Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65A78BAA205911F19EEF47EBDAE4EC9C.roa
File: 65A78BAA205911F19EEF47EBDAE4EC9C.roa (raw, json)
Hash identifier: eP5OnuSh57owiUsYoA23jN1O4/WJ0o/Jf13KopuddaQ=
Subject key identifier: 9A:05:7A:BD:86:12:76:30:B2:9F:06:3A:CB:30:27:FD:63:30:94:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF7B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65A78BAA205911F19EEF47EBDAE4EC9C.roa
Signing time: Sun 15 Mar 2026 10:26:15 +0000
ROA not before: Sun 15 Mar 2026 10:26:11 +0000
ROA not after: Wed 08 Apr 2026 10:26:11 +0000
asID: 397423
IP address blocks: 154.202.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114555 (0x1bf7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 15 10:26:11 2026 GMT
Not After : Apr 8 10:26:11 2026 GMT
Subject: CN=69b68947-6c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:29:bc:9e:07:14:86:84:8a:e3:12:a5:28:58:
a9:35:45:e5:df:7f:b0:7a:2b:75:42:2c:b8:b5:94:
d6:41:3b:d5:c6:06:ae:52:9c:75:f7:4a:8e:25:66:
cb:b5:d4:57:9a:96:9c:8a:31:e3:c6:6b:9c:60:5e:
29:05:15:2e:c4:4f:fc:f1:c5:99:a7:dd:04:57:98:
50:0c:20:04:b7:77:2a:0a:fc:35:e7:11:ce:17:04:
a4:db:40:20:6c:f3:de:93:57:95:a3:9f:36:34:ac:
fd:bf:17:cb:5f:e5:48:2d:93:2b:7d:a8:92:ba:40:
8b:f3:82:c3:a4:1b:a6:1e:b6:fa:06:64:28:28:b6:
08:39:b5:d5:2d:79:2f:e9:bf:d3:8a:e9:8c:32:01:
da:3d:2a:ab:ae:6c:4b:d0:75:ea:ea:7a:a0:b4:ab:
39:5d:f5:c3:d3:54:69:51:71:c2:d1:86:44:9e:33:
28:42:d3:23:ae:e1:ab:aa:b4:f9:a2:50:77:eb:3e:
b4:cc:5a:19:3b:8e:0f:9a:72:87:8f:3e:0c:07:dd:
5a:96:23:d2:99:5a:4c:78:71:fb:78:c4:e7:04:69:
44:86:6d:bb:cd:61:a3:d0:01:24:bd:a9:5a:28:f4:
37:5e:89:95:a8:79:fa:b7:bc:e1:f7:b9:a3:03:d2:
d2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:05:7A:BD:86:12:76:30:B2:9F:06:3A:CB:30:27:FD:63:30:94:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65A78BAA205911F19EEF47EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.3.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:5b:4f:20:d1:d7:2f:a7:66:69:cc:97:d9:35:ac:1f:0e:03:
93:f9:51:83:e1:ce:0e:5c:7b:f6:22:b8:41:e3:28:27:b5:27:
5f:11:f8:b2:32:1b:a8:3b:8e:33:c6:be:5f:56:e5:bc:81:8d:
4e:80:f3:f5:a1:f8:b2:9e:bc:3d:e8:8f:c0:60:30:10:25:cd:
14:a1:e6:c0:ba:47:de:fe:50:ad:d2:cf:ac:ab:a6:6f:4a:e1:
7a:5f:51:ae:bb:4f:e0:ac:2a:02:36:f1:55:c4:b2:51:80:3e:
be:cf:bd:82:ea:96:a8:ba:fe:34:73:ca:02:7f:1b:c1:f6:23:
29:8c:b0:9c:84:1b:72:5b:9a:f0:04:7d:6a:78:56:c4:35:23:
fe:4d:ac:0e:90:ce:d0:85:17:b9:54:62:49:34:e9:2f:50:cc:
55:3f:44:d0:da:a2:25:d0:ff:48:82:96:11:a2:e4:88:5f:fe:
9e:14:11:a0:e7:7b:c6:55:c6:fb:53:d6:e8:ff:34:36:0b:9b:
fb:f9:10:9c:c3:95:f9:43:9c:aa:ba:48:4e:d1:f5:aa:e6:ff:
40:9c:1f:d0:8d:e3:bb:b6:db:11:90:23:1f:ff:8f:b0:a4:c2:
db:47:70:9f:e3:c4:1d:3a:51:09:a0:05:10:56:a9:bd:2c:73:
9d:bc:d3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:20:36 2026 by rpki-client