Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BF9AE841AB611F1A99472C3DAE4EC9C.roa
File: 9BF9AE841AB611F1A99472C3DAE4EC9C.roa (raw, json)
Hash identifier: rBafbLbIDTVJYeyNC0knde3jC5HD7o0ilwswdppfKB0=
Subject key identifier: F7:B3:A2:D5:5E:61:4E:1D:B6:16:D8:E6:8A:23:15:CE:77:A9:13:E2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE51
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BF9AE841AB611F1A99472C3DAE4EC9C.roa
Signing time: Sun 08 Mar 2026 06:18:23 +0000
ROA not before: Sun 08 Mar 2026 06:18:18 +0000
ROA not after: Thu 28 May 2026 06:18:18 +0000
asID: 401696
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114257 (0x1be51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 8 06:18:18 2026 GMT
Not After : May 28 06:18:18 2026 GMT
Subject: CN=69ad14af-f699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:49:b4:ec:bb:e2:8a:95:83:ab:90:ee:0e:fd:
0b:83:7d:2b:de:c9:da:d3:5c:a8:f3:4e:69:02:f9:
5d:c7:f4:f0:65:c7:18:68:6f:89:f1:02:1f:84:7e:
c9:81:9b:b1:72:99:54:31:61:82:8f:22:e5:cc:78:
bc:94:9a:7c:9d:f1:03:49:58:d3:20:c8:13:b4:0b:
de:2f:74:f4:e4:83:52:d1:8f:dd:cf:08:81:2c:65:
d0:53:b5:fe:c3:d2:1c:8b:8e:f0:7a:71:ea:97:5f:
8b:34:45:04:71:2d:32:8a:a1:be:ed:df:f1:43:98:
26:82:98:62:b2:ef:58:0b:a9:e5:c8:19:ce:26:48:
77:8a:3a:5f:9f:8a:de:b5:d6:53:4a:86:ac:f1:1c:
59:d4:63:86:f4:ea:69:3c:05:da:46:ad:46:7d:e6:
09:66:c2:a3:0e:9f:48:43:42:a0:4d:22:23:af:04:
11:fe:ea:05:dd:db:2c:e1:d4:19:fe:07:53:e2:c1:
bb:d7:c1:81:17:3a:1d:0e:51:1c:a6:eb:85:03:f3:
09:a0:12:12:bf:b5:74:74:6b:3c:45:8d:5e:c3:ec:
a9:a4:d5:c4:66:d1:cf:cb:09:c2:14:73:11:15:e3:
0f:c4:84:b3:e1:f0:5d:81:07:4f:4a:92:5b:93:5b:
aa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B3:A2:D5:5E:61:4E:1D:B6:16:D8:E6:8A:23:15:CE:77:A9:13:E2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BF9AE841AB611F1A99472C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
c2:f6:b7:72:13:1b:99:72:b2:4b:cf:50:38:d9:0c:36:42:89:
6a:17:41:08:e2:c3:62:3c:24:b7:b5:80:c3:92:5b:64:c1:cf:
61:ec:fe:a6:af:89:41:82:ad:e7:2e:8f:91:c5:f8:6b:74:a5:
d0:5b:da:44:08:40:a6:c2:71:f9:c7:87:e0:bd:5f:0c:d9:21:
5e:06:00:04:38:26:98:ec:c7:e8:94:b2:6c:14:b4:a2:1b:e0:
7f:40:d2:81:7b:f1:ea:d0:94:09:84:61:b5:cb:16:37:03:7e:
07:5f:81:04:3c:a5:b5:9e:45:88:17:e0:60:93:df:70:29:d9:
2a:ca:1c:e7:5c:0a:b1:85:ce:b4:d1:75:a2:3e:05:11:4f:69:
c0:44:01:2b:25:ce:ba:70:04:f5:89:e0:06:c0:13:55:4e:7d:
e9:a6:b2:b4:28:95:81:59:66:a9:5f:4a:93:f5:3b:ff:f9:07:
e5:5c:df:01:92:25:ff:96:73:b8:8c:22:40:d4:02:10:89:e0:
47:df:7b:6a:0a:8d:1e:17:eb:72:3a:fd:2f:4d:af:93:f5:ae:
d4:b4:3d:f2:e8:8e:e2:84:ad:02:ab:ae:a3:2d:3b:3b:d2:a0:
4e:2d:da:43:25:77:15:a7:f8:a9:88:f5:55:7d:c4:4b:a5:42:
48:ca:3a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:19:12 2026 by rpki-client