Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3934683A17C711F19D66D8ABDAE4EC9C.roa
File: 3934683A17C711F19D66D8ABDAE4EC9C.roa (raw, json)
Hash identifier: rTjZCTAMWXJeh8FQgIpRv7wXA6/EYG7RK6tsJzdn7x0=
Subject key identifier: 56:E7:B5:0D:82:F2:2D:4C:FE:CC:CA:FC:9F:AF:6A:BC:4A:2C:38:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BD73
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3934683A17C711F19D66D8ABDAE4EC9C.roa
Signing time: Wed 04 Mar 2026 12:39:45 +0000
ROA not before: Wed 04 Mar 2026 12:39:41 +0000
ROA not after: Fri 10 Apr 2026 12:39:41 +0000
asID: 8796
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Mar 2026 00:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114035 (0x1bd73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 4 12:39:41 2026 GMT
Not After : Apr 10 12:39:41 2026 GMT
Subject: CN=69a82811-ce1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0c:b3:be:a1:18:15:a0:86:91:3c:12:d0:a4:
1b:9d:e5:39:ea:84:ce:a9:e9:8e:41:42:81:8d:c3:
a8:5b:05:02:22:f7:5d:a0:80:05:43:52:36:40:4e:
1e:8b:f6:e9:07:9e:bc:94:6e:42:c4:17:70:c7:4b:
fb:81:67:4a:e0:7f:0d:98:3f:29:07:f1:29:34:32:
4e:fd:ed:40:97:d3:4e:62:2d:17:fb:69:e3:09:3b:
d9:13:82:ff:d5:10:c8:52:6b:04:d9:c0:5b:70:ed:
7f:5b:3a:09:ce:d6:fc:c4:2c:db:63:df:73:22:60:
45:a8:13:e5:3d:df:5a:5e:15:c8:99:a3:9f:6b:19:
aa:a4:99:e4:a5:6e:99:10:04:c5:68:98:93:8b:0c:
74:35:1d:1d:84:3f:24:36:2e:a7:6e:56:c4:67:62:
a8:2c:13:ce:10:53:85:2b:4e:67:24:6a:e1:9f:48:
54:40:0e:6e:c1:56:71:23:aa:bd:a0:ec:1a:6c:97:
10:66:52:0e:57:bd:98:20:83:85:bf:94:5f:69:1b:
4c:e4:b8:bd:f9:13:21:29:19:10:e2:be:7b:0a:f5:
89:cf:d4:8d:d3:a8:4e:61:b3:84:ea:3e:3e:5b:cd:
0e:aa:10:d2:90:d1:91:5e:94:33:02:d9:ac:1d:4b:
83:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E7:B5:0D:82:F2:2D:4C:FE:CC:CA:FC:9F:AF:6A:BC:4A:2C:38:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3934683A17C711F19D66D8ABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
04:87:13:a9:0c:85:b5:fc:0b:da:8b:c9:f2:2a:a0:a3:64:6d:
71:2d:30:73:aa:6f:eb:02:83:ac:2c:0f:9b:bb:ff:36:e8:c4:
fa:be:1c:6e:06:85:d1:24:8e:5e:94:7a:e1:ac:b4:12:f2:d3:
ca:60:cc:f7:33:31:45:8c:4b:17:3b:42:d5:41:e5:ed:88:ee:
6e:8b:0d:62:73:0b:90:2d:ae:c6:00:07:fd:84:bc:72:a4:fe:
dc:16:f1:21:71:55:2d:3b:81:ee:5b:80:d4:71:d2:9a:68:71:
b3:4b:b9:47:9e:88:6b:57:02:d5:87:f8:02:06:04:43:43:ec:
38:19:f4:2c:d2:56:84:4a:e9:e7:c9:4a:b4:37:de:ee:d4:b2:
ce:09:a3:94:c7:02:a3:fb:b1:47:86:38:e7:9c:af:42:07:a6:
e2:8b:f2:8c:44:c7:38:d0:fb:26:fe:d4:0f:0e:c2:4f:56:01:
cf:bb:ba:31:30:90:31:64:ca:b4:16:14:66:66:5a:c3:5f:e6:
89:db:3f:b5:bb:60:40:8c:8e:82:f0:53:4e:9f:ed:e2:12:f5:
d1:be:46:5b:82:35:67:c5:fd:f3:c1:f3:85:2c:8a:6d:0b:b0:
a7:e6:b2:16:c2:d2:fb:4d:d4:95:4c:50:19:6d:6b:6a:38:71:
24:39:27:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 11:07:05 2026 by rpki-client