Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DAB096817C411F1ADC66D9DDAE4EC9C.roa
File: 7DAB096817C411F1ADC66D9DDAE4EC9C.roa (raw, json)
Hash identifier: eRNYh8OnXeVTKhWtHjQti3ursR9NpbxceZSWZ4vFTDQ=
Subject key identifier: 9E:3B:DC:5B:20:E4:62:54:F6:BC:68:C1:0A:52:49:E4:7A:54:C6:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BD6F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DAB096817C411F1ADC66D9DDAE4EC9C.roa
Signing time: Wed 04 Mar 2026 12:20:11 +0000
ROA not before: Wed 04 Mar 2026 12:20:08 +0000
ROA not after: Fri 10 Apr 2026 12:20:08 +0000
asID: 142032
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Mar 2026 00:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114031 (0x1bd6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 4 12:20:08 2026 GMT
Not After : Apr 10 12:20:08 2026 GMT
Subject: CN=69a8237b-aee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f3:ed:f8:d0:8f:c5:64:b3:3e:65:72:60:95:
4f:85:6c:ea:f5:2f:0b:25:75:1a:a2:a5:06:c7:53:
43:a5:69:7f:ef:3f:2d:63:07:2f:1f:2a:a2:4b:62:
cb:83:32:b3:35:34:4a:b6:3a:55:5f:6c:f5:ad:5f:
07:cd:8c:79:0e:ec:b8:13:21:d4:29:65:ad:0d:ef:
32:c1:7d:92:fe:a1:74:48:15:b0:6c:20:dd:5b:f1:
f7:79:19:e5:be:8a:d9:c9:8b:66:62:12:79:22:b4:
01:d1:ff:7b:99:19:06:f6:51:84:bb:42:99:19:10:
31:35:bd:41:3a:5e:dd:aa:2a:ea:1f:90:a1:fe:2b:
d8:4d:cb:86:f4:cc:0d:6e:98:a5:17:a1:c5:b3:25:
ef:4d:2b:43:3c:83:e3:eb:e0:f5:d1:86:f2:d2:21:
01:be:59:b6:c7:a3:58:dc:c6:1e:4f:60:fc:5e:be:
ad:a4:9c:22:fe:45:99:7f:e1:bd:5b:f9:12:c1:17:
e9:9f:2b:a0:6b:4a:51:ab:a8:b0:8a:b6:a0:f1:6d:
6f:fc:7c:fc:4a:1c:55:c2:9e:5e:2b:b8:c0:db:1e:
ef:49:84:88:1e:d6:07:97:49:e6:48:45:ab:79:9d:
6c:5a:da:02:14:53:ad:a9:b4:6b:b9:26:d3:3d:62:
bf:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3B:DC:5B:20:E4:62:54:F6:BC:68:C1:0A:52:49:E4:7A:54:C6:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DAB096817C411F1ADC66D9DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
53:f6:5d:5e:40:34:9f:33:5c:01:65:d8:26:51:dc:6f:fb:c0:
db:3b:77:79:83:30:57:36:6e:2e:58:b1:cb:bd:22:31:76:6f:
8f:65:04:2a:6c:12:05:8d:de:1b:ae:b3:a5:43:f1:97:aa:20:
16:3b:eb:00:44:5e:41:18:21:04:2a:47:32:d5:d8:51:e4:99:
05:cd:ec:9c:b0:24:a8:2d:db:68:59:bd:d6:ea:90:c3:83:2c:
36:8b:35:4e:fd:10:a7:cf:29:57:0d:b5:7e:9b:53:72:dc:ca:
e6:8f:17:f1:67:5b:80:de:b9:2a:7a:cd:f1:62:e3:70:3c:d9:
02:6c:3e:40:cc:a5:fb:31:98:93:c7:cd:8c:5c:77:f2:6a:6b:
17:7c:de:a5:39:56:ab:e9:c7:d7:d7:d3:99:22:a7:3b:31:0e:
ef:64:cd:55:16:0f:51:7c:a8:c1:10:60:64:d3:be:86:20:dd:
00:cd:58:41:ae:2f:82:d9:aa:37:34:df:e7:a6:b5:78:09:0c:
8f:bb:36:63:90:50:34:76:90:f7:ae:16:a7:c3:b8:de:d1:9d:
09:7b:a8:2a:41:4a:8a:7f:96:f7:17:66:2a:64:3e:ad:30:ef:
80:a7:51:90:7f:5d:24:79:d6:08:67:a6:0e:7c:76:da:c3:61:
02:45:1d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 12:02:17 2026 by rpki-client