Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/692166D61EAE11F1ACF512B4DAE4EC9C.roa
File: 692166D61EAE11F1ACF512B4DAE4EC9C.roa (raw, json)
Hash identifier: WOnnZ2awiaMF8vzyaL1z/cbufrPNee3kDxRboW/bi4o=
Subject key identifier: CF:EA:2C:5A:21:FA:75:43:84:2B:EE:80:1E:54:FB:F8:84:65:0D:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF45
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/692166D61EAE11F1ACF512B4DAE4EC9C.roa
Signing time: Fri 13 Mar 2026 07:29:46 +0000
ROA not before: Fri 13 Mar 2026 07:29:42 +0000
ROA not after: Mon 20 Apr 2026 07:29:42 +0000
asID: 273155
IP address blocks: 154.200.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Mar 2026 00:06:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114501 (0x1bf45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 13 07:29:42 2026 GMT
Not After : Apr 20 07:29:42 2026 GMT
Subject: CN=69b3bcea-f305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bf:85:0a:ce:0b:7b:88:2b:90:c1:8f:0b:c7:
a0:e0:88:6f:d5:aa:a1:45:4f:0a:4b:f2:a6:bb:e8:
55:f6:61:a2:ab:24:26:89:c6:37:cd:94:b3:22:c8:
6c:42:73:fb:51:d5:ca:49:5d:dd:10:74:c0:30:3f:
71:cb:ad:2c:d8:21:e3:d5:42:f9:64:f2:91:c9:b2:
0c:fc:6e:ed:2e:b2:bd:20:c9:d8:75:5e:bf:5a:3e:
0a:f4:62:c1:db:a6:54:ec:a9:98:55:bf:f5:2e:84:
d4:19:b6:72:6f:28:fa:32:0e:90:4b:99:42:5e:1e:
d2:fc:82:2d:ca:aa:59:7b:35:5d:4b:36:34:7e:b4:
c8:59:5e:12:39:45:e5:f5:8d:97:4b:51:4b:9f:0e:
f5:70:79:8b:ce:c0:4d:3e:45:fe:95:e7:10:62:d8:
14:d1:63:47:da:0e:12:c8:2d:aa:2d:b4:58:f2:99:
71:21:90:e9:34:f1:b4:af:ec:5e:cc:61:6a:14:0c:
a0:55:2f:40:2d:82:86:8f:ca:5b:9b:8d:f7:c7:8f:
99:bb:f8:12:d0:5f:73:d6:6d:f7:6c:d5:3f:00:8a:
d5:6c:fe:a7:ab:bc:cb:6f:7c:cb:22:81:17:3c:92:
41:28:ab:ea:d2:c0:fc:8c:97:f6:46:57:e3:ae:bc:
7c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EA:2C:5A:21:FA:75:43:84:2B:EE:80:1E:54:FB:F8:84:65:0D:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/692166D61EAE11F1ACF512B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.236.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:09:b7:13:bc:16:ef:6c:6e:f1:34:23:9c:68:66:ca:71:59:
af:d3:60:d3:4f:9e:a0:4a:93:e9:af:82:fe:af:ef:03:6f:d4:
e2:82:3f:34:f6:ed:ba:87:fa:84:2d:09:5b:09:15:29:a4:04:
dd:c7:2f:4e:c4:f4:f5:45:75:6e:f4:0c:96:ee:31:c5:54:d3:
7c:0e:48:c1:bd:a9:89:d6:1d:a1:45:2c:68:27:0c:c1:32:24:
b8:ee:82:aa:db:88:9c:cc:0a:fc:e7:db:85:82:b2:b1:a3:62:
13:96:07:3e:5a:d1:01:65:f1:a9:a4:bb:90:30:66:c9:5e:f7:
9d:0a:83:fa:19:18:b5:22:a2:cc:03:20:1f:3d:10:a3:38:c4:
d6:30:cf:d2:53:83:f3:5a:f6:d0:1f:3a:95:31:f0:27:cc:7b:
93:78:56:7e:f7:55:1d:49:a0:90:3f:3f:65:c4:c2:85:25:04:
f1:74:90:ae:40:0f:dd:fd:36:b7:6f:83:1c:43:ed:32:ac:c7:
eb:7f:57:d9:21:af:a2:56:ef:39:26:f5:b0:d4:95:ee:56:c5:
cf:32:ea:66:4c:cc:25:00:15:9c:68:8e:7d:89:b9:50:87:6b:
da:9c:3f:5d:bc:fa:2d:d5:60:fa:a5:41:e0:4e:06:df:b5:bf:
6a:25:f9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:08:24 2026 by rpki-client