Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C3C626C191111F1B5BAD89FDAE4EC9C.roa
File: 8C3C626C191111F1B5BAD89FDAE4EC9C.roa (raw, json)
Hash identifier: WlSdQ8HuOECpdtK0qj2CsYGBzmh8yxLVrkD8qepP+h8=
Subject key identifier: 33:C2:1A:11:06:E0:0D:FA:43:A5:DE:23:CD:FD:D9:3F:23:EC:8B:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BDDF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C3C626C191111F1B5BAD89FDAE4EC9C.roa
Signing time: Fri 06 Mar 2026 04:04:19 +0000
ROA not before: Fri 06 Mar 2026 04:04:13 +0000
ROA not after: Mon 13 Apr 2026 04:04:13 +0000
asID: 17497
IP address blocks: 154.90.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Mar 2026 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114143 (0x1bddf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 6 04:04:13 2026 GMT
Not After : Apr 13 04:04:13 2026 GMT
Subject: CN=69aa5243-dc62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:66:95:9c:b1:ac:e6:af:63:18:f3:4c:de:8a:
ac:a5:3a:d5:32:73:55:77:b7:c6:06:0f:76:91:e9:
36:77:24:bc:ce:2f:2b:01:75:d8:44:e2:99:c0:d9:
51:72:5a:08:83:30:bf:bc:48:bb:9e:73:5b:18:6a:
b8:fc:fe:ef:fa:85:2d:ef:09:b9:07:37:2c:ac:53:
69:85:f7:41:c3:51:35:03:84:b2:8f:53:f8:ea:f4:
d5:45:40:68:8e:c6:1d:c2:48:74:c1:f9:c0:18:af:
30:3e:d4:df:a1:d8:f5:ec:9d:d0:d4:3c:17:77:25:
b6:2b:c4:d7:bd:1a:c0:fb:f5:39:62:fd:e9:6b:71:
7f:ca:b3:72:fd:6d:5c:b7:13:02:e7:73:28:a3:74:
18:bc:6e:7f:b3:b1:de:66:5e:64:81:b0:48:8c:63:
34:96:4c:07:08:00:e9:53:ad:3d:1d:82:cf:c0:80:
ac:fb:ee:1a:98:cc:b9:54:49:51:c3:b2:2f:61:fa:
4c:6c:96:9b:1d:05:34:b2:85:b7:69:2b:16:da:f9:
d2:22:cb:a9:67:a1:39:6b:14:e4:64:75:10:de:31:
ea:db:96:d7:40:68:d3:30:39:f3:15:f3:7c:38:1e:
18:cc:60:65:70:83:46:37:dd:61:8e:aa:31:c6:1a:
b4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C2:1A:11:06:E0:0D:FA:43:A5:DE:23:CD:FD:D9:3F:23:EC:8B:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C3C626C191111F1B5BAD89FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.138.0/23
Signature Algorithm: sha256WithRSAEncryption
74:af:c7:12:0c:01:7c:1c:22:f3:21:50:b6:b3:f6:27:a2:00:
ed:2b:bd:e8:f4:ee:bd:6d:93:54:7c:32:bd:17:d4:0c:e1:f2:
74:b7:c8:94:9f:c4:40:7a:12:9c:19:4d:e4:5c:9b:e8:dc:e4:
5b:ab:10:dc:48:e4:69:d1:14:17:78:9b:e1:aa:11:6d:29:02:
5d:54:cc:3d:6c:7f:e7:0b:ec:37:dc:c0:e1:13:65:3e:ac:40:
65:dd:a8:7a:80:c4:e7:28:87:38:bf:5e:ef:a7:e1:17:18:06:
c0:ef:34:c5:c8:79:33:b7:60:5b:7d:61:d9:ae:53:11:d3:d8:
cd:0f:83:6e:da:98:ac:1e:55:56:16:7f:ae:ca:92:e7:f7:cb:
9e:dc:bb:3e:70:13:0d:ce:60:7f:87:3d:85:bf:ec:7b:f6:d5:
e9:2c:ef:5a:94:9a:f0:9b:ed:3c:d2:e8:0f:c3:35:0e:de:d4:
74:88:12:0e:79:c7:36:0b:e6:36:26:e4:f8:9a:41:b2:fb:5c:
cd:87:c5:d2:91:df:ea:e2:47:a6:64:0d:43:2e:aa:4b:4f:e3:
57:40:77:7b:7f:df:5f:b0:bd:9d:2c:b7:49:5a:00:26:c2:77:
d6:6f:d2:03:8a:06:84:34:56:3e:c2:82:73:76:eb:b5:cd:ee:
bc:be:ad:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 09:28:18 2026 by rpki-client