Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/849B6A241C7E11F1B7B541E5DAE4EC9C.roa
File: 849B6A241C7E11F1B7B541E5DAE4EC9C.roa (raw, json)
Hash identifier: O6/bHh9Xaxy8man94giETU4Ba57HGo/VfSHTI6xjwcU=
Subject key identifier: B4:B4:2A:FB:8A:75:77:89:4C:63:9F:DF:01:98:2A:85:3B:EC:B1:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BEC1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/849B6A241C7E11F1B7B541E5DAE4EC9C.roa
Signing time: Tue 10 Mar 2026 12:41:54 +0000
ROA not before: Tue 10 Mar 2026 12:41:50 +0000
ROA not after: Sun 22 Mar 2026 12:41:50 +0000
asID: 139880
IP address blocks: 154.194.128.0/18 maxlen: 24
154.215.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Mar 2026 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114369 (0x1bec1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 10 12:41:50 2026 GMT
Not After : Mar 22 12:41:50 2026 GMT
Subject: CN=69b01192-51e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:68:1c:1c:33:f5:29:3c:ad:39:ab:a2:8e:ca:
c1:6c:76:e6:13:5f:42:58:2b:4c:0f:7d:f5:ba:a9:
4a:bf:01:6f:e9:ae:f8:76:5c:24:99:14:df:58:6d:
4e:42:02:ec:71:84:79:c5:39:9f:ec:3e:4e:3c:a6:
81:e5:0d:3a:49:e3:1a:42:2e:49:65:75:1b:20:6e:
ca:64:93:5d:d2:e1:f2:94:23:9d:0c:ed:d9:7c:b5:
81:53:51:e2:68:0a:36:79:d7:59:87:ae:d2:5f:8f:
58:b8:f7:da:6a:d4:05:40:84:78:e2:2a:29:f7:de:
c2:69:95:1f:83:17:c1:a1:96:0d:8e:1f:58:19:89:
27:9a:97:d0:50:00:06:a3:8d:f5:08:45:3a:df:fd:
ce:aa:a1:db:f6:d1:3e:e5:ec:65:a6:04:3c:4d:da:
00:a6:72:97:ff:1c:95:5c:af:05:ce:93:51:97:36:
db:49:10:ee:c7:e9:80:1c:ba:d1:58:fc:89:0e:b8:
44:20:4f:f8:38:d1:10:7d:0a:29:38:91:f1:f9:0f:
54:0c:89:e9:74:aa:6a:ba:af:5e:41:8b:48:df:a6:
af:c1:90:9a:90:0a:05:3d:ba:5b:17:f8:45:0c:de:
1c:ab:b0:24:2b:e2:4a:97:91:64:28:d5:b8:90:70:
79:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B4:2A:FB:8A:75:77:89:4C:63:9F:DF:01:98:2A:85:3B:EC:B1:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/849B6A241C7E11F1B7B541E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.128.0/18
154.215.64.0/18
Signature Algorithm: sha256WithRSAEncryption
47:89:83:0b:f9:68:ab:f7:77:79:2c:79:26:b1:6a:92:df:01:
a2:c0:fe:34:59:db:16:3f:94:0a:50:31:cc:bb:b2:97:31:6d:
08:0a:05:7e:15:ee:5d:12:02:40:dd:6c:1a:fc:d3:d2:45:e4:
09:88:1c:99:5c:fe:77:17:ac:5f:fd:49:df:44:55:31:aa:dd:
a8:2b:d6:24:57:ed:ab:76:34:93:7f:db:1f:9a:49:9d:72:5c:
81:72:f4:c4:ef:67:aa:aa:43:ac:35:0c:93:db:9d:5f:9b:65:
21:b8:b6:bc:40:ff:ba:b0:0b:36:59:27:a9:e5:06:86:46:6a:
cd:c4:3d:91:6c:48:f5:40:26:6f:41:8f:5b:80:78:be:f4:df:
ff:d4:a0:bd:49:2e:70:5f:23:71:28:5a:59:84:56:ff:19:11:
c4:f0:e9:68:a5:3a:0f:0a:81:51:6b:34:8a:20:a1:a7:08:d0:
46:d9:3e:7a:80:ab:64:a6:52:3f:6c:36:05:9b:66:fe:7f:6d:
24:44:af:6b:f3:f6:07:1a:67:a3:bb:55:4d:f7:6b:f8:87:7c:
ec:f8:e6:a1:e9:8c:10:95:f5:40:80:40:85:b4:d4:db:e0:84:
69:61:ad:be:f8:e0:37:9c:0a:c3:2b:b1:18:7b:d3:05:42:3a:
7c:ba:cf:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:26:24 2026 by rpki-client