Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26D32DD026A311F1B7469093DAE4EC9C.roa
File: 26D32DD026A311F1B7469093DAE4EC9C.roa (raw, json)
Hash identifier: DMgSWwJkHiogTsk1epYUdiUelWUIYvcFdXwV+EDh7AY=
Subject key identifier: EF:14:B4:34:39:95:E6:84:94:36:6B:98:C3:D2:B2:7F:83:FB:0C:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C06B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26D32DD026A311F1B7469093DAE4EC9C.roa
Signing time: Mon 23 Mar 2026 10:29:20 +0000
ROA not before: Mon 23 Mar 2026 10:29:15 +0000
ROA not after: Thu 02 Apr 2026 10:29:15 +0000
asID: 9304
IP address blocks: 154.196.134.0/24 maxlen: 24
154.200.1.0/24 maxlen: 24
154.200.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114795 (0x1c06b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 23 10:29:15 2026 GMT
Not After : Apr 2 10:29:15 2026 GMT
Subject: CN=69c11600-2617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a4:c7:77:1c:ef:e0:41:31:de:ed:5c:33:f3:
14:44:6c:0d:4b:76:38:66:97:93:10:03:6e:24:15:
fb:7b:e3:98:5c:87:7d:d4:12:e1:6f:a4:e4:89:ca:
e9:16:9c:18:b1:3f:c5:d4:14:15:e2:9c:6c:f6:b7:
22:44:d4:79:5b:67:37:2f:ac:39:72:72:3b:2b:00:
54:58:53:3d:07:81:05:94:c9:13:25:99:f6:33:19:
98:11:8d:be:fd:7a:1e:d8:37:16:de:38:5d:60:d6:
a3:73:ff:c9:dc:33:c6:3c:b7:20:5e:a4:ef:fa:6a:
ca:41:6c:de:1e:cd:44:4f:27:82:a1:33:d3:62:99:
19:95:08:a3:aa:c2:c9:e0:d0:26:94:46:6f:7f:76:
af:6a:b9:f5:5b:97:a5:0b:9a:d3:f3:96:0b:9d:26:
62:f6:67:67:45:7c:6d:9e:c9:9d:30:0c:50:56:f5:
a6:31:8a:3d:b6:22:0a:ae:e1:22:67:59:e0:c1:80:
d1:96:e8:7a:d8:14:d5:31:25:80:00:fe:d8:f2:2e:
c4:11:f2:38:19:e7:89:c8:5a:81:9f:5f:e0:b6:97:
4d:65:98:10:0a:70:88:14:c1:07:5a:71:14:be:07:
0e:89:61:83:9a:c4:ba:cc:df:26:44:27:74:77:20:
1a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:14:B4:34:39:95:E6:84:94:36:6B:98:C3:D2:B2:7F:83:FB:0C:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26D32DD026A311F1B7469093DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.134.0/24
154.200.1.0/24
154.200.37.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:9b:42:1c:a1:cb:4e:1d:d8:7c:ec:2f:fe:aa:c5:f3:ec:78:
37:60:4c:cc:76:6a:29:0f:e7:6e:1f:a6:2d:68:84:6f:b8:d3:
8c:87:a7:fc:13:a0:dd:c9:17:59:d5:3b:dc:9d:98:72:5f:a6:
c6:9b:3f:12:7d:73:4d:12:42:ed:64:6d:27:56:44:b7:41:19:
7e:2d:2a:4c:43:4d:fa:04:3c:3f:7d:d3:f3:da:06:f1:aa:0b:
d5:bc:1b:74:a5:b3:83:d1:43:55:d5:a5:fd:9c:c6:f0:e9:f3:
f6:7e:28:ea:a4:c6:f1:cc:8f:c4:f7:b9:e7:01:af:14:84:b8:
9d:b4:41:b6:93:d8:00:2c:5c:cf:32:b9:14:32:ea:7c:d6:c5:
59:f6:25:37:bd:c3:b2:e7:3c:40:c7:f6:0d:29:5b:64:91:8a:
17:f8:89:b9:90:c6:29:dd:7b:22:19:17:07:c0:b8:1e:ce:42:
c1:c1:aa:62:2f:2e:71:bc:0e:1d:c4:e9:7c:3e:08:7b:94:9d:
28:2d:32:bb:f8:41:0e:c7:b7:de:1f:ab:0b:11:9f:35:4e:c1:
9d:c0:0b:d5:ed:03:fe:59:ba:9f:95:88:a3:93:fb:e7:c0:f2:
22:21:28:31:e7:1f:a0:19:86:20:06:d6:8a:e8:3d:42:b0:de:
e0:28:ad:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:16:07 2026 by rpki-client