Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/713EB74C194A11F19D6A4C7EDAE4EC9C.roa
File: 713EB74C194A11F19D6A4C7EDAE4EC9C.roa (raw, json)
Hash identifier: S/jr+HT394677HOVxSY5WUSEHJm5UTQ8Q3ichQN/798=
Subject key identifier: 09:79:C1:B0:56:7F:D8:55:49:33:7C:3E:78:21:02:EF:27:A9:AE:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BDFD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/713EB74C194A11F19D6A4C7EDAE4EC9C.roa
Signing time: Fri 06 Mar 2026 10:51:35 +0000
ROA not before: Fri 06 Mar 2026 10:51:29 +0000
ROA not after: Sun 05 Apr 2026 10:51:29 +0000
asID: 272011
IP address blocks: 154.88.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114173 (0x1bdfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 6 10:51:29 2026 GMT
Not After : Apr 5 10:51:29 2026 GMT
Subject: CN=69aab1b7-6a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1a:1f:1f:1c:35:64:77:b7:cc:53:e6:f3:ce:
20:2a:bb:89:0a:14:4e:73:86:3e:44:d1:a6:17:73:
2e:7f:f6:73:7b:63:f9:53:a9:bc:a9:4c:05:6e:8b:
5e:7f:d2:88:e4:72:77:79:26:97:9c:8a:ff:e9:a3:
cc:fc:c6:8b:91:68:dd:38:95:32:11:1c:6a:2f:eb:
f5:2c:8c:1a:64:d1:eb:cc:68:78:7d:00:26:5d:04:
61:c1:dc:c6:60:ee:4d:5b:9d:a3:9e:35:c9:da:6b:
7d:f5:dc:52:d7:09:c2:c9:a4:00:17:6d:13:f2:4a:
15:ce:a3:92:1f:de:4e:b4:52:24:76:60:22:ca:17:
45:04:01:10:84:09:8d:0d:0d:c4:a8:59:3a:be:ee:
dd:b7:47:b7:9d:02:ff:c5:6f:9c:91:3b:e0:8e:ad:
9f:60:47:1e:8c:b9:98:ee:c8:0d:6e:7a:91:0f:04:
3c:47:1e:7f:e6:94:8e:6c:8d:97:5f:fb:82:eb:d5:
c0:9f:41:74:a2:2c:6b:d0:7b:2f:30:1b:07:68:4f:
cc:52:80:a9:98:5e:b0:93:a6:51:0d:6f:ba:a6:49:
43:fe:28:53:1a:35:4f:fb:16:58:98:55:62:17:fc:
74:bc:f2:c8:a9:0d:f0:ff:f3:60:c0:12:8f:34:9e:
fd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:79:C1:B0:56:7F:D8:55:49:33:7C:3E:78:21:02:EF:27:A9:AE:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/713EB74C194A11F19D6A4C7EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.189.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:40:35:e4:cb:81:9a:b2:a2:50:1c:a5:e2:eb:0d:f3:c9:e4:
1f:4f:26:aa:86:13:b0:3d:14:44:87:b0:80:01:ed:a3:dd:3b:
f6:b2:42:d3:d9:99:bf:45:af:a3:87:73:3b:55:e6:42:b8:c8:
c2:4d:78:f4:00:1e:48:24:21:c9:f3:18:f7:3f:3f:08:27:b3:
a8:b0:aa:f0:5e:39:7b:66:48:3a:c7:13:cb:d2:20:22:79:fd:
dd:97:57:8d:cf:99:64:c3:f8:b9:a4:58:a8:61:e6:16:b4:68:
0d:cf:6e:0e:28:64:4a:e8:99:66:a6:4c:08:cb:ad:bf:c6:56:
ab:28:df:f9:5a:e0:ba:61:d4:dd:ce:d1:bf:ec:d5:7f:fc:ed:
0f:3c:a2:16:d5:d1:aa:d8:ed:7c:9a:69:4b:87:d4:98:45:89:
a7:f3:58:79:0c:74:05:f8:3e:9d:14:2b:a9:51:f1:f6:b3:9d:
13:ea:ef:1e:29:95:62:65:7a:89:9c:b9:74:ef:6c:28:67:8f:
a7:16:4f:46:6f:ae:47:3c:f7:2e:e6:23:55:ca:aa:f3:22:7b:
89:89:88:af:fc:45:32:cd:99:f4:9b:f3:d3:4a:a2:53:2f:b8:
c8:df:25:8f:75:28:8d:0b:43:38:36:2e:ce:d6:18:62:d9:2e:
c7:5f:c0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:17:32 2026 by rpki-client