Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B14D84E236711F1A6DC14C0DAE4EC9C.roa
File: 5B14D84E236711F1A6DC14C0DAE4EC9C.roa (raw, json)
Hash identifier: 78G48+9q6MwwH+HwM73HTvj1ivAIIZi5lvmGdtNr1XE=
Subject key identifier: FA:90:65:9F:08:99:DF:40:87:35:38:11:50:D9:DF:CE:38:02:A0:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BFB7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B14D84E236711F1A6DC14C0DAE4EC9C.roa
Signing time: Thu 19 Mar 2026 07:43:45 +0000
ROA not before: Thu 19 Mar 2026 07:43:39 +0000
ROA not after: Sat 28 Mar 2026 07:43:39 +0000
asID: 23674
IP address blocks: 154.192.0.0/16 maxlen: 24
154.192.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114615 (0x1bfb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 19 07:43:39 2026 GMT
Not After : Mar 28 07:43:39 2026 GMT
Subject: CN=69bba931-76b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ed:22:bf:34:33:e1:7e:b8:23:90:77:06:7b:
95:86:45:9d:43:a3:44:8c:99:de:58:f2:e2:db:3b:
e5:73:bd:46:e4:62:ba:b1:7e:0c:49:b0:2d:0a:bb:
51:97:65:17:02:e2:56:0c:f1:8f:30:b0:a3:f2:ca:
bd:86:08:9a:12:aa:bb:da:bb:b3:ff:c4:6c:99:13:
b4:33:fb:e6:7a:7d:83:42:e0:5b:aa:fc:97:5b:69:
64:66:e0:52:3c:c4:fd:22:3f:09:f1:90:a6:ea:68:
42:01:ac:27:12:24:04:ac:c6:c6:f3:07:5a:e4:d3:
0e:9c:05:03:13:a6:6d:a7:1b:3c:c7:a0:ad:cd:be:
10:80:b9:09:62:62:3b:93:53:7e:74:f8:af:d9:83:
a9:2c:62:f8:ce:a7:76:57:4b:a8:46:1a:2c:65:00:
ff:f2:d9:3c:ce:46:bf:d5:55:34:ca:7a:78:40:ed:
7e:ba:7c:25:57:65:61:55:1f:e5:fd:2d:35:58:97:
fb:19:f2:b8:25:07:22:e9:49:1d:ff:06:33:52:d0:
c3:d5:02:85:33:1a:66:bb:2d:2e:0c:01:0e:00:99:
74:c7:53:f9:65:a8:eb:d4:dc:43:df:77:98:62:e1:
77:d7:4b:bb:36:a9:43:97:c1:fa:51:3d:37:ae:b9:
ce:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:90:65:9F:08:99:DF:40:87:35:38:11:50:D9:DF:CE:38:02:A0:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B14D84E236711F1A6DC14C0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.192.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:4a:c1:bd:d3:b2:67:ef:ab:51:3b:45:0b:cd:93:2f:20:8f:
ca:5b:df:cd:c6:b7:68:62:83:58:22:ce:4b:9c:8d:b9:e0:bd:
b3:9d:3c:9f:ff:45:37:3d:88:de:4a:26:0d:06:9e:46:27:bd:
fe:d0:7c:16:8d:87:b1:90:16:c5:de:3e:7b:5b:ea:96:c2:1d:
ca:87:cf:ec:a0:7d:97:2a:76:8b:07:e6:1d:82:2d:aa:e4:7d:
5e:32:6e:d0:5f:56:ce:15:77:3a:50:1b:20:4d:d8:3f:3d:a1:
78:e9:2b:d9:9c:32:60:a4:4b:33:6e:dc:6c:72:d5:da:8e:20:
fd:53:0f:ff:74:9d:68:ba:b9:bc:dd:4a:3f:20:cb:89:aa:a8:
6e:20:d3:45:61:c9:e1:c4:2a:17:86:a0:3e:ea:46:5a:c9:8c:
2b:57:d1:f3:40:a5:b2:11:d7:4c:07:99:28:54:7b:29:74:7e:
75:6c:5c:3b:05:30:9c:54:c1:8e:bd:05:e9:29:69:00:2d:45:
82:48:2b:17:7f:48:49:0d:5f:ad:4a:99:3b:77:a0:50:b1:5e:
c1:65:be:6a:2d:df:70:9f:ab:08:e5:cf:c1:7e:9d:b7:a7:44:
92:73:0b:7f:11:ba:78:96:09:78:8b:4c:3c:ee:dc:f4:97:96:
68:42:71:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:15:56 2026 by rpki-client