Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11B8C8D217B811F1B65D30D0DAE4EC9C.roa
File: 11B8C8D217B811F1B65D30D0DAE4EC9C.roa (raw, json)
Hash identifier: K19453r/kpkQmPz86l1JZkjb7mcHREgeNJMaywrGinc=
Subject key identifier: 77:F6:71:FA:E0:ED:B9:AE:36:DD:2E:56:54:C4:0C:26:9D:9E:ED:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BD63
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11B8C8D217B811F1B65D30D0DAE4EC9C.roa
Signing time: Wed 04 Mar 2026 10:51:16 +0000
ROA not before: Wed 04 Mar 2026 10:51:12 +0000
ROA not after: Fri 08 May 2026 10:51:12 +0000
asID: 149014
IP address blocks: 154.223.168.0/22 maxlen: 24
154.223.176.0/22 maxlen: 24
154.223.180.0/22 maxlen: 24
154.223.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Mar 2026 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114019 (0x1bd63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 4 10:51:12 2026 GMT
Not After : May 8 10:51:12 2026 GMT
Subject: CN=69a80ea4-2e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fc:6d:ec:0a:72:b4:5d:21:aa:20:5a:a2:4c:
a5:b5:33:7f:88:23:42:fa:9e:12:1a:97:98:04:af:
61:fd:08:22:62:2e:4e:e6:fc:a5:3d:09:9d:be:cd:
75:d5:1f:05:e8:0e:46:e5:e8:bf:ff:dc:a1:eb:19:
25:46:e9:9e:f8:8f:e1:90:b0:b3:04:b2:b8:f6:de:
2d:36:fd:9e:d0:eb:e0:7d:da:50:d7:8e:b8:17:1b:
e7:3a:59:7a:4d:69:ee:1f:bb:bd:bd:03:f8:a2:21:
99:8e:37:85:c4:f3:e4:5e:12:7b:4a:d2:32:6f:a3:
14:02:7b:21:0e:95:0d:10:11:89:37:db:ef:ba:e5:
8c:58:d9:b9:14:11:f0:ed:c9:7b:48:1a:b6:3e:eb:
07:9a:7c:45:72:f0:37:f1:e3:e9:60:e6:72:ad:2d:
7d:dc:15:5f:04:0e:dd:db:52:bc:98:70:54:17:d7:
f0:84:ed:73:9c:06:69:ae:7b:86:76:b7:59:3e:df:
89:43:cb:e4:c4:26:41:dd:7b:84:50:8a:f6:fb:1f:
b9:66:5a:61:5d:68:91:1d:f7:bf:ae:f5:8e:ae:c8:
4e:5c:b5:73:d8:8d:13:9a:4a:42:c4:5e:64:f6:9a:
e1:2b:d7:73:68:2c:4a:f7:e6:14:3a:37:e7:3b:61:
ac:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F6:71:FA:E0:ED:B9:AE:36:DD:2E:56:54:C4:0C:26:9D:9E:ED:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11B8C8D217B811F1B65D30D0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.168.0/22
154.223.176.0/21
154.223.188.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:e6:16:c7:83:10:a7:08:47:55:85:d1:b5:fa:8c:5d:c4:d0:
96:58:8d:7c:05:99:44:c2:26:65:f3:5d:3c:f1:e8:96:82:67:
a3:f3:b4:7c:db:da:6b:58:8b:e8:9a:f6:0f:8b:b6:95:f6:82:
bc:79:d6:3b:2e:b0:67:4e:fb:52:c5:1e:1a:4b:05:22:43:e5:
c4:fe:e3:f3:51:19:a3:2c:7f:53:02:a3:b5:2b:d3:9c:d1:82:
41:c7:b4:8b:a3:45:81:c9:1d:03:35:59:e7:0e:d6:4d:0c:33:
e6:91:ce:4b:04:cb:9e:68:ba:16:f7:82:fa:78:a4:51:3a:1b:
04:0a:1f:00:c5:4d:9a:d1:cc:9f:9c:3a:05:e8:00:84:a1:c2:
aa:bc:d3:8c:13:e2:3b:13:5d:d6:74:a1:02:9f:c0:e1:ac:24:
bf:72:c9:89:5d:4e:27:bb:5e:52:ed:1d:9c:e6:44:39:fc:45:
08:7c:97:42:6f:37:e3:3f:41:9a:e0:49:9e:aa:4a:85:2f:16:
fe:bc:70:f5:32:ae:c3:bf:e3:05:6f:d8:d4:e0:af:ff:db:d6:
77:d5:96:3b:49:ab:d9:48:64:3f:a1:46:70:4e:eb:b8:9b:ad:
85:b7:f2:2d:c1:e1:3c:e4:4e:7d:9d:d5:b9:e8:8a:62:d1:7f:
e9:84:3b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 09:55:02 2026 by rpki-client