Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32FD99EA17DC11F19D7AF9AADAE4EC9C.roa
File: 32FD99EA17DC11F19D7AF9AADAE4EC9C.roa (raw, json)
Hash identifier: WYHCNpcJ5nUfNZANt3PT+zMOQeLvVIwoQ5MX5I0e+qs=
Subject key identifier: 46:7A:78:5D:D9:CA:ED:D3:19:62:EB:86:4C:0A:B2:38:A1:8B:0F:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BD97
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32FD99EA17DC11F19D7AF9AADAE4EC9C.roa
Signing time: Wed 04 Mar 2026 15:09:54 +0000
ROA not before: Wed 04 Mar 2026 15:09:50 +0000
ROA not after: Mon 16 Mar 2026 15:09:50 +0000
asID: 8796
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Mar 2026 00:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114071 (0x1bd97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 4 15:09:50 2026 GMT
Not After : Mar 16 15:09:50 2026 GMT
Subject: CN=69a84b42-5e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1f:60:62:3b:d0:8a:00:be:26:5f:46:35:32:
2a:66:30:20:c7:f2:6f:6a:d3:63:c8:6c:97:14:47:
88:95:ab:2a:4e:0c:b4:fb:f0:b4:90:3b:14:43:cf:
0a:a4:40:68:81:d0:fa:4e:07:87:0c:32:68:8b:aa:
6c:76:de:48:c0:30:63:0d:3f:69:57:4f:16:aa:20:
71:89:63:b3:67:45:84:dd:57:ce:de:23:7a:bc:37:
57:23:08:fc:7d:fb:de:28:84:51:ab:e0:c7:79:01:
77:ec:18:8d:89:44:9a:26:57:64:d9:55:4b:e6:3d:
0d:57:58:6f:83:cb:6d:d3:a3:63:26:9e:f5:68:85:
23:bf:0b:47:55:78:e4:3b:d0:19:3f:8e:54:24:22:
7a:dc:24:e6:a6:97:23:a7:eb:6e:19:bd:1f:96:a0:
0c:13:ae:cb:8e:55:21:03:66:d5:ee:aa:96:a1:16:
93:16:04:41:65:c2:90:15:2d:42:e4:5c:49:d5:10:
4a:d3:34:e1:de:bc:f5:21:aa:76:03:b5:9c:22:80:
a3:f4:97:00:91:2d:fe:61:78:07:d2:24:c8:36:fe:
ff:9b:66:bb:3b:12:54:2e:fd:9b:5e:9b:51:ff:dd:
93:b7:97:64:79:36:3b:da:62:9b:d0:9d:e8:86:9b:
e4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7A:78:5D:D9:CA:ED:D3:19:62:EB:86:4C:0A:B2:38:A1:8B:0F:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32FD99EA17DC11F19D7AF9AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
0a:ae:0f:92:36:7b:85:ca:c0:44:ab:6b:3b:d8:ac:9e:31:35:
e3:1d:98:d6:44:a1:20:d4:e1:5c:57:c6:74:49:34:cf:e1:a8:
e2:c0:46:95:fb:c1:9d:c7:ba:f8:49:5c:64:a0:f2:63:38:7a:
14:a9:fb:26:d1:e5:f1:5a:c2:6b:cd:1a:e1:65:b2:9b:85:f0:
d9:4e:a3:57:a2:b0:25:af:6d:c3:c8:16:8d:24:bb:d8:96:ee:
2d:29:06:fe:f5:40:2c:bb:66:4e:1a:75:b0:a8:29:c8:d9:7a:
66:b8:84:1a:2a:0a:47:de:4a:d6:6c:ee:dd:9d:7f:a1:41:ff:
d1:4f:d4:5c:02:76:d1:97:86:bb:8b:9a:43:01:8d:2f:ab:af:
97:eb:74:28:17:ac:91:9a:5c:44:2b:3f:e8:29:5b:68:b6:a5:
8f:cd:e5:27:73:69:82:96:33:02:ef:28:e9:59:9c:eb:56:88:
48:9e:21:20:ce:a9:78:db:3b:74:85:1e:ab:c6:8b:3c:07:77:
44:17:97:92:0c:2e:6d:2d:d8:cf:2b:73:ab:58:88:a1:02:89:
65:e0:4b:46:16:3e:ce:17:52:8b:15:e4:94:c5:14:78:60:7d:
30:75:21:a7:44:99:97:41:9c:b7:5a:46:0a:f5:0c:2b:87:02:
d0:d2:f7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 11:07:07 2026 by rpki-client