Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57819F5E17C911F18642EBB9DAE4EC9C.roa
File: 57819F5E17C911F18642EBB9DAE4EC9C.roa (raw, json)
Hash identifier: MVZuxI1PLPsEwHaVhGZ8ZwXF8AxD93iSu0qDjUO2M9U=
Subject key identifier: A9:78:04:A2:BA:F7:96:F8:28:1F:84:05:E8:32:C7:EB:9C:E7:CE:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BD79
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57819F5E17C911F18642EBB9DAE4EC9C.roa
Signing time: Wed 04 Mar 2026 12:54:55 +0000
ROA not before: Wed 04 Mar 2026 12:54:51 +0000
ROA not after: Fri 10 Apr 2026 12:54:51 +0000
asID: 401696
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114041 (0x1bd79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 4 12:54:51 2026 GMT
Not After : Apr 10 12:54:51 2026 GMT
Subject: CN=69a82b9f-07bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:ea:ae:18:53:40:53:85:1e:22:92:19:0a:
f0:b5:13:75:90:ee:05:9e:df:ea:b7:f2:92:db:80:
9d:af:49:9b:97:80:f4:87:1d:a1:b2:8c:86:e7:a9:
ba:50:7e:4f:2e:91:3c:71:02:6a:d3:b0:53:d2:d4:
34:3f:48:5f:e1:ce:77:b1:d2:e9:d8:71:06:86:9c:
59:b2:eb:eb:3f:e8:d8:79:1b:5a:2b:66:be:51:f2:
b9:1c:4f:5a:e1:02:b6:b8:d1:f3:21:fa:ec:77:1d:
92:e2:0a:df:ce:13:11:b7:f2:7e:bc:1e:08:81:3e:
47:e9:39:e5:8f:83:38:c7:f0:02:b1:e5:91:77:e2:
12:93:9d:47:4c:f6:3a:e9:77:f4:19:d3:a4:a7:0a:
c5:0d:e5:e0:10:e1:56:4a:14:de:84:1e:9a:15:c4:
00:f7:ab:4e:d4:25:1f:37:c2:5f:51:39:ba:5b:0b:
08:c3:5d:e1:61:22:4b:a8:04:1b:90:de:b9:cd:77:
3e:50:e9:be:5c:61:3b:e5:f4:bc:fc:b9:7c:dd:d9:
58:88:77:c9:ec:b4:96:9d:85:f7:45:82:a8:c4:b6:
98:cb:a8:c9:23:83:0a:c9:75:e8:d7:71:60:51:28:
f9:ff:f4:31:8d:3e:99:c9:4c:53:1d:14:42:6c:73:
da:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:78:04:A2:BA:F7:96:F8:28:1F:84:05:E8:32:C7:EB:9C:E7:CE:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57819F5E17C911F18642EBB9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
8c:70:95:25:43:b1:81:05:9e:3d:2f:64:a9:eb:3b:00:73:41:
3c:82:1d:e1:75:75:77:62:0e:e5:a6:02:e8:7e:f0:f6:bd:90:
76:e6:56:8e:06:8b:a7:6d:90:3c:0b:f9:ed:ab:6b:2c:ad:8d:
44:bd:3f:7c:58:8b:e2:71:fd:04:bc:b1:0b:88:79:5a:41:c2:
5b:e2:47:80:77:d4:2c:9d:83:ec:85:41:49:bf:f1:f9:10:7f:
c8:ae:54:e8:c3:c0:51:b3:38:31:48:3c:d2:7e:93:66:09:46:
45:c2:95:58:24:bc:9b:84:9e:9b:b3:0b:b6:ec:be:dd:2d:db:
44:ec:b4:21:85:10:aa:44:53:72:16:b0:55:14:64:fc:39:7e:
56:27:57:5a:b2:4c:95:17:49:bb:fd:83:7e:8b:b9:c4:cb:aa:
ba:3c:1c:fa:bf:f4:9e:5e:2c:a6:9a:a9:16:2d:2d:cc:e6:d8:
c3:a3:e7:6c:36:f4:61:36:53:3c:98:6f:ba:55:63:7d:4a:40:
3d:19:e5:c4:3e:a2:c3:17:0d:2e:8c:a3:2f:ae:13:e9:61:6a:
cd:fa:6d:f2:23:cb:c2:70:b5:5c:de:31:8e:74:86:5c:dc:fd:
a6:11:1f:47:97:5b:0b:54:65:10:33:70:bc:52:83:94:3e:50:
d5:d9:46:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:15:56 2026 by rpki-client