Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/853E5DE21A1C11F1A951B18CDAE4EC9C.roa
File: 853E5DE21A1C11F1A951B18CDAE4EC9C.roa (raw, json)
Hash identifier: MzcbCwl11Ib8raQisnW8NEKgXY73dD2CVAo6KDn+rCw=
Subject key identifier: 55:5A:64:84:24:43:C8:CA:34:55:C7:F8:E6:56:98:C6:28:24:F2:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE38
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/853E5DE21A1C11F1A951B18CDAE4EC9C.roa
Signing time: Sat 07 Mar 2026 11:55:22 +0000
ROA not before: Sat 07 Mar 2026 11:55:18 +0000
ROA not after: Wed 07 Mar 2029 11:55:18 +0000
asID: 17561
IP address blocks: 154.83.180.0/24 maxlen: 24
154.83.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114232 (0x1be38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 7 11:55:18 2026 GMT
Not After : Mar 7 11:55:18 2029 GMT
Subject: CN=69ac122a-c0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b1:43:69:f4:47:ba:6d:43:c4:52:94:4d:9f:
c0:33:81:85:10:5d:b3:b1:9a:46:cd:d9:7c:4b:87:
59:45:91:a2:b5:52:7e:23:47:1e:fe:d1:65:0c:76:
2a:5f:77:8f:ad:cb:99:76:09:5f:99:2c:a3:e1:a5:
87:9a:70:44:fe:67:7a:ae:12:2d:2e:c1:73:29:a2:
f4:85:e5:09:1f:15:db:7f:2f:43:fd:4e:5c:4f:ac:
fa:73:5a:2b:d0:32:9d:b6:46:88:40:2d:6f:59:25:
b6:b6:40:f1:11:8f:43:73:c0:06:a1:90:12:bb:36:
05:d8:05:8f:83:86:90:75:89:d1:bd:3f:61:83:4c:
45:96:b4:8c:70:bf:66:3a:27:e0:e5:02:04:82:cd:
32:03:22:7d:50:77:f6:9b:32:01:e7:3d:13:c7:7b:
78:25:d5:64:84:55:78:c9:27:fb:52:04:eb:94:60:
37:ac:11:70:2e:6b:dc:17:76:3b:ba:b0:d7:33:d7:
ff:85:3e:a5:87:86:90:67:ee:9a:a1:da:95:fa:60:
37:3a:f5:33:f9:e3:7e:cb:7a:af:73:36:f4:a9:75:
5b:bb:ce:e9:4e:33:39:ff:2f:5c:06:86:70:db:91:
41:53:2a:3a:4b:76:41:fd:52:7a:a9:33:e1:8a:7b:
ca:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5A:64:84:24:43:C8:CA:34:55:C7:F8:E6:56:98:C6:28:24:F2:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/853E5DE21A1C11F1A951B18CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.180.0/24
154.83.192.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:05:63:2b:c1:fb:0f:fb:17:7f:bd:66:c5:3b:02:c4:dd:86:
d3:05:df:71:96:21:2c:30:8e:b7:46:e5:3f:75:d8:65:38:dd:
f2:8a:a3:b0:c6:99:76:ce:af:f5:29:2b:d7:95:9b:98:70:ed:
23:fb:b5:97:1d:0c:5e:a5:cc:0e:4f:d2:27:3e:ef:dd:96:a7:
38:5d:be:31:29:10:d5:6d:4e:e5:c3:df:d1:38:1a:1a:3d:c0:
b6:06:3b:72:da:b1:73:8d:07:cd:11:7c:32:a2:28:2b:5c:68:
d8:44:3b:fd:e1:e0:51:6d:39:5e:08:83:75:73:23:20:21:25:
c7:3e:b7:39:91:a5:b7:f6:14:3f:38:5e:0e:6c:63:c9:d8:09:
54:92:65:4e:8f:44:cc:b7:7f:13:1c:f3:bc:6b:9c:71:3d:f8:
70:8c:e2:27:12:a0:ca:8a:b5:1a:be:93:00:6b:b1:a9:88:bb:
86:9b:2c:6c:6f:41:9c:3f:77:c9:b0:82:54:76:84:4b:cd:0c:
c2:4d:16:28:ba:12:b3:a8:8f:50:6c:f9:51:63:84:89:76:08:
89:7c:e1:0b:51:48:cd:7a:07:c6:ca:f1:ae:03:ce:be:e3:0b:
37:eb:29:31:b0:41:e7:e2:1b:86:67:ce:ff:55:89:b8:ec:43:
16:28:aa:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:17:18 2026 by rpki-client