Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/578000C41EAC11F1BC0006A9DAE4EC9C.roa
File: 578000C41EAC11F1BC0006A9DAE4EC9C.roa (raw, json)
Hash identifier: xfp+3HQ1FP26bIC+FPsjRfMX1tiGvLup/PDoZXjnyyA=
Subject key identifier: 85:E9:5D:16:14:DA:A1:1E:DC:25:8F:1B:06:51:0D:FB:B6:69:11:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF41
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/578000C41EAC11F1BC0006A9DAE4EC9C.roa
Signing time: Fri 13 Mar 2026 07:14:58 +0000
ROA not before: Fri 13 Mar 2026 07:14:52 +0000
ROA not after: Wed 17 Jun 2026 07:14:52 +0000
asID: 142002
IP address blocks: 154.198.160.0/24 maxlen: 24
154.198.161.0/24 maxlen: 24
154.198.162.0/24 maxlen: 24
154.198.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114497 (0x1bf41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 13 07:14:52 2026 GMT
Not After : Jun 17 07:14:52 2026 GMT
Subject: CN=69b3b972-8309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:1e:08:9a:d4:b6:02:9c:20:22:3c:91:75:
15:ad:02:d4:77:cd:c2:52:8c:0e:e4:5f:54:9f:1c:
37:85:23:58:f8:99:b8:ae:97:16:69:2d:23:b3:4c:
f5:21:77:74:f1:e0:d6:ba:bc:cd:d6:28:68:3a:5a:
b3:90:95:31:4b:e2:fc:5b:5c:2f:4c:b3:91:42:00:
5b:ad:34:f2:ef:8b:01:80:45:8a:79:7d:49:45:5a:
e8:ca:cc:31:db:d6:0a:94:4d:78:e6:04:11:1e:d9:
38:58:f9:e9:2e:b8:41:81:9c:aa:94:52:fe:b6:f9:
b6:71:0d:cd:aa:f0:7e:c5:65:c8:c2:d9:1e:3d:2e:
16:21:44:36:2d:86:81:9e:ff:16:c6:e0:1a:0c:c7:
ab:4c:9d:0d:68:5f:23:4a:cd:56:32:11:97:5e:42:
aa:bf:d9:7e:c1:6f:98:2a:08:c2:6f:1b:ce:5a:45:
bc:bb:14:86:5e:25:a0:8d:07:70:21:11:c0:44:c6:
2a:3b:03:25:b6:b0:08:da:26:2f:b4:ed:72:51:e0:
6a:1d:0a:ed:04:55:8f:fb:30:1a:ea:e1:19:ec:15:
58:7e:45:49:18:2e:30:22:1d:34:1b:d0:4a:bc:f8:
eb:c1:3b:c3:cb:f7:a1:49:6d:4a:be:26:52:14:75:
03:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E9:5D:16:14:DA:A1:1E:DC:25:8F:1B:06:51:0D:FB:B6:69:11:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/578000C41EAC11F1BC0006A9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.160.0/22
Signature Algorithm: sha256WithRSAEncryption
86:61:e9:59:78:2b:34:01:55:af:5b:5c:69:d1:fb:93:d4:2b:
58:1f:2a:c5:b3:c7:85:bf:49:29:08:98:53:88:0f:c1:a5:08:
4d:88:72:ac:2f:82:1e:28:e9:84:9c:f5:63:49:6f:6f:0e:0d:
72:89:a4:03:27:cc:26:fa:09:ad:e4:88:8a:f7:87:c0:d9:c9:
98:ff:02:b3:89:a3:c4:bb:25:46:d5:7f:c4:e4:10:b3:11:48:
7e:cb:70:42:6d:c6:3c:25:d4:98:65:d7:10:09:49:42:f2:66:
de:be:3d:c4:eb:03:72:a8:05:2f:79:79:77:58:1d:7e:f3:49:
72:35:a8:25:15:b4:38:55:78:7b:08:30:e4:96:ce:f5:60:3e:
f2:4d:62:f8:a9:d0:a3:89:b8:07:27:75:00:76:f9:3c:17:48:
c9:18:03:40:27:8d:86:89:fa:5b:a0:5d:72:55:e5:1b:c8:5a:
bd:98:df:76:ec:a6:f8:dd:38:2c:d5:26:f4:49:b3:1f:57:17:
b9:17:ff:2c:96:aa:2c:88:be:57:1e:a4:95:83:0c:44:6c:f5:
e6:83:b7:86:a1:e9:a7:66:9f:97:17:fc:7e:b5:7d:25:c5:c0:
93:28:d7:e1:98:56:a8:33:19:2a:24:b3:1f:56:b2:3a:92:a8:
a6:a8:8e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:33 2026 by rpki-client