Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18884CC416F911F1977A08B9DAE4EC9C.roa
File: 18884CC416F911F1977A08B9DAE4EC9C.roa (raw, json)
Hash identifier: bIh1vwxwUiQQpPltHjCwy4uJwACVKBwPLljuX185tnk=
Subject key identifier: 34:DF:6A:C2:7F:69:C6:3E:41:2B:16:DE:B9:59:77:A1:D4:1E:5A:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BD30
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18884CC416F911F1977A08B9DAE4EC9C.roa
Signing time: Tue 03 Mar 2026 12:04:14 +0000
ROA not before: Tue 03 Mar 2026 12:04:09 +0000
ROA not after: Fri 10 Apr 2026 12:04:09 +0000
asID: 40779
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Mar 2026 00:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113968 (0x1bd30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 12:04:09 2026 GMT
Not After : Apr 10 12:04:09 2026 GMT
Subject: CN=69a6ce3e-36c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:6d:71:bf:e3:ab:0f:36:fd:19:92:dd:ec:
26:11:5f:e4:c1:8a:60:87:e9:6e:05:0c:59:01:7c:
24:1a:28:1f:22:b3:1b:67:23:05:4a:17:53:ef:e5:
24:ee:37:ed:16:12:e8:71:54:2d:83:be:05:ce:d2:
36:a4:cd:6b:c6:3e:2c:4e:80:c0:96:f9:b6:1e:e9:
66:fc:b6:ee:17:76:40:42:df:41:0f:47:bd:4c:b6:
45:db:cb:ad:46:e3:c0:97:2b:63:80:e3:0b:0b:a1:
e2:7a:e6:b7:d7:71:66:ba:11:91:4f:66:73:8a:cd:
a0:17:db:9b:ea:96:c2:ee:72:b7:83:22:83:aa:a3:
08:2a:6e:ba:e3:ca:b6:6b:8f:89:88:eb:bf:9c:3f:
ce:b8:2c:7a:18:60:3f:a9:90:10:9e:11:87:b2:36:
65:7f:d2:32:fa:aa:93:3c:dd:be:e0:e3:0e:a2:de:
21:29:59:d4:45:a3:84:6a:8e:ae:f6:26:a2:d5:9d:
47:28:9f:1f:e7:00:12:1b:58:75:4a:a3:f8:92:39:
36:a7:9c:40:62:06:72:02:31:16:7a:49:78:3b:ea:
7c:90:f8:17:2f:f8:4a:c6:c2:b4:62:35:8f:95:71:
d5:09:89:d7:72:66:3a:e4:c9:62:ac:e3:71:f9:53:
98:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DF:6A:C2:7F:69:C6:3E:41:2B:16:DE:B9:59:77:A1:D4:1E:5A:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18884CC416F911F1977A08B9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
46:c3:11:cb:94:26:ec:8c:6b:a3:c8:5f:ad:53:c1:01:59:34:
99:cd:09:b2:18:75:04:86:c0:92:c2:5f:04:d9:cc:7b:1e:b1:
ae:67:8e:5d:e8:f0:6b:13:1f:99:10:a0:22:b5:12:99:23:84:
4d:a7:ac:19:e8:a6:bc:45:3a:98:48:5e:d3:29:37:b4:da:cd:
b6:40:36:ba:5b:71:d7:5f:d1:54:4f:af:53:fc:df:a8:24:23:
92:de:72:fc:ed:0a:d3:21:d5:18:a7:77:53:5f:93:28:11:a8:
35:57:17:24:a9:2c:f1:61:51:8e:3d:06:99:b0:c5:d8:1c:c3:
d4:bd:4b:3d:8a:1d:0b:ec:f0:5c:0e:ef:7a:c4:66:42:50:e9:
08:ad:bc:a6:34:65:0b:35:b0:79:0e:07:67:35:c5:73:2e:bd:
6a:c0:4a:7f:75:aa:a9:81:d5:33:20:5c:a9:0d:04:ff:8f:c6:
8e:ff:ac:28:22:b8:dc:1e:c8:24:f6:2d:2d:ef:ca:fa:2f:74:
46:ed:08:aa:db:37:b2:d9:c2:9a:1b:39:ed:a6:57:aa:d0:28:
e9:8e:fa:c5:3f:2c:4e:d2:0d:fd:18:48:67:32:82:2c:f3:5b:
2b:92:f8:f8:89:28:a7:9f:f5:c9:e9:17:86:0f:b3:91:42:7e:
50:88:78:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 14:32:41 2026 by rpki-client