54:cf:93:
ba:bf:df:4c:83:05:42:a3:c4:a7:81:fd:59:b6:ba:
43:01:54:62:66:44:97:99:9a:70:36:1a:82:01:64:
dd:63:f5:1e:63:55:4d:c0:92:83:ee:28:33:64:62:
fa:46:22:d7:fd:a3:d7:aa:f8:99:bd:97:fb:ea:38:
3b:84:35:cf:4a:1b:40:dd:ba:01:9f:43:28:5f:76:
c3:36:ec:f7:ce:f2:08:9f:d8:4d:28:79:cb:fb:ae:
4e:d0:32:96:a2:99:62:9c:7a:f0:cf:70:a8:48:f9:
05:84:b8:a2:69:85:1b:61:12:6b:21:65:55:d1:19:
56:bc:59:ab:42:ef:d6:10:1f:6e:95:04:04:bd:6d:
c0:02:ca:14:44:24:23:96:e3:89:e0:14:eb:98:c8:
ee:c5:81:55:9a:4e:37:d8:54:cb:90:f2:83:3c:1d:
89:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:91:74:8D:FB:6D:FD:A6:DC:A8:8E:9E:AA:05:1E:9C:BD:A2:D8:62
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C65CDF0C121E11F1A77F15F4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.106.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:82:c5:44:7e:d8:f7:6b:a0:40:a6:da:d6:ea:77:5b:a9:6a:
bb:b5:cc:d6:ce:3d:9c:b5:5a:c0:f2:1b:91:f4:24:f3:c9:f0:
a1:17:50:98:a7:03:3b:c7:a0:da:9c:80:93:44:e1:2d:50:d0:
a1:36:5b:bf:f2:f7:17:f8:1c:6d:4e:52:59:35:1b:27:aa:4d:
75:36:94:a6:55:2c:d0:8c:f2:df:83:af:9a:10:ca:11:62:9d:
1c:7a:40:2e:5d:74:a5:b2:f2:fb:6b:b3:c2:27:5e:9d:79:33:
b1:d1:a1:af:9a:65:76:a0:52:d0:cf:aa:d4:c7:bd:f7:1b:40:
f8:41:0a:7e:fd:fa:5b:37:b4:7c:b9:31:0e:39:33:37:c2:d9:
bc:ed:13:88:90:ff:8f:01:29:8d:0c:30:e6:80:46:c5:ac:04:
e2:91:fa:ff:72:41:b1:15:80:21:44:56:d2:d9:47:92:25:38:
dd:ab:34:0e:a6:21:0e:8e:dc:2f:ef:c9:af:ea:8b:9c:1e:4f:
39:29:8c:b7:f4:d8:5d:5b:34:52:b7:ea:8c:4a:9a:d0:ed:b8:
24:63:b5:1b:21:c2:b9:93:c3:65:ab:ee:1d:b2:65:2e:26:ac:
e4:93:ec:17:a0:06:07:fc:89:4a:34:7b:e1:bf:4c:b9:54:84:
2f:00:1a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:32:54 2026 by rpki-client