Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4282A46C1AB311F1972078B0DAE4EC9C.roa
File: 4282A46C1AB311F1972078B0DAE4EC9C.roa (raw, json)
Hash identifier: sTkDVm7yWL3XqpINALzx3TA/QbbKgBZX8LV1WfxI5vc=
Subject key identifier: 1F:F6:13:5E:3D:02:A4:5A:D1:A6:85:3A:9D:B6:42:C0:49:09:5F:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE47
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4282A46C1AB311F1972078B0DAE4EC9C.roa
Signing time: Sun 08 Mar 2026 05:54:25 +0000
ROA not before: Sun 08 Mar 2026 05:54:20 +0000
ROA not after: Thu 28 May 2026 05:54:20 +0000
asID: 142032
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Mar 2026 00:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114247 (0x1be47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 8 05:54:20 2026 GMT
Not After : May 28 05:54:20 2026 GMT
Subject: CN=69ad0f11-2247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4a:c3:28:67:f4:ab:19:eb:76:ae:90:0c:c3:
28:25:6c:25:76:44:10:5e:79:0b:e7:80:1b:29:ae:
bb:b3:d0:8f:a1:22:fc:d6:97:17:cc:23:f0:a3:d1:
24:6c:48:2f:70:a3:f3:9d:28:21:91:22:53:9f:be:
4a:00:fe:6a:25:a6:62:0e:36:93:cb:d9:17:eb:7a:
b5:22:b7:da:12:2c:9d:e2:c6:1d:55:b5:a2:f1:59:
37:4b:38:90:6d:3c:b1:3d:3a:7c:2f:8b:bb:86:48:
43:e6:e0:62:f0:e2:17:f3:9f:c3:26:4c:35:b0:af:
b5:ff:fa:2b:02:dc:12:83:2b:ed:c4:45:53:06:41:
78:a7:23:6a:08:4a:a4:14:c3:95:06:61:99:59:3a:
f7:2d:eb:2e:40:01:db:c1:22:0f:73:48:7b:b1:da:
9b:7f:7a:8f:1a:f2:99:67:7f:44:bd:0e:1f:7a:bd:
ea:89:6e:c1:eb:fd:e3:e3:a7:ce:42:78:19:ad:e8:
14:db:73:46:1e:a9:53:47:bc:e6:ff:8f:f7:ca:cd:
71:07:40:7c:e5:9f:e6:9d:f6:c4:8c:cc:58:87:9d:
b6:c4:51:2d:8b:79:7a:32:f4:bd:63:23:52:a4:52:
f1:75:7f:d8:75:87:8b:b5:79:40:94:45:41:76:6d:
fc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F6:13:5E:3D:02:A4:5A:D1:A6:85:3A:9D:B6:42:C0:49:09:5F:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4282A46C1AB311F1972078B0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
c9:57:59:88:81:c8:74:8c:af:bb:de:2a:50:9b:a8:34:61:b7:
e9:76:33:84:be:69:40:91:f0:81:0c:be:fc:d6:1d:c3:0b:e2:
26:03:63:b1:c3:0d:9a:e4:e0:d4:ea:cc:f6:08:5b:ec:d1:cc:
3a:6e:01:28:a5:65:3d:c7:49:ae:59:2c:29:c9:3c:82:9b:18:
69:77:5c:bb:41:22:c3:37:b6:7f:66:03:7e:03:2f:73:e9:ac:
3c:a7:05:41:1f:83:93:a8:70:bb:3c:af:6a:50:9b:38:1c:58:
ed:4f:25:44:ae:d2:fa:5c:92:7f:03:68:da:6e:63:b0:d7:3a:
76:f4:13:54:e3:a1:3c:b5:2c:17:4b:ee:2b:56:38:de:55:ad:
80:31:2d:bc:b3:ba:92:f2:2c:79:f0:8a:d3:b4:58:26:6e:0e:
ab:f0:00:fc:34:aa:d4:33:2d:64:ae:0e:51:5f:ea:3c:ea:ed:
b9:e7:b2:46:3e:6e:f8:82:48:d6:7e:0a:7f:16:33:f7:ea:15:
23:6f:1a:49:e1:93:8e:ba:40:73:d1:98:30:4b:41:0a:0c:ce:
a7:2f:59:e3:81:5b:93:d0:4c:55:b6:97:27:b9:62:30:74:1b:
57:f7:84:ac:e0:4c:91:87:6e:08:0a:c2:8e:2a:d1:2a:73:a4:
8d:e4:f8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 12:02:15 2026 by rpki-client