Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/3090B8681EC611F1BB0A92BDDAE4EC9C.roa
File: 3090B8681EC611F1BB0A92BDDAE4EC9C.roa (raw, json)
Hash identifier: HnTfIVu9muq+g847NRBmW0pVK2J4iJgCN/MFxOihXGI=
Subject key identifier: 34:5C:B1:4A:25:08:B4:87:81:88:EE:D7:35:45:A3:E7:C6:CE:66:C7
Certificate issuer: /CN=F3681ED0AF/serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
Certificate serial: 0481
Authority key identifier: 4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/3090B8681EC611F1BB0A92BDDAE4EC9C.roa
Signing time: Fri 13 Mar 2026 10:20:00 +0000
ROA not before: Fri 13 Mar 2026 10:19:55 +0000
ROA not after: Fri 14 Mar 2036 10:19:55 +0000
asID: 30986
IP address blocks: 154.160.0.0/12 maxlen: 12
154.160.0.0/20 maxlen: 24
154.160.16.0/20 maxlen: 24
2c0f:f7c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl
rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 29 Mar 2026 00:06:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1153 (0x481)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3681ED0AF, serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
Validity
Not Before: Mar 13 10:19:55 2026 GMT
Not After : Mar 14 10:19:55 2036 GMT
Subject: CN=69b3e4d0-a9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:84:53:e1:34:d5:2d:88:3c:93:0e:3d:86:dc:
c5:2f:2a:03:15:6b:26:f6:de:3a:fe:ea:25:51:7c:
56:48:79:8a:5c:00:ea:9f:fe:f6:bd:87:3b:ff:71:
65:2b:2c:11:46:b3:d1:d2:13:8d:30:b6:92:9c:60:
e3:31:c7:df:00:4b:58:52:15:e3:20:2e:b3:86:e8:
33:f3:67:78:90:a3:be:f5:7c:97:04:72:22:c4:2d:
86:34:bc:fb:3c:13:16:e9:e0:61:1c:22:80:91:4d:
b4:01:eb:22:9d:10:6b:33:dd:52:07:4c:71:8c:f5:
73:e4:7e:50:cd:b4:e6:66:db:c1:b7:5f:32:ab:f3:
f8:96:c3:0a:94:87:6e:10:c6:3f:9a:27:8f:af:32:
e8:f5:81:d5:8c:cd:80:c6:bb:71:63:45:1b:01:e3:
0a:b1:4f:7c:80:9e:17:c2:ae:86:3d:b4:3f:f4:82:
37:d0:88:51:f4:43:9d:71:7d:97:45:b8:3a:d0:13:
21:34:2a:65:91:bc:cb:45:87:d8:e6:a0:48:4d:d3:
7d:17:61:86:a2:4d:ef:1c:e3:ea:66:ca:d8:c4:1b:
02:b6:43:d6:a4:df:1f:18:13:fc:39:c9:48:62:a9:
98:3d:2c:0f:46:9e:e4:32:cd:4a:6d:31:24:6c:94:
4e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5C:B1:4A:25:08:B4:87:81:88:EE:D7:35:45:A3:E7:C6:CE:66:C7
X509v3 Authority Key Identifier:
keyid:4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/3090B8681EC611F1BB0A92BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.160.0.0/12
IPv6:
2c0f:f7c0::/32
Signature Algorithm: sha256WithRSAEncryption
95:13:33:4f:8c:0a:a5:d6:bd:cd:23:fc:61:df:29:9c:da:05:
