Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39FACD0C17D311F1BCBFF9F4DAE4EC9C.roa
File: 39FACD0C17D311F1BCBFF9F4DAE4EC9C.roa (raw, json)
Hash identifier: 0q9dO7I5jO33cLMRc8RQHPYw6b82OaqUPmh7LAoZnOA=
Subject key identifier: 53:5C:22:A0:CF:63:A7:53:E3:A5:9D:72:87:03:75:83:46:5C:02:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BD87
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39FACD0C17D311F1BCBFF9F4DAE4EC9C.roa
Signing time: Wed 04 Mar 2026 14:05:40 +0000
ROA not before: Wed 04 Mar 2026 14:05:35 +0000
ROA not after: Sun 14 Jun 2026 14:05:35 +0000
asID: 211826
IP address blocks: 154.197.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114055 (0x1bd87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 4 14:05:35 2026 GMT
Not After : Jun 14 14:05:35 2026 GMT
Subject: CN=69a83c34-6c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a3:25:bf:7a:ae:67:56:94:dd:d2:cb:a9:5a:
40:e4:f9:30:19:a2:97:46:ff:c8:48:56:80:fb:ad:
30:37:3a:84:f5:1f:80:3d:e2:28:1e:2f:6f:95:1b:
3d:a3:c1:b2:10:49:02:91:9d:46:6e:6f:04:1f:91:
0e:f4:dc:c1:ad:cf:b3:dc:9b:3c:bb:ed:14:88:1f:
f0:1a:1f:55:96:26:df:d9:2f:fd:22:ac:b6:97:41:
d8:34:ec:ab:8b:35:0f:97:5a:b6:70:70:76:6f:45:
5c:e2:49:16:e9:da:62:18:8c:fd:05:77:7b:2c:d4:
7b:24:9e:3f:7b:37:9c:53:fd:dd:04:ad:fa:78:0d:
3e:4a:88:07:4b:f8:bb:49:48:c5:68:b3:fe:1c:2b:
c0:7c:61:76:9f:82:c2:5d:30:aa:72:54:bd:88:4f:
15:4d:9a:69:85:27:56:68:f5:8c:ff:65:c4:e3:aa:
97:d1:09:70:3c:63:a0:d9:77:c4:64:4f:f7:55:3f:
d8:1e:4d:ee:fb:16:ae:d0:88:4b:8d:65:98:70:19:
0d:3f:c7:e3:4f:92:41:64:d0:e0:5d:cb:23:3c:69:
c5:df:fd:c4:3a:5e:9f:80:0a:7e:0e:00:d4:b7:f3:
7e:c5:ed:60:de:92:e1:07:b0:42:d4:dd:e8:83:a1:
4b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5C:22:A0:CF:63:A7:53:E3:A5:9D:72:87:03:75:83:46:5C:02:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39FACD0C17D311F1BCBFF9F4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.91.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:e8:a2:d4:7e:2d:fd:58:e0:4f:be:dc:b5:bc:83:e0:84:06:
8b:7b:d7:3e:72:ac:16:56:d9:25:f7:9e:d6:19:c8:e7:f1:e5:
43:8e:b0:53:7b:e1:5f:39:f7:7e:c7:cc:5e:2f:cf:e9:45:d2:
44:8b:b4:c7:a5:7d:d6:4d:d7:6e:a8:17:72:b0:69:cf:0b:c1:
e9:54:64:7b:43:26:07:31:3c:af:eb:f8:6a:5a:6a:15:36:15:
01:2a:c8:11:4a:01:ba:d6:b7:5b:f4:55:4d:d0:5b:c4:d3:0c:
e8:2b:1a:8f:91:c9:47:46:e9:5d:a7:39:8f:0f:8a:41:72:90:
95:fa:79:44:c2:df:8d:cf:dc:d1:79:e0:11:fe:2a:a1:dc:6f:
c8:c6:52:7e:e7:47:cd:dc:aa:e9:87:23:a3:af:99:a5:fe:59:
ee:61:18:66:57:2d:b6:4a:1e:6e:26:b7:fc:c3:58:c3:3c:f0:
7a:fa:22:57:18:3a:a5:a9:3d:1d:63:0d:59:eb:be:9d:87:a5:
c5:55:4f:03:9c:78:61:fd:34:07:5f:87:b8:2e:0b:d3:ca:92:
c6:91:88:58:99:7b:87:b4:02:e5:dd:bb:1b:02:36:dd:7d:db:
2f:11:0b:1c:2e:5a:43:25:49:c7:4b:16:cc:74:b0:f6:92:56:
7e:e9:ff:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:17:17 2026 by rpki-client