Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3805BA3A21E611F194AAB0F4DAE4EC9C.roa
File: 3805BA3A21E611F194AAB0F4DAE4EC9C.roa (raw, json)
Hash identifier: v4v22eIYtC4RrIA5rhH39tr1ajjT3hZBgFT01TfkOcs=
Subject key identifier: F3:02:1F:11:FE:FB:E1:66:0A:4B:1C:7C:19:38:53:D3:AD:D4:CC:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF99
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3805BA3A21E611F194AAB0F4DAE4EC9C.roa
Signing time: Tue 17 Mar 2026 09:46:50 +0000
ROA not before: Tue 17 Mar 2026 09:46:44 +0000
ROA not after: Thu 23 Apr 2026 09:46:44 +0000
asID: 200758
IP address blocks: 154.222.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114585 (0x1bf99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 17 09:46:44 2026 GMT
Not After : Apr 23 09:46:44 2026 GMT
Subject: CN=69b92309-d953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2f:76:5f:f7:51:ce:1d:dc:37:d3:1b:c2:eb:
5f:aa:12:42:4b:a5:fa:d0:f7:00:a6:95:88:44:6a:
3f:91:ae:08:27:4e:38:d3:07:eb:87:6b:35:69:ec:
81:fc:aa:23:f5:c4:85:be:28:8f:0f:f2:a7:a3:ae:
26:6e:01:01:28:ad:57:0c:77:ba:55:7c:2e:26:01:
41:5d:19:80:74:a5:de:61:34:df:20:26:62:a9:4b:
5a:7b:fc:61:0b:af:76:dc:fd:70:5a:d2:5a:52:29:
22:f7:8c:2c:5e:7a:32:01:db:7d:55:a2:77:ad:14:
b7:65:bd:48:00:88:2e:8b:1f:3a:bb:da:a4:72:cb:
43:51:ef:3e:44:6b:1d:99:1e:f9:cf:da:9e:94:e3:
63:b4:49:3e:95:74:4c:0e:19:9e:e3:9b:e4:6a:37:
a2:4a:cc:5a:71:92:c9:03:9c:89:f6:c3:67:b4:d8:
c1:4d:80:df:d2:3b:13:0e:0e:37:87:25:6c:88:34:
83:0a:ca:55:47:b9:fe:c7:58:dd:a1:c4:ff:0f:14:
26:8c:b6:6f:2d:c4:e1:20:41:42:0a:c8:9e:80:c1:
d9:15:76:d9:dc:34:27:41:62:ff:a4:77:da:7c:23:
1e:c2:4c:34:ea:4e:38:b5:f0:b1:02:14:37:b0:98:
2f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:02:1F:11:FE:FB:E1:66:0A:4B:1C:7C:19:38:53:D3:AD:D4:CC:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3805BA3A21E611F194AAB0F4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.8.0/24
Signature Algorithm: sha256WithRSAEncryption
55:04:8b:20:1d:6b:b6:52:99:46:1d:06:bb:ba:5f:e2:7d:cd:
9d:83:51:d6:06:8c:6d:bc:44:05:fb:1d:0d:84:3b:f1:e5:90:
d7:3a:a4:02:d7:d5:8a:f2:f4:41:f2:42:d0:22:80:b0:e8:93:
e6:82:a5:c2:b2:e1:4b:c0:23:c1:d0:33:fc:91:6d:a7:0f:0d:
5c:1b:d5:9e:68:46:cb:4c:ef:e1:d7:a0:e0:6f:90:6e:8b:ef:
eb:ba:cb:1b:5e:da:1b:1c:b4:84:0b:90:14:09:21:19:db:fc:
23:0f:c8:df:95:88:bc:44:41:18:6c:67:76:8c:50:5d:64:f2:
8a:2d:f4:78:fa:00:60:96:36:00:3a:63:d5:9c:b1:42:34:04:
b9:19:1c:99:f7:db:94:88:73:02:9c:96:06:bc:d2:f8:64:94:
8d:8b:26:6c:7e:63:45:40:22:18:a3:30:5e:d9:a6:68:86:3a:
e7:06:85:81:8f:1c:61:3e:3a:63:a0:1f:46:65:2b:e8:6e:68:
3e:fa:01:33:02:b7:d9:4f:bf:84:b5:67:b3:ba:d0:75:2d:31:
d5:1f:f5:a6:5e:60:71:59:fb:79:98:73:fa:ca:01:4d:5c:c0:
d4:eb:fd:bb:48:ea:07:b5:7f:9e:ac:f0:b9:d9:08:20:1a:f3:
7f:f4:35:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:19:14 2026 by rpki-client