Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D5D1A5E192211F19DDDC08ADAE4EC9C.roa
File: 3D5D1A5E192211F19DDDC08ADAE4EC9C.roa (raw, json)
Hash identifier: o2buRTxGu6eQz6GpKu+/UlTSEiwAbC/0JqNkd4lRBMA=
Subject key identifier: 95:EE:B2:93:B6:E6:18:E1:34:64:5F:A8:F3:A0:28:7E:D1:C0:DE:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BDE3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D5D1A5E192211F19DDDC08ADAE4EC9C.roa
Signing time: Fri 06 Mar 2026 06:03:48 +0000
ROA not before: Fri 06 Mar 2026 06:03:42 +0000
ROA not after: Thu 09 Apr 2026 06:03:42 +0000
asID: 141883
IP address blocks: 154.86.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114147 (0x1bde3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 6 06:03:42 2026 GMT
Not After : Apr 9 06:03:42 2026 GMT
Subject: CN=69aa6e44-2fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7a:07:1c:4d:9b:12:59:7d:bd:4e:a2:ec:e9:
26:9b:bc:98:b3:0c:e7:4e:f2:5e:3f:c8:b0:28:84:
53:c7:f6:e3:6b:a4:6e:db:e6:92:9b:86:ab:4b:04:
1c:ac:6e:7a:78:94:9b:f0:4d:50:79:82:ba:bc:b1:
bd:d9:65:59:b1:84:e6:36:69:ad:4e:8d:b2:76:6c:
9f:13:35:d3:66:f3:04:07:d9:f0:3d:f2:1f:f7:02:
f0:77:89:ee:98:78:f2:fb:18:62:ae:ad:f4:ea:f8:
f9:16:68:0b:ff:cd:23:e3:98:57:36:65:10:e2:bb:
aa:c0:c4:38:3a:69:de:5e:ad:9b:da:c9:b9:16:88:
c8:13:a1:69:d6:16:85:49:d6:b6:d8:4d:7b:36:f2:
aa:1e:7f:c1:5d:cc:61:6a:f0:c4:6c:a9:f7:11:cd:
f1:66:24:2b:2e:71:87:28:1a:23:5f:0a:de:bf:b4:
c3:18:40:9e:b4:a3:29:89:fc:ef:06:3b:80:67:cf:
f1:d4:d3:92:68:4d:8f:3a:81:ea:94:10:67:54:06:
88:86:d5:49:db:40:6a:9c:1f:73:92:ff:fa:3f:52:
8d:6d:e0:50:59:3a:fd:bb:f0:8d:96:ee:70:87:e5:
61:d1:7d:40:3a:1e:db:e1:92:79:92:19:7f:43:21:
8c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EE:B2:93:B6:E6:18:E1:34:64:5F:A8:F3:A0:28:7E:D1:C0:DE:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D5D1A5E192211F19DDDC08ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.0.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:67:32:a1:eb:51:7e:08:30:9c:c6:37:3d:46:76:3e:4d:1d:
06:a0:06:9d:0c:6c:26:9e:a3:59:3c:6c:7d:22:18:60:1d:f1:
2d:0b:7a:81:c7:42:37:23:48:9c:7f:68:a7:29:7c:cc:2a:17:
ff:59:e1:23:1e:d4:70:1c:e1:d6:b2:da:ba:3c:e8:6c:0f:41:
e4:c2:00:d4:40:a4:0c:29:fd:d4:b3:6a:a7:70:6e:f5:55:06:
df:33:01:45:cd:91:77:62:48:1e:58:ea:09:d9:e4:ca:7d:3b:
8d:47:36:b6:0d:5c:f2:ef:65:04:e9:fb:12:03:6e:74:0d:6a:
78:2b:b5:e5:d7:b6:02:68:43:55:59:10:3c:b8:e0:60:27:19:
06:3e:e3:be:e6:79:d9:e4:77:26:ca:a5:92:63:d9:4a:7a:e0:
f4:58:4e:8a:bb:04:1e:21:e7:9a:11:f5:37:73:c8:b1:7c:d9:
51:61:d2:66:8c:87:c4:4c:2a:88:54:da:d6:67:c0:6c:52:f3:
d8:0e:9a:dc:7e:81:a9:18:e7:4b:e4:cc:56:8c:2d:70:ec:ba:
da:9a:dc:19:e4:3d:50:8d:9e:52:67:f3:66:f4:d3:5a:c5:31:
11:42:d9:a2:9c:1f:7d:25:be:06:c2:d8:1a:b3:4f:fc:e4:7d:
d2:14:92:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:15:47 2026 by rpki-client