Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A561606170C11F19D04B8ADDAE4EC9C.roa
File: 9A561606170C11F19D04B8ADDAE4EC9C.roa (raw, json)
Hash identifier: tTXn+Hry7RPYoLWxKW44dVb6Ym5oNPGCNM9UsWhblVs=
Subject key identifier: 4D:57:D3:15:85:84:BF:B3:90:1A:CD:9D:F4:4E:FE:51:73:86:83:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BD3C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A561606170C11F19D04B8ADDAE4EC9C.roa
Signing time: Tue 03 Mar 2026 14:23:52 +0000
ROA not before: Tue 03 Mar 2026 14:23:48 +0000
ROA not after: Fri 10 Apr 2026 14:23:48 +0000
asID: 137899
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Mar 2026 00:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113980 (0x1bd3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 14:23:48 2026 GMT
Not After : Apr 10 14:23:48 2026 GMT
Subject: CN=69a6eef8-ac80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:0d:73:39:ec:f6:d2:fd:87:49:d2:b9:12:
e8:ae:95:45:4a:48:a8:af:f7:61:2e:aa:15:fd:46:
67:4a:e8:45:39:a6:0a:55:d1:88:b9:50:d2:fc:79:
02:7e:01:d4:5c:fe:e6:c0:03:4c:40:99:12:f8:a8:
f9:b5:55:10:aa:7d:3f:21:e7:7b:b9:61:92:9e:31:
bb:db:80:f5:22:42:52:d2:6c:c3:3e:78:14:ee:39:
8a:21:13:cc:6e:fc:61:da:1b:4e:e4:c9:74:7d:ae:
f9:db:eb:47:a8:58:de:f2:11:e1:34:10:82:9d:c7:
e3:39:fa:9c:9e:2f:c8:72:11:80:4d:49:85:a7:39:
d7:cb:7d:a7:9d:8e:fb:1f:ad:0a:92:89:66:86:a2:
f6:be:a0:db:fc:db:76:b0:ea:f4:52:7d:58:5a:41:
0d:2d:65:f9:61:d9:7c:ba:18:38:33:f9:9d:44:60:
6a:83:55:68:70:0b:1d:ae:8d:d3:3c:28:ef:ca:29:
e2:f1:67:17:ae:fb:96:85:43:d4:e5:61:76:1c:69:
51:0d:14:bd:20:81:b9:e8:e6:ec:ad:8b:47:bf:de:
47:af:aa:b1:9b:8b:3d:b6:18:9b:5e:11:d4:dc:8e:
ed:62:8f:ee:53:fa:b3:53:21:90:89:ad:7f:3a:32:
f0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:57:D3:15:85:84:BF:B3:90:1A:CD:9D:F4:4E:FE:51:73:86:83:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A561606170C11F19D04B8ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
3f:eb:19:4f:7e:a2:de:62:55:6d:11:58:5d:56:5b:83:92:fa:
87:7e:42:b0:c4:03:e4:15:60:4e:4e:28:dd:5c:a1:e5:78:2c:
5c:11:f3:98:d5:a4:e4:ff:1e:8c:17:53:68:b1:26:8b:e9:5d:
0e:95:bc:f2:71:95:3f:2e:31:ae:6a:01:f4:33:c9:ea:63:23:
0e:14:eb:ca:be:1c:92:95:d1:b2:a8:af:ec:28:f5:45:e8:38:
82:89:37:6b:4a:db:59:f9:70:53:54:09:93:cd:65:a3:35:50:
10:cb:fc:a8:bb:f8:c0:fc:11:47:9c:94:98:51:d5:e7:df:eb:
b1:16:33:65:64:b3:1f:df:44:ab:31:7c:2d:f5:85:14:59:b2:
cb:0a:b6:9b:e4:21:ea:86:60:27:d3:d8:32:c3:0e:08:9e:73:
e9:14:a0:6a:95:f2:49:3f:82:ab:fa:22:fb:0b:ee:ba:9e:77:
87:a0:d5:26:6b:27:ec:16:16:40:64:c2:f9:c2:02:7c:51:e1:
f0:b6:ad:93:a8:02:a0:1f:ee:36:b2:e2:06:fe:7c:e7:fe:b7:
e9:d5:a3:20:0b:71:26:43:f2:b9:43:76:f6:dd:07:95:85:0e:
38:67:e4:2a:9f:19:86:44:7f:95:89:6f:a2:e7:fb:c9:8b:8d:
b8:21:19:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 13:55:03 2026 by rpki-client