Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FA05520240711F18B1C84D8DAE4EC9C.roa
File: 8FA05520240711F18B1C84D8DAE4EC9C.roa (raw, json)
Hash identifier: hiv0tInUWal2/yq4RwbYqoARg5r4kC/8vaFg509RHrU=
Subject key identifier: 39:91:62:2D:40:AF:43:EE:1A:A6:1B:2D:7E:B5:60:FF:F3:F5:C9:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BFF2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FA05520240711F18B1C84D8DAE4EC9C.roa
Signing time: Fri 20 Mar 2026 02:50:32 +0000
ROA not before: Fri 20 Mar 2026 02:50:27 +0000
ROA not after: Fri 17 Jul 2026 02:50:27 +0000
asID: 154376
IP address blocks: 154.193.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114674 (0x1bff2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 20 02:50:27 2026 GMT
Not After : Jul 17 02:50:27 2026 GMT
Subject: CN=69bcb5f8-a885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:25:9a:1e:a0:da:60:42:ff:7f:a7:24:66:5c:
52:5c:4c:7b:90:f2:20:b9:02:07:97:ee:f3:dc:05:
d0:2d:c9:ac:80:fe:5b:83:b8:22:8c:e5:2f:70:ae:
eb:62:7e:49:c4:3a:04:85:5f:be:ca:89:ac:34:9c:
f3:eb:41:2b:6b:35:1b:2d:09:6d:83:e1:e5:09:5b:
4b:05:e5:67:cc:b4:77:f7:20:88:c8:56:f7:18:dc:
07:7f:e4:a8:fa:45:74:92:ba:f4:39:45:36:34:1a:
19:97:51:50:f1:0d:9a:21:c0:71:99:ba:3a:de:4f:
c9:be:1b:e7:51:46:93:0c:6d:26:ac:1f:c0:ef:f8:
ed:d2:ef:f1:ae:2d:a4:fc:2d:f9:85:4e:7c:77:91:
e1:71:55:5e:59:05:ba:c8:27:e3:3d:98:48:74:a6:
fe:ed:7c:50:06:9d:b8:d3:e9:53:e5:cb:d8:21:80:
54:d9:6c:fc:b8:be:e8:f2:d5:a5:3f:cd:b5:dd:43:
55:4f:68:bc:2b:b9:e9:30:68:00:61:31:ca:77:a3:
da:a7:de:bb:02:88:ae:75:8e:df:46:ae:fa:98:b1:
07:0d:f0:55:d3:85:4a:9b:33:f7:34:2d:74:6c:32:
ba:91:b6:07:c4:7f:3c:e7:87:5d:53:e3:16:30:3f:
02:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:91:62:2D:40:AF:43:EE:1A:A6:1B:2D:7E:B5:60:FF:F3:F5:C9:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FA05520240711F18B1C84D8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.240.0/21
Signature Algorithm: sha256WithRSAEncryption
63:9a:f1:82:53:4e:33:d5:0b:80:bf:c0:cd:ac:80:ea:9f:e0:
53:af:ab:36:d3:95:c5:67:8e:c3:b9:bd:aa:43:37:22:9b:e2:
11:e7:02:f1:c8:79:42:5f:b1:cf:51:1d:f0:4c:ba:3f:4e:3f:
c4:a3:91:64:fe:21:db:48:32:43:fa:62:b7:90:1c:b5:a1:4d:
f0:50:c1:a9:6c:15:20:f9:f7:db:af:51:da:f7:e6:aa:35:01:
97:6d:bd:55:8f:d0:53:74:49:0f:5f:cd:43:18:08:5b:63:38:
7e:45:96:65:2c:d8:8d:13:13:c0:e4:d1:25:36:13:9c:71:67:
72:d1:72:51:55:09:ba:1e:df:6a:fd:da:e2:23:1c:dd:32:57:
a6:12:ff:33:35:dc:14:76:dd:bc:24:8e:2e:bd:cb:b3:31:58:
8c:fe:c8:3e:1d:ef:48:e0:6c:89:7a:bf:de:71:d3:1b:19:19:
9b:5f:db:2c:b2:00:78:36:9e:fb:00:05:e3:0f:e4:b3:9e:28:
2f:fc:eb:7a:b8:66:b2:3a:5a:83:fe:7c:05:af:df:21:33:db:
d2:3c:e7:dc:1c:0d:31:8b:ac:69:8c:3d:55:99:ae:e8:78:69:
89:63:e3:cc:1e:9d:b1:bf:24:e1:a7:fd:22:d8:43:39:c5:80:
40:85:65:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:19:49 2026 by rpki-client