Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73A4A3ACFCF311F0B47AE4D4DAE4EC9C.roa
File: 73A4A3ACFCF311F0B47AE4D4DAE4EC9C.roa (raw, json)
Hash identifier: s+7tRvIvoUygxcePRchhPGOWEh0XLtJW0VQLaQXRzzk=
Subject key identifier: 74:59:4B:04:DB:4B:2A:4F:B3:E9:17:44:7E:B1:C6:CD:00:E8:00:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B74C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73A4A3ACFCF311F0B47AE4D4DAE4EC9C.roa
Signing time: Thu 29 Jan 2026 09:18:20 +0000
ROA not before: Thu 29 Jan 2026 09:18:15 +0000
ROA not after: Sun 08 Mar 2026 09:18:15 +0000
asID: 64126
IP address blocks: 154.88.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 20 Feb 2026 09:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112460 (0x1b74c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 29 09:18:15 2026 GMT
Not After : Mar 8 09:18:15 2026 GMT
Subject: CN=697b25dc-cc58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ca:ac:d5:4c:85:cc:44:20:9c:f1:0c:5c:18:
a7:4f:dd:af:11:e5:c9:13:b7:bc:90:8f:b1:8b:9b:
8e:07:b6:5c:2c:a7:e7:63:21:cf:43:02:7e:a1:e2:
bc:2e:21:7e:87:26:85:17:ec:79:61:71:01:dc:c8:
7d:88:87:02:a7:b2:37:14:6c:d7:d6:03:ef:60:7f:
e2:cf:f0:0d:fe:6e:1c:67:67:4d:a5:47:f5:71:4f:
a9:e7:e1:71:4e:8e:d8:2a:f4:34:fa:35:87:e6:90:
cf:d4:b7:04:31:9d:63:16:29:79:12:8c:36:99:4a:
c9:e0:e9:6c:e5:99:a2:16:06:50:e4:1a:71:33:66:
3b:7f:b4:14:52:ef:54:a5:b0:c0:d9:b6:f0:9f:1e:
82:1e:15:6f:21:f8:37:d2:7a:ca:64:d1:a5:a2:3b:
15:ab:8f:47:b0:c5:80:b7:7a:46:10:b8:ab:bc:13:
5d:f2:9f:b6:50:24:9a:37:62:31:ae:a4:93:bd:de:
eb:46:59:ec:f4:64:96:df:21:cd:00:90:dd:0f:b9:
05:3c:45:45:f6:e6:3f:37:2b:f9:e2:0e:be:16:98:
d8:a1:40:f3:0a:04:7f:2d:9e:db:fa:5d:64:f2:8a:
51:bb:58:b9:a4:d8:4e:ee:3e:06:a7:b5:37:2f:27:
5a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:59:4B:04:DB:4B:2A:4F:B3:E9:17:44:7E:B1:C6:CD:00:E8:00:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73A4A3ACFCF311F0B47AE4D4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.128.0/17
Signature Algorithm: sha256WithRSAEncryption
39:15:49:38:aa:02:54:ab:49:bc:bb:73:f8:38:61:b3:a8:5f:
45:93:fb:aa:15:a4:be:52:42:89:76:b2:19:15:89:60:52:af:
c4:65:84:a1:92:1b:97:90:3d:06:9c:b2:a5:6d:c9:ed:17:b4:
7a:ea:98:6c:d4:cc:ed:62:3a:84:0d:0a:d0:29:73:7f:e0:3d:
a3:48:5d:01:ff:11:05:80:fd:34:d4:57:f4:45:e1:91:84:50:
a5:38:86:12:a9:cb:ee:f8:bf:d2:9c:34:27:49:92:e8:c3:75:
9c:f7:15:b1:07:7d:f7:c7:95:5d:49:18:38:a7:e1:1a:f2:36:
16:aa:48:09:7d:bb:07:e8:85:bd:c9:83:30:b5:1e:f7:56:ad:
4d:27:0b:c1:2d:e8:9f:18:b0:69:a3:42:05:18:79:14:a3:f8:
f9:31:64:e6:70:73:dd:6b:6c:fc:f5:3a:ca:9d:20:8e:58:98:
6b:a5:6b:96:68:26:7a:80:96:a2:59:52:c6:1a:e9:34:fa:df:
07:ef:44:ff:db:c1:aa:4f:2e:27:04:8f:1b:6f:69:43:93:d2:
5b:53:56:44:e2:1c:f2:5e:7e:d6:34:fd:28:f6:0c:08:f4:3b:
99:3f:d9:9c:39:a6:87:66:81:22:4c:28:00:4c:03:60:e0:dc:
00:77:d0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:10:26 2026 by rpki-client