Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28C64C2217C511F1A17F36A1DAE4EC9C.roa
File: 28C64C2217C511F1A17F36A1DAE4EC9C.roa (raw, json)
Hash identifier: ntXPJHVXCF6B5BUk1BFBmwImfX6rVZtONBenh/OrmqQ=
Subject key identifier: 61:63:0E:33:DE:CD:CF:7F:84:92:FE:3B:23:D0:94:61:D6:A7:27:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BD71
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28C64C2217C511F1A17F36A1DAE4EC9C.roa
Signing time: Wed 04 Mar 2026 12:24:58 +0000
ROA not before: Wed 04 Mar 2026 12:24:55 +0000
ROA not after: Fri 10 Apr 2026 12:24:55 +0000
asID: 137899
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114033 (0x1bd71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 4 12:24:55 2026 GMT
Not After : Apr 10 12:24:55 2026 GMT
Subject: CN=69a8249a-580b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:5d:50:ea:66:a1:2f:13:4e:5d:4e:91:72:
aa:5a:5d:86:84:04:47:14:e9:0c:c1:5b:fa:59:9a:
28:9c:c6:af:39:3c:0f:2c:89:90:56:15:7c:0d:04:
58:af:40:19:c3:16:b8:77:44:5f:04:dc:62:9f:97:
5b:cd:ee:37:74:08:d2:f4:80:a1:af:29:30:16:69:
b8:f3:42:a9:fc:f1:fe:7a:b8:fa:72:ec:24:ea:6f:
12:f9:a7:c3:4b:e3:83:60:77:36:33:15:a3:3f:33:
a1:32:d1:56:fc:8a:db:16:1f:17:85:34:28:b9:15:
85:7a:62:15:4b:c6:1a:99:dd:8b:91:90:e1:a7:9f:
12:7c:3a:b7:65:d5:3c:87:5e:c0:09:97:ff:44:0f:
c6:09:06:42:97:f8:8c:28:a1:17:50:e2:32:21:11:
07:5a:10:f9:b2:72:06:5e:30:19:17:db:ce:1a:31:
6d:8e:00:2f:ea:9b:97:bd:1d:97:fa:5a:80:9e:b9:
54:19:1d:24:18:0e:9b:59:b1:32:ac:3d:76:a9:e4:
33:6e:95:09:85:37:2c:04:21:65:64:ae:b8:10:68:
48:a6:c6:a7:e7:86:6e:e9:7b:c9:c7:43:05:8c:ab:
d1:96:f7:f3:71:ed:e9:e5:3e:fa:4c:3d:ae:98:42:
f6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:63:0E:33:DE:CD:CF:7F:84:92:FE:3B:23:D0:94:61:D6:A7:27:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28C64C2217C511F1A17F36A1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
57:87:ad:6b:1c:0e:f4:10:d4:df:c6:1c:8f:24:ee:a8:40:99:
95:24:50:73:72:05:4b:b9:0b:0f:19:0a:ff:b1:07:c1:d6:a3:
d4:e8:99:41:28:a5:ef:43:61:e8:68:5e:75:84:65:52:07:eb:
0d:71:c9:47:36:13:ea:dc:de:68:aa:3f:9d:32:18:90:32:c3:
d6:4c:11:b2:39:41:55:6f:95:d0:20:5a:f9:d9:69:fa:8e:21:
ab:34:cd:33:61:51:6f:6f:75:39:0f:07:34:44:9b:65:37:74:
c9:69:11:88:7f:21:3b:c8:38:40:fd:2d:8b:f4:50:fc:58:a5:
c6:de:86:3b:3a:e3:42:43:a9:e5:b5:7c:d0:15:6a:d3:71:82:
c8:bc:88:42:ae:f5:73:4d:b6:05:99:ed:72:d9:67:4a:4c:84:
ec:e1:2b:9a:8e:9f:b7:ee:4d:55:6a:d3:e1:b2:bf:34:9c:8a:
43:c4:1c:cb:6e:ad:38:9b:ef:ce:10:8d:19:a3:af:ee:cc:c3:
35:0e:eb:c0:a1:d2:b8:9e:df:cc:df:bf:d4:26:4c:93:d5:4a:
d8:97:58:b1:18:57:9c:60:ab:bc:8b:65:c7:63:38:7d:bf:7f:
bf:a3:3f:a5:27:1d:53:ad:0e:04:67:c5:90:24:ba:20:b0:2f:
c7:09:9b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:23 2026 by rpki-client