Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23BAFB3C1FA511F19E593CCEDAE4EC9C.roa
File: 23BAFB3C1FA511F19E593CCEDAE4EC9C.roa (raw, json)
Hash identifier: vuhi4dMdvRwRXRYQWOPvO2D4tfPx9kfXu/+EQve4ewY=
Subject key identifier: BE:05:DB:8C:BE:4F:9A:CB:27:72:8B:98:F4:4E:D6:FE:6B:8D:28:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF72
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23BAFB3C1FA511F19E593CCEDAE4EC9C.roa
Signing time: Sat 14 Mar 2026 12:55:56 +0000
ROA not before: Sat 14 Mar 2026 12:55:50 +0000
ROA not after: Mon 04 May 2026 12:55:50 +0000
asID: 63023
IP address blocks: 154.222.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114546 (0x1bf72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 14 12:55:50 2026 GMT
Not After : May 4 12:55:50 2026 GMT
Subject: CN=69b55adc-470d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:18:89:c9:2b:9c:71:7e:17:32:75:81:ad:64:
60:57:b1:e0:d8:4f:51:16:d9:05:ed:e9:51:cb:d3:
cd:08:fb:0d:d4:c2:20:bc:73:a3:5b:56:5c:10:e2:
bf:ad:f0:35:05:f9:8a:df:aa:65:0f:df:de:36:4f:
38:28:13:65:fe:1e:06:64:2f:1a:d5:ec:bc:24:20:
06:d4:d1:cb:6a:41:8b:4b:97:7c:db:3e:67:4d:dc:
a8:17:5c:6c:2c:b0:4a:a2:b1:44:22:d2:8b:5d:fd:
0b:7e:30:3e:ae:31:b7:af:dd:c9:74:97:40:88:a0:
a4:ec:d4:57:d7:19:1b:20:85:bc:76:c2:4f:95:e7:
dc:b4:4d:fd:75:82:d0:2d:07:ff:2e:9e:d9:19:af:
94:a6:11:f2:a2:e6:53:6d:9f:70:f1:b4:4d:3f:84:
4d:1e:da:b8:9d:c9:fd:cd:84:d5:ba:93:f1:96:bc:
a6:20:d5:a1:c1:20:cd:01:4b:34:9b:da:09:dc:92:
b0:50:6c:7c:b7:e4:68:3e:d4:72:39:97:29:4d:d7:
60:69:4a:76:5d:a1:37:1d:cb:f2:57:7a:f1:b0:5c:
fe:96:34:66:7a:de:b8:87:40:89:c5:1f:db:a5:ac:
0e:1a:bf:76:9c:d0:55:78:4e:f4:b7:2e:60:2a:fc:
28:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:05:DB:8C:BE:4F:9A:CB:27:72:8B:98:F4:4E:D6:FE:6B:8D:28:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23BAFB3C1FA511F19E593CCEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.11.0/24
Signature Algorithm: sha256WithRSAEncryption
69:03:61:eb:3d:30:87:46:19:f6:35:53:88:f9:b2:de:5f:8e:
e3:f2:35:1f:d7:f3:8c:61:7a:5e:7c:1b:c1:05:62:2c:0b:ac:
88:44:30:c9:8b:eb:30:9c:e4:00:38:1c:20:39:21:27:10:8a:
d6:4c:ce:0b:0d:7e:cc:7a:c7:25:df:c6:14:81:d4:7f:2a:3c:
5e:e7:ba:df:52:67:df:c6:0b:e8:53:a5:65:17:90:40:c5:3d:
59:bf:28:ba:01:7c:ad:10:80:6d:f1:c0:03:62:59:23:2a:d4:
03:9b:84:c7:dc:b7:42:df:8b:fd:80:e6:29:f5:56:95:c1:5d:
b8:4b:44:02:11:ba:38:33:c8:e6:e5:23:8b:15:ef:44:6e:10:
44:e7:39:03:49:14:20:9d:bd:0d:52:a3:14:d6:8a:a4:e3:26:
db:d1:2f:c6:b9:9c:2a:88:c6:cd:ef:f6:54:b9:31:4f:0f:90:
0e:3d:c8:65:35:66:5f:c4:d8:6b:42:7d:a9:3b:f0:fc:e0:be:
3d:f0:61:d5:64:91:b2:d4:b0:38:d7:2d:b0:fd:86:cd:d6:01:
78:66:d3:e2:3f:97:41:db:f9:f5:52:be:da:bc:0a:14:cf:38:
03:c9:e0:bb:78:bd:10:16:fa:e0:10:23:eb:b1:b2:51:b1:b0:
6b:de:9f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:13:48 2026 by rpki-client