Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67140A7C187A11F1AB76337EDAE4EC9C.roa
File: 67140A7C187A11F1AB76337EDAE4EC9C.roa (raw, json)
Hash identifier: ycFHmcDfC3NLlUK8zEWCU4kdTuqQpkATteAF1C0WeJc=
Subject key identifier: 26:56:04:C9:D3:DE:3D:01:3F:03:7B:FA:28:6B:FA:C3:2F:69:46:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BDC1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67140A7C187A11F1AB76337EDAE4EC9C.roa
Signing time: Thu 05 Mar 2026 10:02:22 +0000
ROA not before: Thu 05 Mar 2026 10:02:18 +0000
ROA not after: Mon 13 Apr 2026 10:02:18 +0000
asID: 20457
IP address blocks: 154.198.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Mar 2026 00:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114113 (0x1bdc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 5 10:02:18 2026 GMT
Not After : Apr 13 10:02:18 2026 GMT
Subject: CN=69a954ae-17b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:76:14:03:03:1f:50:55:84:c1:63:82:ee:0e:
32:fa:2d:96:31:cb:3b:00:4c:6c:84:97:2b:ea:77:
22:a0:65:d4:89:cd:4e:4b:1d:b3:86:cc:7d:ad:b8:
ea:1f:ce:35:b8:e3:a6:2e:49:97:8d:95:40:9f:f1:
83:d7:c0:28:31:7f:7b:65:fd:8b:a7:72:8c:72:e3:
82:02:71:6f:54:0f:97:c8:df:0b:a6:01:52:1c:c7:
52:1f:a1:ed:d5:02:a8:b2:01:e7:cb:0a:e1:63:cb:
f7:5f:c8:26:96:9b:d4:cd:9b:41:47:b1:1b:2e:f6:
b7:f6:82:90:14:b9:88:ed:90:95:14:a9:8a:54:e4:
b4:fc:2f:bd:42:5d:39:0a:fe:23:c3:e6:5f:c0:26:
d1:47:27:d8:ba:2b:65:1b:21:c7:ed:23:08:73:6f:
81:df:e6:92:01:71:4a:54:de:2f:f4:2c:2e:15:2d:
01:47:a4:9d:04:a2:18:ef:1e:9e:11:18:3e:4b:bf:
cb:ca:d0:dc:c7:97:d2:21:4c:da:0a:5f:cb:6a:a2:
c3:20:11:84:58:4b:da:cf:00:f5:32:2f:28:24:83:
4a:0c:4e:22:8d:b2:06:eb:c2:84:e0:3f:e1:4e:fa:
de:df:de:93:4b:3f:99:1c:0f:cf:64:5e:be:b2:ab:
a8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:56:04:C9:D3:DE:3D:01:3F:03:7B:FA:28:6B:FA:C3:2F:69:46:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67140A7C187A11F1AB76337EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.11.0/24
Signature Algorithm: sha256WithRSAEncryption
af:17:3a:30:53:18:40:b0:18:96:2d:9a:64:f6:9b:68:41:45:
01:f4:1a:5c:1e:27:b7:a8:d1:bb:7d:a2:22:2d:bd:32:67:9c:
f5:99:91:6a:21:98:ef:08:ad:26:ea:a0:ac:f5:d7:e7:c5:75:
3e:23:50:62:dc:7d:4b:7f:33:0b:13:6e:97:fe:a5:e0:69:ec:
b2:75:92:75:35:a0:5e:2e:a4:09:54:47:f1:04:a9:71:18:ac:
e6:64:28:c5:da:27:6e:91:69:49:b4:57:bb:7b:25:f4:2d:84:
f4:d6:38:15:5c:d1:87:aa:c0:1a:30:02:6c:eb:7f:50:6c:26:
79:62:41:a4:2d:1f:66:57:c8:5e:03:7d:c0:a4:a7:d3:24:8f:
a2:0a:77:7d:9f:47:e5:82:bf:c1:17:f9:35:7e:92:9f:45:e9:
5e:88:23:84:c0:0b:24:51:b5:6b:41:e5:21:6d:bd:6b:1f:db:
75:17:c1:1e:60:e2:9a:3e:c4:8e:69:22:9e:fc:1c:e6:34:c6:
b7:1a:2a:1b:7b:60:1c:4d:ff:75:72:2d:c1:32:1f:86:7d:6c:
fd:32:61:a4:82:d4:d7:ea:d9:b4:af:87:e7:32:70:58:14:47:
b3:42:fd:11:81:46:bf:57:3a:e8:16:73:2a:2f:b9:c9:5a:ef:
b2:33:84:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 21:13:57 2026 by rpki-client