Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/948B49681AB211F1817E4DABDAE4EC9C.roa
File: 948B49681AB211F1817E4DABDAE4EC9C.roa (raw, json)
Hash identifier: aKb2S/yP5sGjuIG5481LuLb90dPeIWDbtO75arSyMjA=
Subject key identifier: DD:0F:83:9D:19:8C:B8:10:76:11:1A:8B:39:A5:18:C0:F4:E5:4C:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE45
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/948B49681AB211F1817E4DABDAE4EC9C.roa
Signing time: Sun 08 Mar 2026 05:49:33 +0000
ROA not before: Sun 08 Mar 2026 05:49:28 +0000
ROA not after: Tue 14 Apr 2026 05:49:28 +0000
asID: 17561
IP address blocks: 154.200.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114245 (0x1be45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 8 05:49:28 2026 GMT
Not After : Apr 14 05:49:28 2026 GMT
Subject: CN=69ad0ded-626c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ae:d4:01:1b:fc:fd:10:c8:a4:91:74:c1:b1:
d4:ca:35:da:05:fe:2b:4f:ca:b1:45:1b:97:0a:44:
59:1c:2b:da:e6:1f:1f:30:b4:15:d9:42:7f:bc:1a:
79:6c:33:1b:a1:ab:73:70:6d:04:18:6d:71:a5:ff:
db:b5:de:e9:87:5b:8f:cc:33:5f:48:21:95:0d:be:
4b:04:9f:31:e6:a2:5a:34:12:d8:b0:58:27:e9:84:
0a:18:ba:b1:8d:94:8d:14:44:e4:3d:db:f9:3f:1b:
c9:9c:5c:b0:9d:f5:c8:0f:dc:49:8a:28:5e:ab:3c:
8a:26:44:5a:86:1d:17:a5:6d:91:6b:4a:6e:e3:e1:
29:ce:4b:0b:48:e8:93:0b:e8:e5:76:c2:38:8e:22:
3a:8e:27:48:58:a3:cd:31:34:87:5a:be:42:b3:5f:
5a:0b:38:0c:e6:51:2c:c7:ca:f8:c3:2c:2f:42:4e:
28:ed:a0:a8:f2:84:55:3a:bc:72:60:54:bc:0a:72:
c6:ce:6f:d0:21:a1:9f:5b:1b:04:ba:81:91:1e:7b:
b8:17:08:cc:3d:97:e7:20:90:45:d9:4b:28:9d:de:
0a:1b:3a:bf:88:fe:b9:b4:78:e2:1d:34:16:f5:9a:
af:5a:5d:23:b6:9d:58:b7:02:0d:ec:df:92:06:70:
db:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0F:83:9D:19:8C:B8:10:76:11:1A:8B:39:A5:18:C0:F4:E5:4C:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/948B49681AB211F1817E4DABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.151.0/24
Signature Algorithm: sha256WithRSAEncryption
79:7c:e1:92:37:a8:f5:36:9a:58:14:2b:4a:17:34:a9:75:e2:
98:05:47:72:e1:49:a3:0b:0c:cc:31:58:dc:ce:0f:df:a5:98:
a7:ab:9d:78:c3:c6:03:5a:d0:c6:b3:53:ee:20:f5:db:d4:f9:
db:59:57:ea:37:15:be:94:72:68:d1:02:05:82:11:d4:09:73:
34:bd:da:12:59:8e:c3:37:c2:65:8b:00:5a:90:48:6e:71:08:
8a:f7:a9:d5:06:3b:c7:a8:80:78:c6:66:62:c8:55:39:56:c6:
dd:0b:70:8b:be:48:94:a8:06:97:54:ed:37:72:1c:f6:0f:17:
ac:a8:46:d9:86:a4:06:cf:19:5e:3e:d4:41:36:2c:8e:50:18:
7c:f6:5a:72:0c:95:51:4b:75:22:0c:ed:1e:51:67:8d:a3:51:
57:2a:bc:56:0f:b5:27:be:47:7c:64:d1:3d:99:93:d4:34:49:
67:2f:a5:0f:81:14:d3:92:97:9a:60:ba:19:8a:7c:39:4d:01:
c3:50:35:49:d8:5f:88:d9:e4:08:d3:61:16:37:17:81:33:e4:
60:10:f6:e8:f9:01:40:c6:98:b3:fa:29:45:ec:25:48:56:87:
35:aa:b9:48:2d:10:46:dd:72:0c:ed:81:3c:93:c0:2a:6e:78:
13:35:cb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:20:34 2026 by rpki-client