Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D61E2E81EEB11F18A610B8FDAE4EC9C.roa
File: 0D61E2E81EEB11F18A610B8FDAE4EC9C.roa (raw, json)
Hash identifier: znzWiQ4VnmUPoiFLPiaGwY3GiJ7Iej1vVmGBcwau2Pk=
Subject key identifier: 7A:D5:4F:94:52:41:78:D9:6B:14:CA:16:C7:14:A6:80:45:0E:B1:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF53
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D61E2E81EEB11F18A610B8FDAE4EC9C.roa
Signing time: Fri 13 Mar 2026 14:43:51 +0000
ROA not before: Fri 13 Mar 2026 14:43:47 +0000
ROA not after: Fri 03 Apr 2026 14:43:47 +0000
asID: 213169
IP address blocks: 154.83.91.0/24 maxlen: 24
154.83.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114515 (0x1bf53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 13 14:43:47 2026 GMT
Not After : Apr 3 14:43:47 2026 GMT
Subject: CN=69b422a7-5c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:29:d3:68:fd:1e:2d:78:5b:8c:29:dd:6e:43:
63:ef:11:c0:d0:4b:2b:ab:8e:ed:27:4c:d2:0e:b7:
62:e6:c2:a5:79:97:8d:e4:6b:34:4d:aa:8d:12:d7:
ba:fc:e3:dd:68:01:e3:91:3e:d2:69:c6:58:a6:1e:
ae:a4:e3:5c:74:25:65:68:06:55:67:35:07:c6:33:
64:ab:0a:e3:78:bb:20:c6:a5:6e:12:67:c9:8c:85:
3a:fd:2a:92:77:71:1a:ee:fd:2b:97:3f:21:5a:2b:
6d:97:01:28:d1:39:6e:5f:b9:ad:07:6e:02:4c:eb:
9f:a7:c1:29:71:ac:cc:52:7c:94:46:37:64:78:c9:
f9:56:43:a6:8f:33:ef:5a:b3:01:61:f5:3b:94:b8:
74:7c:c9:b7:21:9b:98:81:b1:8f:19:39:85:2e:90:
4f:48:a6:60:a5:94:90:69:18:15:38:1c:4b:b0:5b:
c9:6e:38:d8:a8:d0:66:2a:8e:02:c8:1b:8a:3a:1a:
e4:99:52:94:e0:61:49:6b:65:12:ff:ee:9a:84:65:
80:dc:4a:8c:77:ea:7e:44:4e:08:3c:0b:03:43:e3:
de:e3:0d:4f:32:b8:44:98:bc:ff:92:e6:bc:81:11:
7b:ab:d9:d8:7c:36:dd:df:40:c4:06:7c:69:a1:01:
9c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D5:4F:94:52:41:78:D9:6B:14:CA:16:C7:14:A6:80:45:0E:B1:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D61E2E81EEB11F18A610B8FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.91.0-154.83.95.255
Signature Algorithm: sha256WithRSAEncryption
39:cb:09:8c:16:aa:82:03:b7:a1:08:0c:33:01:27:ac:f1:50:
73:36:34:bf:d0:58:33:cb:50:e3:16:f9:95:4f:75:46:50:1c:
09:b3:35:2a:1b:da:7f:5d:d1:f7:74:50:82:1e:80:d1:a2:13:
2c:27:14:b2:c4:ca:43:a3:98:2a:a5:2d:c8:0c:ec:f1:4f:8b:
2b:e9:0c:19:a0:b4:6b:25:29:c1:ed:48:18:13:53:03:df:6b:
8d:ef:ff:07:ae:06:72:fe:39:65:68:2f:12:33:ba:b8:85:bf:
fa:ff:7f:05:76:22:91:7e:bc:e6:bb:8e:1b:fb:60:db:5e:15:
e1:9a:7f:1f:91:7b:10:e3:b2:83:cf:2f:78:5e:10:c0:f2:49:
8c:d3:ba:d2:36:d4:7a:17:ce:d5:5c:3b:c3:c0:b4:04:eb:b5:
b0:c9:70:71:0f:fb:bc:67:af:2e:3d:21:c0:55:3b:0e:1a:8a:
2b:a7:4a:e6:b2:4a:d0:58:de:f8:40:c8:43:37:d5:9f:23:eb:
9c:53:d6:f2:cd:f4:9e:43:aa:4c:fc:e7:58:52:43:17:57:36:
3f:0f:94:c1:3d:cc:1a:db:54:92:19:20:0c:c8:b0:c7:57:8a:
c2:59:ae:a9:6f:39:43:33:59:30:aa:e5:21:11:31:ae:5b:28:
81:05:58:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:19:14 2026 by rpki-client