Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DF8BE521A2411F18F42FEB9DAE4EC9C.roa
File: 3DF8BE521A2411F18F42FEB9DAE4EC9C.roa (raw, json)
Hash identifier: 04nQIheyY4eVUGa36V9TgYggONILGHPlRyUufupXVnU=
Subject key identifier: A6:16:23:DF:52:12:B6:E3:8E:5F:84:DB:CB:2B:8D:04:1E:66:AE:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE3E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DF8BE521A2411F18F42FEB9DAE4EC9C.roa
Signing time: Sat 07 Mar 2026 12:50:39 +0000
ROA not before: Sat 07 Mar 2026 12:50:34 +0000
ROA not after: Wed 08 Apr 2026 12:50:34 +0000
asID: 147176
IP address blocks: 154.197.116.0/24 maxlen: 24
154.197.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 13 Mar 2026 00:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114238 (0x1be3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 7 12:50:34 2026 GMT
Not After : Apr 8 12:50:34 2026 GMT
Subject: CN=69ac1f1e-cb39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:19:e1:51:38:9b:c7:74:f6:5a:a2:fa:61:15:
2e:db:68:be:35:30:1e:d5:0a:06:22:d5:91:8a:6e:
c7:aa:18:8c:de:a0:a7:2e:fe:6f:02:20:9a:c3:ce:
4b:c5:08:2e:90:66:46:77:a1:9d:c8:89:49:cd:43:
26:08:b3:54:de:18:5d:c6:63:c9:77:98:a6:4e:b0:
85:e7:ee:1d:63:0e:0e:9d:22:ff:31:ea:4d:a3:30:
26:9c:e0:65:ea:d1:35:7f:fb:fa:54:59:7a:97:56:
f3:70:85:ea:a9:c0:a1:17:1c:28:9c:e2:4a:b9:17:
9f:b9:47:fc:b2:fe:7b:99:b5:3b:4a:9c:bc:8c:14:
ea:43:32:eb:6c:d3:3b:12:83:55:5b:4d:e5:94:b5:
9e:73:55:89:87:02:74:a7:09:f5:bd:c2:f5:23:7e:
62:be:89:69:d5:3b:62:f9:f6:6e:85:91:73:2f:21:
d1:85:af:b4:46:ab:b0:01:de:e7:33:40:f6:f7:50:
8d:1e:6a:0f:b1:3f:7c:ff:4b:c1:03:7a:f9:df:78:
19:72:50:12:2d:b2:da:06:96:3e:7e:64:21:b9:3e:
0e:68:48:d5:2b:4e:33:ec:d8:6e:60:22:0b:05:28:
fd:61:87:99:ba:e5:be:97:22:84:31:cf:59:c9:e4:
f5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:16:23:DF:52:12:B6:E3:8E:5F:84:DB:CB:2B:8D:04:1E:66:AE:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DF8BE521A2411F18F42FEB9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.116.0/24
154.197.124.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:bc:18:b8:b9:7f:c9:67:23:7c:1d:32:b3:57:8f:f7:65:d1:
14:7d:46:ca:84:17:b5:f4:ea:4c:fa:f2:cd:b0:4d:d4:11:85:
32:2d:33:3a:a6:40:ae:01:a0:25:97:e2:cc:4f:e7:7c:70:40:
dd:80:4d:4c:64:74:6b:31:bb:0c:28:dc:89:b5:80:af:c4:65:
c3:dc:68:4d:af:38:8f:9e:29:f1:60:01:f8:dd:ed:c0:ba:3f:
6d:73:97:b3:e9:c4:1f:75:0f:27:04:65:ed:8b:0b:aa:e5:e2:
cf:78:8b:4d:30:6d:ea:b2:d1:5b:2a:8b:4c:d0:c0:d0:f2:92:
e1:a3:54:c2:f9:67:30:22:a6:d4:e5:dc:ca:db:69:b7:18:a7:
2c:5c:c3:e8:c9:61:5a:81:52:32:98:f4:1d:d1:14:87:da:08:
b5:5c:10:a6:7c:f4:42:07:41:d2:7e:0a:e4:3f:f6:8e:15:52:
bc:e8:66:b0:1b:ca:ea:c6:1b:1c:0e:f1:93:d7:1c:20:9a:f2:
2d:24:f9:37:a3:c2:1b:67:d1:9f:40:27:a2:d8:88:76:0b:d9:
04:63:77:7e:91:1c:81:41:52:ae:a2:d2:17:e6:c1:7c:f6:fb:
c8:92:b5:64:c5:30:0c:f1:c6:c0:68:3e:d9:0c:5a:d5:8f:b6:
45:32:6d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 14:25:46 2026 by rpki-client