Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D302A0A162811F1BC4DA5B8DAE4EC9C.roa
File: 8D302A0A162811F1BC4DA5B8DAE4EC9C.roa (raw, json)
Hash identifier: diMAAnsqBvXtSaj7RCBOC3O1Kvaj/A7bmDldNUqH2Jc=
Subject key identifier: E2:5F:F9:4C:85:7D:9C:36:84:98:EE:4B:22:99:27:DE:F0:91:65:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BCEF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D302A0A162811F1BC4DA5B8DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 11:11:25 +0000
ROA not before: Mon 02 Mar 2026 11:11:20 +0000
ROA not after: Thu 12 Mar 2026 11:11:20 +0000
asID: 147176
IP address blocks: 154.197.69.0/24 maxlen: 24
154.215.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 12 Mar 2026 11:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113903 (0x1bcef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 2 11:11:20 2026 GMT
Not After : Mar 12 11:11:20 2026 GMT
Subject: CN=69a5705d-f1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:05:9b:57:6e:7c:3b:17:88:11:14:1a:06:77:
f6:93:e6:f1:d1:ca:54:79:6c:33:51:1c:2f:c2:e4:
83:37:54:0a:d4:f7:8b:e3:b2:5a:98:d1:31:4e:06:
17:7e:61:8b:f1:df:81:06:7b:a7:9c:1a:32:bf:14:
a5:97:65:f0:dc:09:64:a0:b5:27:e3:c3:a8:a3:6c:
97:82:22:a1:ce:e0:62:94:c3:d7:b7:e1:cd:99:ad:
db:12:29:c4:a0:10:ce:c4:13:15:1d:d5:53:98:5b:
58:e5:42:a1:7e:3b:cc:a7:f7:d4:58:eb:8f:2e:86:
d5:6d:55:33:9c:36:e5:bb:95:9a:e0:db:ac:4c:02:
d0:70:da:5a:f6:10:80:04:02:2b:7d:2c:f1:12:7c:
29:9c:38:99:8e:06:7f:bc:23:ab:d4:e3:21:f6:53:
3b:a3:f2:fa:1c:39:e7:46:c3:b2:5f:86:b4:36:89:
45:05:8f:cb:a3:f6:66:20:58:73:0c:bc:f2:64:6c:
fc:02:76:86:16:7e:12:37:90:d7:f1:d4:31:13:d8:
34:5c:ed:3b:a8:bc:b0:5f:dd:b9:57:2d:81:43:f6:
03:ed:e1:02:d0:5b:3a:c5:c2:fc:b5:18:a0:ad:3c:
e6:24:20:55:7a:c9:65:d7:bb:2c:b8:e6:6c:97:01:
3a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5F:F9:4C:85:7D:9C:36:84:98:EE:4B:22:99:27:DE:F0:91:65:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D302A0A162811F1BC4DA5B8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.69.0/24
154.215.14.0/24
Signature Algorithm: sha256WithRSAEncryption
92:73:e1:58:0b:26:2e:8a:ee:0c:80:a1:1f:cc:92:45:92:13:
af:ad:98:ea:13:b5:f1:d8:e3:3f:dd:4e:f8:8b:27:31:96:5e:
eb:c4:e4:f8:de:45:08:63:67:39:be:33:81:c9:31:aa:cb:80:
d5:1a:28:3b:c9:bf:09:71:e2:85:d7:cc:f0:1b:ca:37:44:fa:
80:84:24:26:d6:fe:1d:ad:23:8f:3f:04:fb:9d:d3:57:6b:84:
2a:c5:ec:70:3f:d6:15:d0:75:ab:e0:33:1a:8c:30:fe:b6:6a:
ce:3a:98:c7:ad:e0:cd:83:ba:92:0a:a4:29:c8:22:1e:41:8f:
5d:fc:bb:66:df:5a:35:cd:cf:de:96:d8:34:f3:10:af:97:d3:
ad:b3:4e:b4:a7:b4:8b:0a:ec:9c:ca:3e:49:c8:e8:fc:c3:f2:
42:65:8e:d3:d4:88:3e:6e:a2:d5:7a:76:b2:42:cf:29:a2:2d:
b8:8b:3a:b3:07:f2:b0:8d:2e:ef:27:ab:db:7c:f5:cc:38:51:
65:f8:d8:91:93:63:66:5a:66:9f:cb:0a:50:92:2b:8f:54:b7:
bd:eb:c3:39:2b:2a:7a:e3:1f:ec:a2:9f:20:bb:cf:2f:3f:ba:
b2:0e:a2:54:88:23:22:64:f1:4f:d7:d5:d0:d3:34:82:0d:0c:
29:da:88:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 14:19:53 2026 by rpki-client