Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65B6B322186211F194A1AAEDDAE4EC9C.roa
File: 65B6B322186211F194A1AAEDDAE4EC9C.roa (raw, json)
Hash identifier: 6+J2C5l+8f+mOsLxTmzLorsndB7jMxyXMN4pQEf7Qsc=
Subject key identifier: D9:32:C1:8B:A0:FF:D3:EB:9B:78:5B:7B:DD:5B:79:10:4B:2D:5C:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BDAF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65B6B322186211F194A1AAEDDAE4EC9C.roa
Signing time: Thu 05 Mar 2026 07:10:32 +0000
ROA not before: Thu 05 Mar 2026 07:10:27 +0000
ROA not after: Sat 11 Apr 2026 07:10:27 +0000
asID: 214769
IP address blocks: 154.91.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114095 (0x1bdaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 5 07:10:27 2026 GMT
Not After : Apr 11 07:10:27 2026 GMT
Subject: CN=69a92c68-6ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:32:59:d1:aa:4c:ad:36:aa:02:2c:db:93:
20:dc:79:ba:6e:17:19:e2:56:bf:8e:46:48:a2:76:
ba:cc:2e:e4:bc:fa:20:cf:09:93:a0:3f:93:5c:9e:
09:82:58:21:95:33:4e:53:9a:88:37:24:96:87:23:
ad:5f:4f:12:0d:12:fd:68:2d:4d:fa:cf:e7:30:15:
c8:bb:03:c6:a6:4e:12:49:c6:14:a3:de:e4:f4:ec:
4f:84:78:b5:b6:d3:e5:16:ab:6d:3f:99:d6:06:c9:
31:ff:7f:2e:bc:fc:55:e3:9c:10:93:4c:fb:ab:e6:
87:17:94:29:87:61:7c:79:3f:65:02:52:18:07:70:
3a:b1:80:0e:33:ed:e8:b9:dc:b7:3f:c5:d3:c9:cc:
3f:5f:f2:1d:07:15:5d:c3:f2:b7:3f:81:71:69:88:
22:1c:fd:32:cf:70:90:e6:88:7e:62:86:f2:70:38:
6c:39:7c:0a:d1:19:f9:dc:f6:0e:87:71:7c:9d:5b:
cd:80:7a:31:f8:86:52:a6:66:d0:43:e3:65:54:4e:
39:34:48:c4:de:13:22:5d:5d:65:f1:eb:59:6d:b6:
ac:13:9c:3a:68:27:28:ed:9e:e1:46:15:50:4f:ab:
4f:a0:bb:3d:92:92:63:9a:b2:e7:ac:00:d2:54:2a:
88:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:32:C1:8B:A0:FF:D3:EB:9B:78:5B:7B:DD:5B:79:10:4B:2D:5C:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65B6B322186211F194A1AAEDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.38.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:52:85:80:b3:79:95:3a:b0:19:84:13:f1:b3:7d:f4:62:eb:
e6:d5:57:35:cf:a4:b5:fb:27:78:0a:de:b0:0c:da:16:ef:5f:
6c:27:a9:d2:a8:ae:94:40:ca:44:a3:e4:6f:89:1a:78:4b:62:
85:1b:6a:19:d6:a8:da:ca:0a:9a:b0:a3:c3:85:5b:7d:be:23:
9f:c5:1e:09:ab:f6:47:9d:d7:d6:9e:d1:f1:7c:48:15:d7:4d:
b3:ea:96:78:f0:ab:87:a1:ee:40:c2:0d:11:0d:5d:8a:f0:86:
ba:1b:a1:65:67:0e:35:ff:92:77:24:b4:44:e2:21:8a:3a:30:
96:2f:04:37:da:c8:2f:13:63:5d:49:13:31:f3:b2:c6:f8:a9:
38:92:88:9c:01:0a:49:a8:77:cd:3c:f3:ae:6f:e2:d7:56:da:
b7:bb:5e:8c:fd:da:d4:69:f4:1a:d6:3e:ef:04:5d:57:fe:e7:
4e:07:a9:af:24:35:08:94:2c:23:8d:cb:b6:05:8a:4d:ca:74:
50:a3:ea:ca:f8:eb:14:15:17:20:9e:f9:fa:93:73:40:66:f4:
f0:5d:3f:75:21:ae:cc:fd:54:09:97:0e:5a:3c:73:19:cb:52:
6b:92:51:b8:41:ce:ff:99:40:e0:0b:29:85:3b:ba:fd:55:3e:
7f:c7:ba:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:16:39 2026 by rpki-client