a3:69:38:5f:40:d6:af:31:d8:82:39:fd:7c:83:3b:57:2e:56:
5a:3c:17:2c:a0:27:dd:58:fc:b2:d0:e6:d5:1a:7c:fe:ef:8b:
10:76:bd:96:57:b5:fa:e5:28:7e:33:cd:c4:dd:2b:8c:6c:de:
04:fc:84:ec:9e:0f:5f:f5:fb:6b:3c:b5:86:3b:e8:fb:47:d4:
74:c7:98:d7:19:30:0a:61:9d:87:76:d3:fe:10:3b:17:44:fd:
41:93:ac:9e:53:0f:3d:4d:63:44:ae:af:7f:8d:82:15:cf:b8:
97:09:94:5a:c8:bd:8e:ed:f6:29:f0:7f:49:61:78:6d:be:b6:
53:c5:70:c8:1c:89:3f:05:46:21:b2:68:b2:32:cb:d3:9c:10:
b6:0a:cd:11:9d:48:cf:2e:03:f0:fe:fd:9b:54:87:b6:54:54:
25:93:71:23:37:24:b5:01:c2:e7:ae:4f:33:55:a1:ba:be:0e:
d5:4c:76:5f:8c:c7:24:15:b6:ab:12:3a:e5:08:4a:e0:30:0d:
bf:13:91:99:51:98:5d:96:56:c0:6b:63:07:55:48:53:25:f6:
c4:e9:4c:9e:61:80:b1:b0:8d:06:37:26:5d:09:d1:db:3a:88:
bf:10:e5:af
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgICBIEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODFFRDBBRjExMC8GA1UEBRMoNEE4M0YzMUIxQjA2MDRDQTZEMEI3MkE0NTNEQUEz
RUI1ODdCNEM4MjAeFw0yNjAzMTMxMDE5NTVaFw0zNjAzMTQxMDE5NTVaMBgxFjAU
BgNVBAMTDTY5YjNlNGQwLWE5ZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDThFPhNNUtiDyTDj2G3MUvKgMVayb23jr+6iVRfFZIeYpcAOqf/va9hzv/
cWUrLBFGs9HSE40wtpKcYOMxx98AS1hSFeMgLrOG6DPzZ3iQo771fJcEciLELYY0
vPs8Exbp4GEcIoCRTbQB6yKdEGsz3VIHTHGM9XPkflDNtOZm28G3XzKr8/iWwwqU
h24Qxj+aJ4+vMuj1gdWMzYDGu3FjRRsB4wqxT3yAnhfCroY9tD/0gjfQiFH0Q51x
fZdFuDrQEyE0KmWRvMtFh9jmoEhN030XYYaiTe8c4+pmytjEGwK2Q9ak3x8YE/w5
yUhiqZg9LA9GnuQyzUptMSRslE4VAgMBAAGjggKzMIICrzAdBgNVHQ4EFgQUNFyx
SiUItIeBiO7XNUWj58bOZscwHwYDVR0jBBgwFoAUSoPzGxsGBMptC3KkU9qj61h7
TIIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgxRUQwLzUyNTFDMDc4Q0UyNDExRURBMDkyRDBBQ0YxMjIyNDY4L1NvUHpH
eHNHQk1wdEMzS2tVOXFqNjFoN1RJSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NvUHpHeHNHQk1wdEMzS2tVOXFqNjFoN1RJSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgxRUQwLzUyNTFDMDc4Q0UyNDExRURBMDkyRDBBQ0Yx
MjIyNDY4LzMwOTBCODY4MUVDNjExRjFCQjBBOTJCRERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwLQYIKwYBBQUHAQcBAf8EHjAcMAsEAgABMAUDAwSaoDANBAIAAjAHAwUALA/3
wDANBgkqhkiG9w0BAQsFAAOCAQEAlRMzT4wKpda9zSP8Yd8pnNoFo2k4X0DWrzHY
gjn9fIM7Vy5WWjwXLKAn3Vj8stDm1Rp8/u+LEHa9lle1+uUofjPNxN0rjGzeBPyE
7J4PX/X7azy1hjvo+0fUdMeY1xkwCmGdh3bT/hA7F0T9QZOsnlMPPU1jRK6vf42C
Fc+4lwmUWsi9ju32KfB/SWF4bb62U8VwyByJPwVGIbJosjLL05wQtgrNEZ1Izy4D
8P79m1SHtlRUJZNxIzcktQHC565PM1Whur4O1Ux2X4zHJBW2qxI65QhK4DANvxOR
mVGYXZZWwGtjB1VIUyX2xOlMnmGAsbCNBjcmXQnR2zqIvxDlrw==
-----END CERTIFICATE-----
Generated at Fri Mar 27 08:37:03 2026 by rpki-client