Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FCFC92A1C5211F1AE3A4DEADAE4EC9C.roa
File: 8FCFC92A1C5211F1AE3A4DEADAE4EC9C.roa (raw, json)
Hash identifier: xfRtDyTnhoOonBCYT73bS63xlyI0O5MfrNTJ3Tbn19E=
Subject key identifier: 21:7E:A3:E0:D1:36:93:5D:71:5E:6D:D1:E6:8F:D7:2A:C4:03:A5:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE9B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FCFC92A1C5211F1AE3A4DEADAE4EC9C.roa
Signing time: Tue 10 Mar 2026 07:27:15 +0000
ROA not before: Tue 10 Mar 2026 07:27:10 +0000
ROA not after: Thu 26 Mar 2026 07:27:10 +0000
asID: 142002
IP address blocks: 154.83.26.0/24 maxlen: 24
154.83.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 07:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114331 (0x1be9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 10 07:27:10 2026 GMT
Not After : Mar 26 07:27:10 2026 GMT
Subject: CN=69afc7d3-a7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7a:b1:50:8f:e7:9d:70:70:96:23:e1:9c:f2:
5b:1d:e6:98:4b:71:72:d6:86:43:15:f6:29:de:32:
c9:67:b5:ee:a1:46:68:83:d2:42:95:e9:ae:d6:5e:
97:1b:b2:f2:ec:ae:af:c1:53:ee:fd:54:aa:11:ae:
35:cb:5d:a0:6d:c4:e4:44:63:3f:6c:8d:f5:2f:59:
17:7a:56:ed:09:de:3a:5d:83:34:fd:55:e5:b1:2c:
f3:06:5f:36:6e:95:7e:2a:48:fe:fe:a9:c4:9e:ef:
4e:fb:a9:f3:e8:12:e8:8e:cc:b5:31:d8:02:0e:93:
b3:77:62:ad:95:5e:c4:4d:83:19:1c:f3:2a:f8:c9:
a1:9c:54:dd:b7:cc:f6:7e:3b:52:ce:99:af:88:af:
23:60:27:2e:d8:fd:17:b9:fa:41:37:1a:d8:03:46:
98:cf:f6:ed:b6:48:30:90:a4:e8:53:a5:c8:9a:61:
45:54:81:a6:86:c4:e3:b5:86:d1:e4:0a:7a:5d:89:
7b:45:da:a1:f5:8a:19:73:de:b6:ce:35:34:db:e6:
0d:c4:7a:17:bd:3b:d7:67:77:34:e1:ce:5e:a8:fa:
d8:ba:da:47:85:86:25:43:a8:3d:43:17:c2:19:68:
ec:bb:7c:29:d4:3f:65:16:75:f1:9f:ff:6d:6b:20:
c2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7E:A3:E0:D1:36:93:5D:71:5E:6D:D1:E6:8F:D7:2A:C4:03:A5:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FCFC92A1C5211F1AE3A4DEADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.26.0/23
Signature Algorithm: sha256WithRSAEncryption
76:94:31:82:58:01:04:00:de:cd:5d:e2:7d:c2:3a:14:89:be:
e4:2f:80:87:93:ec:3e:7d:94:c5:20:3e:7e:6c:8b:04:a2:74:
3b:18:c0:75:e9:73:e3:ac:92:d0:51:d1:5a:3c:74:bc:71:87:
3d:5c:86:ed:3c:e3:2b:ea:c1:10:06:32:98:fb:2b:cf:a2:e9:
92:0f:2e:11:b6:72:88:03:62:12:d0:f0:51:74:15:4d:21:67:
c0:f1:1f:dc:a5:94:79:df:dd:6c:38:dc:c5:e5:e7:7f:0b:7c:
d3:b0:de:57:30:ff:87:95:d8:90:c6:4b:b4:98:66:5b:fd:13:
75:94:db:8e:4e:c5:fe:ef:6a:97:8e:b3:5a:36:8f:5e:6d:4c:
e2:a0:80:17:fc:19:ec:62:43:ef:24:c3:e2:32:21:9a:12:2d:
ac:49:ef:26:62:94:56:dc:e1:4a:1c:77:5b:11:e6:5b:8e:84:
ad:ca:ec:f7:09:4c:fe:8d:dc:92:b6:83:1c:9d:4c:a8:fa:70:
c3:93:45:e9:cc:bc:99:f7:c6:09:14:99:2c:cf:06:10:1b:92:
76:bd:8f:56:f9:20:8a:fa:cc:b8:87:d1:c4:09:38:f2:80:8b:
58:14:ac:eb:02:50:0f:5e:5a:09:9e:94:8d:61:ef:b1:92:dd:
1f:c9:85:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:19:12 2026 by rpki-client