Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3861F8161EB411F180CE69D5DAE4EC9C.roa
File: 3861F8161EB411F180CE69D5DAE4EC9C.roa (raw, json)
Hash identifier: rH1G0Pm4rEzJ30FRSONvUDMb7uMmSKXPgGExmN3xstA=
Subject key identifier: A0:F1:C3:67:35:A2:42:98:62:1F:EB:2A:C0:F8:26:11:29:97:61:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF49
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3861F8161EB411F180CE69D5DAE4EC9C.roa
Signing time: Fri 13 Mar 2026 08:11:22 +0000
ROA not before: Fri 13 Mar 2026 08:11:17 +0000
ROA not after: Wed 29 Apr 2026 08:11:17 +0000
asID: 214143
IP address blocks: 154.197.60.0/23 maxlen: 24
154.197.86.0/23 maxlen: 24
154.223.248.0/21 maxlen: 24
154.223.248.0/22 maxlen: 24
154.223.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114505 (0x1bf49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 13 08:11:17 2026 GMT
Not After : Apr 29 08:11:17 2026 GMT
Subject: CN=69b3c6aa-554a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8f:4d:e8:6d:1a:76:95:30:38:03:18:9c:e0:
87:e5:95:2b:41:5a:ec:2f:5d:67:bf:ad:ce:75:5e:
6e:a5:b4:ce:bc:11:22:ea:30:0c:4e:f3:47:a1:d4:
a6:be:00:41:dd:0d:08:0a:ab:31:88:22:92:d7:db:
1c:15:89:57:2b:47:2c:94:2e:6a:63:de:a2:f6:bf:
52:e2:9f:e9:30:03:14:b5:41:9d:85:56:f3:7a:b7:
02:2a:ca:5e:ba:5b:8e:96:70:cf:c4:ec:15:c6:12:
f2:2f:25:68:e5:c4:f2:85:97:4b:78:23:4b:9b:35:
c5:57:66:40:b3:97:7b:e1:db:de:6f:ae:ff:26:b7:
a3:24:d3:ef:af:4a:3b:77:bd:84:f8:f3:93:3b:bd:
9e:45:8b:2e:04:7f:51:fe:18:70:31:1a:6b:1c:f9:
42:7a:a4:98:29:d8:a0:b1:0f:41:d3:b0:ad:06:f6:
55:50:1a:64:54:9e:89:19:50:69:9b:00:9d:96:a7:
de:9c:f8:e4:47:af:3f:b5:0c:49:a0:57:ee:48:4d:
9e:75:88:0f:c2:e1:34:be:cc:b5:9d:94:d3:3e:0a:
1e:44:f7:70:27:60:be:f1:d9:ab:b4:cf:1e:6b:61:
7b:73:71:93:e0:bd:89:66:1f:9f:4b:6d:e0:3f:8a:
95:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F1:C3:67:35:A2:42:98:62:1F:EB:2A:C0:F8:26:11:29:97:61:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3861F8161EB411F180CE69D5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.60.0/23
154.197.86.0/23
154.223.248.0/21
Signature Algorithm: sha256WithRSAEncryption
8f:72:85:f1:67:38:b3:6e:69:dd:b4:a1:18:03:27:bf:8b:39:
ad:33:30:03:35:1a:e8:4b:f0:63:b4:c7:02:79:3d:45:14:11:
9f:18:f9:01:c6:50:73:be:50:b0:4f:14:3f:f3:49:f2:3e:95:
e8:3f:c3:01:e7:5c:54:47:ab:2f:88:6e:e8:a0:ca:50:c8:5c:
82:0f:01:88:b4:6e:9f:2c:55:de:aa:f6:d2:77:1c:87:5f:8a:
9e:0b:ce:21:df:fb:59:75:6b:2a:67:1c:4f:b1:e5:5f:09:26:
a2:39:68:1f:92:bd:74:40:d3:35:de:69:b8:6d:67:bb:27:c1:
2a:1a:06:ad:7f:74:d1:3f:8d:ef:83:7a:01:25:1a:f7:7d:3b:
85:43:1d:e6:7d:40:ec:74:95:51:dc:c9:9e:db:09:86:30:1a:
c6:19:a0:5e:81:8b:7c:c3:8e:35:de:57:bc:e1:c7:d0:2c:7a:
62:0a:06:ad:0a:53:3a:f8:cc:55:96:59:db:ae:d0:91:cd:b0:
ea:a6:68:50:ef:43:b4:dd:f0:30:c8:ce:4d:69:1f:cc:08:a9:
1d:08:05:dc:56:94:de:2a:31:23:50:14:2f:73:86:10:ef:bc:
63:37:f7:39:d5:bc:ea:6c:67:2d:80:27:1a:52:ba:4f:5f:6d:
8b:b5:bc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:49 2026 by rpki-client