Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66065C28186811F1B569A090DAE4EC9C.roa
File: 66065C28186811F1B569A090DAE4EC9C.roa (raw, json)
Hash identifier: 7ezKczzH2LbKIB2jZPONVGyDN9aDYMiSZOlEM4i9jAc=
Subject key identifier: C1:6B:7E:20:EA:53:E8:F6:AE:6B:10:BB:94:D6:93:A0:74:9D:AA:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BDB5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66065C28186811F1B569A090DAE4EC9C.roa
Signing time: Thu 05 Mar 2026 07:53:29 +0000
ROA not before: Thu 05 Mar 2026 07:53:25 +0000
ROA not after: Fri 10 Apr 2026 07:53:25 +0000
asID: 20473
IP address blocks: 154.196.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Mar 2026 21:34:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114101 (0x1bdb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 5 07:53:25 2026 GMT
Not After : Apr 10 07:53:25 2026 GMT
Subject: CN=69a93679-2f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1a:78:3d:de:db:a7:dd:91:7c:1c:7a:55:fb:
0d:85:6c:a9:59:d0:88:67:e3:06:e5:21:8a:92:eb:
5c:bc:f7:9f:dd:2b:47:d5:97:19:08:96:5c:98:0f:
fb:81:eb:80:d9:9e:3a:8a:a6:85:1e:b7:5d:a8:aa:
3f:d8:1f:9a:a1:e0:06:77:19:0a:be:ef:bb:5c:44:
46:0e:74:c6:dc:da:0a:01:7a:cd:31:d5:e0:99:48:
3d:11:c4:e3:e2:9e:81:7c:27:58:58:af:28:1c:be:
ee:3f:0f:42:b4:55:01:2a:97:1a:b7:7d:b3:67:71:
98:35:78:a6:47:b9:53:f0:dd:da:ec:27:e7:a6:00:
fd:de:ad:f6:cc:91:99:70:fd:2f:8a:89:13:91:9b:
21:05:92:14:82:42:3a:ff:b7:c7:46:6f:38:be:31:
e2:ee:5c:94:91:7f:93:8f:1e:bb:6a:bc:24:62:fc:
ed:27:e9:cd:75:8f:5e:86:6e:7c:27:b1:3e:27:5a:
62:4e:7d:bc:ee:f9:2a:ed:37:75:c8:98:a6:f5:48:
2d:5f:1d:ad:a0:1e:7c:67:cc:1f:2f:2f:2f:ae:9d:
94:25:a0:23:42:e9:6e:27:45:84:6d:26:06:ff:9c:
a2:81:8e:02:93:73:8c:a4:bf:8b:fc:a9:ae:c6:a4:
47:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6B:7E:20:EA:53:E8:F6:AE:6B:10:BB:94:D6:93:A0:74:9D:AA:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66065C28186811F1B569A090DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.131.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:c3:13:ea:ca:fd:7b:83:e2:dd:13:88:93:1a:2a:7f:3a:55:
24:01:88:a1:f5:ed:ac:64:b9:4d:5d:b5:b8:7c:4f:06:3d:4b:
4f:0c:30:0c:5e:ec:fd:cc:33:d1:a8:0c:36:22:7e:60:4f:d1:
1a:ae:e7:27:e3:2b:d6:97:9c:92:a8:c4:cb:96:2c:c7:b6:17:
3d:91:40:f3:53:00:3d:98:b7:ec:b0:d4:43:02:9a:aa:5f:ad:
14:30:96:36:9e:27:e8:5c:6c:e1:f0:a2:14:00:66:f5:5c:15:
4b:86:cd:6d:a0:a8:16:83:00:df:38:c0:fc:42:56:a2:98:53:
42:b2:0c:c1:a3:29:d8:e3:85:1a:45:27:1d:44:aa:25:47:cb:
51:a5:9e:4b:ef:f0:d9:38:ba:9d:36:76:1d:8f:42:28:7b:b7:
0a:88:a9:1e:10:ad:ba:a3:e9:85:14:42:5d:5e:23:80:77:47:
1e:8a:10:b8:7d:54:2d:28:3c:0a:08:aa:54:26:48:5b:b7:15:
74:99:19:29:ed:b0:ea:fc:bc:96:95:f2:ed:c0:47:51:c3:35:
ed:f1:62:a7:b1:ec:55:ef:53:3a:a3:10:4f:2a:d3:de:71:c7:
a0:c1:65:b9:25:c7:c4:8e:d5:b5:d9:3c:0c:62:64:89:25:23:
28:0d:b5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 02:18:57 2026 by rpki-client