Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82A4B2301D2711F1B111F2C5DAE4EC9C.roa
File: 82A4B2301D2711F1B111F2C5DAE4EC9C.roa (raw, json)
Hash identifier: wgnFHxcd5Wvm70EYP5OZieDAcMs19ZrBGQgRFfRoRn0=
Subject key identifier: 14:34:CC:61:13:D0:90:A1:D0:B8:14:13:BA:68:3C:4B:78:82:54:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BEE9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82A4B2301D2711F1B111F2C5DAE4EC9C.roa
Signing time: Wed 11 Mar 2026 08:51:36 +0000
ROA not before: Wed 11 Mar 2026 08:51:31 +0000
ROA not after: Mon 20 Apr 2026 08:51:31 +0000
asID: 214413
IP address blocks: 154.205.253.0/24 maxlen: 24
154.205.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114409 (0x1bee9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 11 08:51:31 2026 GMT
Not After : Apr 20 08:51:31 2026 GMT
Subject: CN=69b12d18-7e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fa:99:b7:5d:07:c2:f4:d0:e0:fe:2a:15:68:
9d:75:e0:b0:59:ec:f8:1a:53:79:f1:ea:41:0c:b2:
90:3f:b5:e5:67:4a:9f:0d:cb:63:dd:0b:a5:ac:c5:
fd:85:97:05:59:8f:a7:82:25:8d:32:48:52:2c:e9:
a1:9e:67:a5:88:00:8a:c6:9d:32:bd:ff:62:72:90:
8e:35:6b:21:18:b0:d7:54:b7:af:68:02:a0:c0:d2:
7d:36:0c:f7:d0:d7:b5:31:ec:e0:b6:4b:e6:77:74:
34:be:c4:16:24:a6:19:97:4b:fb:2a:6a:f9:97:f9:
6f:f6:1a:5a:f3:3f:e8:e0:b0:8e:2a:8c:2f:5f:8f:
a2:26:20:0d:79:cb:d5:0e:69:fe:8e:e1:55:f4:92:
8f:02:16:98:79:8e:c4:ed:e2:5f:34:60:d9:e2:dc:
80:8d:13:3b:88:2a:96:1b:32:60:f8:37:b1:66:47:
ee:94:5a:85:43:80:cf:bc:7a:b9:e3:ab:6b:d0:63:
bd:52:bb:be:4c:29:8a:e1:cd:74:4d:8b:7f:e5:9e:
01:1a:d2:92:30:b5:5d:c7:a7:81:60:be:c4:4c:3d:
3a:45:6d:5b:00:4f:0c:e2:52:b6:4b:0e:eb:08:85:
f6:24:6c:ec:a9:42:cb:1c:b0:05:e6:02:ce:6f:0d:
ac:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:34:CC:61:13:D0:90:A1:D0:B8:14:13:BA:68:3C:4B:78:82:54:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82A4B2301D2711F1B111F2C5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.253.0-154.205.254.255
Signature Algorithm: sha256WithRSAEncryption
7e:97:14:0f:f3:ba:1f:de:2a:8a:ee:d6:4d:70:57:ef:67:b6:
9c:cb:b4:7e:cf:02:be:2a:f3:17:7c:0b:44:13:e7:b2:95:c8:
f0:d1:f2:3a:c4:9f:48:67:e3:8f:b4:cf:d2:3d:2c:21:d1:50:
d4:62:9a:cc:7f:9a:5e:02:16:fa:8e:3c:7a:25:87:db:48:cb:
47:07:d6:45:c6:df:2d:61:b3:fc:14:56:96:8c:52:2d:5d:8e:
cb:89:54:70:3c:c8:55:16:f5:c8:8a:91:e0:77:1e:28:1b:12:
ec:7a:64:71:aa:7a:a0:56:db:18:ec:2f:32:53:49:f7:f8:f8:
ba:aa:9e:66:3a:0c:dc:63:00:8a:4d:9f:05:b9:e6:7c:84:56:
2b:d2:6e:b8:14:72:60:1a:0d:a5:bf:dd:ae:c7:c7:81:03:40:
89:c9:f4:25:de:58:2f:5e:91:39:10:ff:c4:50:25:3c:03:c8:
55:38:36:af:f1:9e:6a:44:8b:70:99:12:d7:98:a5:d8:bc:b3:
7f:9a:27:d1:e1:bd:0c:1d:b5:97:49:d8:f7:79:39:22:ce:24:
69:c9:a2:63:d4:85:94:bf:f7:7b:a2:48:09:6c:b8:11:5c:b3:
31:a5:78:9b:2f:fc:0d:6e:18:b1:9a:12:b1:5c:89:62:35:81:
91:8f:90:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:35 2026 by rpki-client