Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29B6A8E4171011F188DD0AC4DAE4EC9C.roa
File: 29B6A8E4171011F188DD0AC4DAE4EC9C.roa (raw, json)
Hash identifier: mVbxUewnY+y5g5rhz8HldU+HAj3QFYkeQ5DUI2ZjCrc=
Subject key identifier: AE:38:52:4F:69:92:0C:15:57:8F:CA:5D:16:A3:D4:3C:05:A5:E4:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BD42
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29B6A8E4171011F188DD0AC4DAE4EC9C.roa
Signing time: Tue 03 Mar 2026 14:49:21 +0000
ROA not before: Tue 03 Mar 2026 14:49:17 +0000
ROA not after: Fri 10 Apr 2026 14:49:17 +0000
asID: 141159
IP address blocks: 154.94.224.0/24 maxlen: 24
154.94.225.0/24 maxlen: 24
154.94.228.0/22 maxlen: 24
154.94.228.0/24 maxlen: 24
154.94.229.0/24 maxlen: 24
154.94.230.0/24 maxlen: 24
154.94.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Mar 2026 00:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113986 (0x1bd42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 14:49:17 2026 GMT
Not After : Apr 10 14:49:17 2026 GMT
Subject: CN=69a6f4f1-66e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:b8:db:2b:c6:10:f9:9d:4b:27:62:82:e8:
77:b2:e6:d5:ab:be:72:6d:cf:cf:91:53:6f:35:1f:
0b:07:cd:16:24:0f:be:05:12:a2:18:73:d6:d2:f8:
aa:6c:2f:92:32:f8:93:a1:aa:29:3c:8a:a7:f0:e8:
18:68:b0:c1:23:73:50:a2:8f:ec:ae:9b:b6:82:fa:
ed:c8:7b:fa:f6:d7:66:27:ec:ba:8c:0b:56:06:c6:
33:85:41:c4:35:c8:62:c9:a6:e9:76:e1:88:59:4c:
eb:ce:9d:4e:75:15:83:f7:b4:fb:76:d2:52:0f:1a:
0d:d3:b3:bc:28:49:4d:21:35:4a:08:d5:12:ef:66:
3a:9a:73:cb:5c:8a:a1:3c:35:16:f1:6d:ef:34:69:
f0:53:1c:d4:fb:50:a7:5c:ef:c1:3c:92:4c:ab:f5:
ed:46:2f:c0:4f:36:cc:d2:df:4f:dd:ae:2f:9a:dc:
79:3b:4b:29:a1:6c:68:a0:61:8a:1b:35:73:63:73:
4a:5e:08:49:23:e5:92:a7:4b:0f:99:0e:8f:b1:2b:
45:61:53:76:86:8d:ad:0e:67:0c:d1:d2:af:a4:c9:
da:d1:66:14:0e:83:06:65:a7:ac:8e:1d:54:71:7a:
f0:ea:7c:ea:74:10:6d:83:9c:50:da:ba:ff:ef:b2:
b8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:38:52:4F:69:92:0C:15:57:8F:CA:5D:16:A3:D4:3C:05:A5:E4:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29B6A8E4171011F188DD0AC4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/23
154.94.228.0/22
Signature Algorithm: sha256WithRSAEncryption
75:6e:df:1a:43:02:ca:c5:22:a2:9d:66:06:a1:ad:8d:63:2c:
a0:0d:97:4a:9d:22:b1:a3:6e:b6:c9:02:10:57:ce:88:06:99:
ed:43:33:e6:d3:37:58:9f:dc:c9:1b:23:8e:4c:9f:63:2b:22:
dd:6a:aa:fb:b5:a8:aa:94:89:b8:e2:4a:b1:55:d7:c5:16:67:
2c:a7:a9:f4:89:92:84:c4:d2:48:f3:ea:36:17:4c:58:2f:ef:
49:75:f4:18:fd:a3:51:d6:3b:7e:68:c1:0d:df:42:ec:66:31:
b1:d3:ed:17:b8:7f:93:ce:fb:23:be:1f:e5:30:27:8b:72:a3:
62:e8:74:c0:80:1d:7a:28:17:ed:53:8f:67:6e:5c:a6:d0:f4:
4a:c4:3b:02:1f:75:95:e6:7c:fc:83:55:8d:50:d3:9e:91:1d:
89:96:22:45:a3:d4:87:55:ac:6b:d1:1a:4f:87:3c:e9:0c:c7:
f4:91:f7:58:fc:20:eb:51:e2:c7:e6:2e:b2:34:8f:a2:10:42:
58:6a:12:7d:af:1c:fb:de:91:de:06:21:da:8a:be:2e:1d:5f:
66:04:f6:50:ea:7c:e2:06:0a:27:1e:58:ec:6e:eb:9c:e8:94:
f6:3a:cc:b9:71:10:b9:d8:0e:3d:16:36:8d:ec:69:37:e0:37:
62:b7:2e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 14:25:55 2026 by rpki-client