Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D2100A7E121C11F199C8AFE7DAE4EC9C.roa
File: D2100A7E121C11F199C8AFE7DAE4EC9C.roa (raw, json)
Hash identifier: WWN1m7BxCog5CWo8NNhsD57099m0Y4lS1KJ6x6wSSZA=
Subject key identifier: 6B:E7:00:B1:53:36:A5:16:AC:B3:5F:1B:05:FE:43:83:60:0A:C0:A2
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1E2F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D2100A7E121C11F199C8AFE7DAE4EC9C.roa
Signing time: Wed 25 Feb 2026 07:37:22 +0000
ROA not before: Wed 25 Feb 2026 07:37:18 +0000
ROA not after: Fri 25 Feb 2028 07:37:18 +0000
asID: 201341
IP address blocks: 154.16.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7727 (0x1e2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 25 07:37:18 2026 GMT
Not After : Feb 25 07:37:18 2028 GMT
Subject: CN=699ea6b2-f70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:69:37:e0:38:70:48:1b:0e:83:b8:a0:78:e6:
b9:3e:2d:c6:58:3d:a3:ce:c4:dd:d8:56:e1:81:60:
fe:3c:a8:e0:19:f4:2d:1a:0a:ca:38:24:65:40:1c:
86:71:92:13:7e:de:e6:37:56:d5:da:f9:ae:5e:bf:
66:b1:fa:21:f0:11:17:7f:ac:14:67:e1:b2:2a:9a:
38:8a:c0:8d:e0:a9:e8:a8:b3:37:73:20:d9:06:22:
00:8f:30:52:97:c3:72:79:b2:36:71:6a:ab:a0:83:
6d:be:5b:de:52:b8:07:67:66:d5:93:fc:84:12:d8:
23:c1:97:49:43:86:e9:1e:a6:ae:54:e4:3c:97:e4:
f8:da:2a:37:2d:6a:bb:ba:e5:d0:a9:65:13:f8:87:
14:f0:23:e4:94:3b:09:2d:47:16:4e:4d:b3:55:0e:
b9:50:f6:49:39:f8:d1:a1:25:57:42:43:60:94:f4:
55:01:c6:aa:d7:4a:fe:dc:05:44:b6:71:42:fd:29:
db:67:cf:a3:bb:6a:57:da:54:de:4e:f6:6f:33:fb:
01:72:29:42:3f:f1:41:71:ab:ca:d7:fc:99:eb:c1:
9b:43:cc:6c:57:fd:c3:49:22:b7:de:56:b1:21:9f:
ce:87:ab:5b:c7:07:30:6a:54:19:ec:4d:00:11:f5:
27:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E7:00:B1:53:36:A5:16:AC:B3:5F:1B:05:FE:43:83:60:0A:C0:A2
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D2100A7E121C11F199C8AFE7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.100.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:cb:be:17:6d:6a:7f:bc:a5:fa:23:dc:2c:e4:27:38:5e:e8:
ad:6c:4e:05:45:9b:7c:70:53:92:27:5e:06:35:68:b1:6f:0c:
ac:0f:3c:4e:91:58:41:43:77:af:8b:a7:cc:e0:59:75:10:2e:
55:eb:c1:37:2e:aa:f5:32:8f:6d:6b:99:86:bd:70:0b:ad:c1:
6b:24:7e:73:8f:26:85:6b:3e:12:18:a5:d0:56:36:fb:1b:24:
40:91:d4:94:d0:c1:74:f2:56:43:b9:1b:80:a2:14:bb:69:a8:
10:f9:3d:96:f1:4c:56:f6:e1:4e:25:a5:12:f5:8a:dd:d2:be:
43:11:c6:12:52:c2:84:17:4b:6e:56:dd:fa:c0:49:ce:ec:10:
09:2f:05:00:e6:61:40:fb:80:a5:1f:a6:a0:10:c7:4f:20:b9:
45:94:fc:55:71:db:0e:92:f1:4a:f1:3a:10:09:3a:9f:91:59:
d0:96:14:db:41:6e:7a:17:87:10:f7:c3:2c:d1:47:53:15:b1:
c2:73:d1:13:66:60:46:9a:06:58:67:1c:63:ba:24:76:8a:94:
73:73:47:7d:84:ce:98:d2:c8:39:61:8e:99:e7:8b:a9:a6:8f:
4b:e2:8d:80:ea:57:69:d1:fa:22:c4:d6:04:07:58:d6:0e:3a:
02:4e:9a:06
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICHi8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjAyMjUwNzM3MThaFw0yODAyMjUwNzM3MThaMBgxFjAU
BgNVBAMTDTY5OWVhNmIyLWY3MGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDSaTfgOHBIGw6DuKB45rk+LcZYPaPOxN3YVuGBYP48qOAZ9C0aCso4JGVA
HIZxkhN+3uY3VtXa+a5ev2ax+iHwERd/rBRn4bIqmjiKwI3gqeioszdzINkGIgCP
MFKXw3J5sjZxaqugg22+W95SuAdnZtWT/IQS2CPBl0lDhukepq5U5DyX5PjaKjct
aru65dCpZRP4hxTwI+SUOwktRxZOTbNVDrlQ9kk5+NGhJVdCQ2CU9FUBxqrXSv7c
BUS2cUL9Kdtnz6O7alfaVN5O9m8z+wFyKUI/8UFxq8rX/JnrwZtDzGxX/cNJIrfe
VrEhn86Hq1vHBzBqVBnsTQAR9Sd5AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUa+cA
sVM2pRass18bBf5Dg2AKwKIwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0QyMTAwQTdFMTIxQzExRjE5OUM4QUZFN0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEGQwDQYJKoZIhvcNAQEL
BQADggEBAC/Lvhdtan+8pfoj3CzkJzhe6K1sTgVFm3xwU5InXgY1aLFvDKwPPE6R
WEFDd6+Lp8zgWXUQLlXrwTcuqvUyj21rmYa9cAutwWskfnOPJoVrPhIYpdBWNvsb
JECR1JTQwXTyVkO5G4CiFLtpqBD5PZbxTFb24U4lpRL1it3SvkMRxhJSwoQXS25W
3frASc7sEAkvBQDmYUD7gKUfpqAQx08guUWU/FVx2w6S8UrxOhAJOp+RWdCWFNtB
bnoXhxD3wyzRR1MVscJz0RNmYEaaBlhnHGO6JHaKlHNzR32EzpjSyDlhjpnni6mm
j0vijYDqV2nR+iLE1gQHWNYOOgJOmgY=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:36:02 2026 by rpki-client