Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56E96AD623A411F18823409DDAE4EC9C.roa
File: 56E96AD623A411F18823409DDAE4EC9C.roa (raw, json)
Hash identifier: MnbOHFvvUbbE0oKomFFLz+p43xkbZ/36GMyYkTRUyxU=
Subject key identifier: 49:C3:22:9B:03:BD:DF:A4:8F:01:12:B7:E9:25:AF:6C:FC:87:EF:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BFEB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56E96AD623A411F18823409DDAE4EC9C.roa
Signing time: Thu 19 Mar 2026 15:00:17 +0000
ROA not before: Thu 19 Mar 2026 15:00:12 +0000
ROA not after: Sun 19 Apr 2026 15:00:12 +0000
asID: 49581
IP address blocks: 154.83.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114667 (0x1bfeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 19 15:00:12 2026 GMT
Not After : Apr 19 15:00:12 2026 GMT
Subject: CN=69bc0f81-59b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:47:ea:76:5f:7a:fa:ff:6e:78:5b:59:9e:b8:
72:3f:30:60:4f:2b:d4:1b:c0:56:c8:0b:f3:ea:c9:
a9:89:c5:c9:ea:bf:88:6b:7d:9a:9d:2b:ab:8e:3c:
c9:f5:71:92:d5:17:c5:e1:e4:d7:41:15:ad:2f:80:
25:3a:00:58:62:d6:9e:b7:06:98:ea:df:34:15:87:
a7:ef:29:60:11:cb:ad:40:c3:0b:00:1f:71:8b:bf:
99:8c:9a:f5:73:ab:50:a5:b8:66:0e:30:eb:ca:9f:
04:44:a5:a8:cc:ff:16:64:79:02:7a:e3:85:0c:74:
f9:70:e4:c2:2d:05:8f:50:3e:c8:7c:17:9a:9c:1e:
7b:06:7a:39:aa:5b:0a:c8:35:df:99:9d:04:31:8c:
07:96:6b:c9:b3:9e:c6:d9:77:13:8d:2c:ca:14:8c:
43:17:d6:6d:e2:2a:68:0a:7b:09:7f:4b:bb:6d:35:
8c:df:a4:0f:18:95:6d:27:05:09:58:11:31:66:17:
19:e6:fb:f3:3f:fc:02:88:3a:aa:3b:20:cb:d3:52:
6b:40:55:8a:9a:d7:6a:18:17:89:79:03:a0:e4:4e:
4a:2b:9b:93:6b:2c:2b:86:81:fa:a2:47:51:6f:c6:
16:16:59:6e:6d:22:24:83:60:0a:88:fd:8d:13:00:
9f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C3:22:9B:03:BD:DF:A4:8F:01:12:B7:E9:25:AF:6C:FC:87:EF:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56E96AD623A411F18823409DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.129.0/24
Signature Algorithm: sha256WithRSAEncryption
64:1b:a4:24:01:f0:a2:6b:4b:ff:33:0e:a8:35:91:23:ef:5e:
59:f3:51:07:24:89:5c:e6:87:5e:68:ff:a8:3d:43:a6:2d:b8:
be:f5:21:e3:8f:68:b3:0b:d9:3c:70:7d:90:0c:b7:bf:51:7b:
72:c3:c3:db:e8:3b:f9:c0:80:83:dd:57:1d:ce:23:2f:7d:ee:
4c:b9:e2:28:f6:b4:43:cc:b7:d0:d1:8e:fe:df:10:94:7f:dd:
72:84:d5:69:a5:98:fd:6f:20:65:33:f3:5f:89:b7:05:46:13:
af:61:34:2e:ce:7c:59:75:32:41:92:39:d7:34:24:20:23:b2:
36:eb:58:c7:f8:b7:a4:3e:fb:60:8f:8c:88:cc:bd:48:8a:51:
64:a6:ee:51:e8:8c:75:dc:54:b3:7f:3c:c6:1f:04:8d:28:8d:
74:71:2c:31:34:93:78:d7:1e:73:e9:0f:87:07:d6:43:a9:27:
6c:6a:d9:5d:26:97:97:54:83:44:4b:70:cb:6c:5a:d8:4c:09:
30:c2:42:1e:3f:01:ca:9d:cc:e6:c1:c3:9f:80:36:eb:7f:23:
22:b9:52:23:0e:64:1d:07:3a:9f:d4:59:0a:8f:48:00:e3:95:
42:69:0d:b8:23:6c:0d:a3:f4:8a:3e:32:a1:57:5d:9e:83:9a:
14:78:38:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:15:55 2026 by rpki-client