Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C64658221DA11F1A5B736B4DAE4EC9C.roa
File: 9C64658221DA11F1A5B736B4DAE4EC9C.roa (raw, json)
Hash identifier: WdVAHBnPcGoBxCslnQx6IAh5zJeUjnwo4dLxmhbrZrk=
Subject key identifier: F2:A6:E9:07:9F:94:08:A4:97:E4:09:1C:7A:0C:9C:4D:42:55:EF:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF8D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C64658221DA11F1A5B736B4DAE4EC9C.roa
Signing time: Tue 17 Mar 2026 08:23:44 +0000
ROA not before: Tue 17 Mar 2026 08:23:38 +0000
ROA not after: Sat 09 May 2026 08:23:38 +0000
asID: 147176
IP address blocks: 154.197.102.0/24 maxlen: 24
154.197.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114573 (0x1bf8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 17 08:23:38 2026 GMT
Not After : May 9 08:23:38 2026 GMT
Subject: CN=69b90f90-4621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f9:a5:f1:79:e3:86:3e:2a:10:2b:f5:ee:68:
12:a5:5f:c0:f8:5d:8a:d4:ff:1c:47:6f:ea:54:e8:
23:25:eb:be:d1:f1:f0:56:07:e6:89:71:de:7d:44:
6a:f7:db:4d:6d:3b:c5:0c:f4:1a:0e:f5:c0:0b:a8:
63:32:48:68:12:73:71:b4:d0:51:06:1c:fd:9d:58:
49:6b:d2:89:c0:06:2b:b0:95:c4:ef:9a:36:89:ef:
8a:f5:68:6e:06:e3:69:c0:0c:10:ed:c1:74:ee:26:
f5:30:57:16:07:62:3e:de:cf:2b:a7:87:2d:b0:7d:
e4:5d:1b:36:03:a6:ec:bb:c7:f9:70:ef:28:74:16:
4b:0f:9d:f9:d4:cd:ec:c8:8a:ed:28:ee:33:08:94:
cc:fd:96:df:12:86:df:dc:25:3d:26:25:94:0b:87:
33:62:58:55:8a:61:1b:5c:5b:d8:72:90:fe:6f:e1:
a8:dd:7b:1e:44:4e:76:2c:1a:e0:65:bc:8d:a8:15:
3b:f6:bb:62:49:5c:a0:20:91:85:a6:39:e4:7b:57:
de:84:7d:4e:74:81:aa:2c:48:67:1e:b6:2d:9d:56:
e6:8d:91:d8:66:49:39:2b:1f:56:8b:11:10:f5:61:
7e:ca:eb:62:8d:75:38:13:57:52:62:0f:6b:a1:0c:
ce:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A6:E9:07:9F:94:08:A4:97:E4:09:1C:7A:0C:9C:4D:42:55:EF:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C64658221DA11F1A5B736B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.102.0/24
154.197.116.0/24
Signature Algorithm: sha256WithRSAEncryption
85:7e:88:9c:c1:49:75:06:b4:9f:1d:6c:91:4d:1d:f5:1a:7a:
75:48:d0:3d:b3:f3:5d:42:3f:b7:94:4f:40:37:ac:f0:40:23:
26:8c:2b:c0:43:f2:41:db:45:32:3d:84:14:41:04:e9:c5:21:
30:15:b2:06:3f:34:95:15:a0:9a:ba:ba:97:cb:51:fe:68:61:
8d:c9:5f:c7:5f:37:be:23:4d:1b:6a:70:a2:a4:fe:99:c3:e5:
0d:77:7d:23:ea:25:2c:f0:ab:91:d9:3d:ba:05:d5:5e:87:dc:
3a:43:39:8a:18:d6:ed:65:da:f3:4f:40:ac:3b:2b:d7:14:96:
70:1c:fb:cd:3b:88:31:61:28:87:eb:fa:d4:eb:13:04:c9:db:
ca:a9:1e:10:29:bd:a7:07:33:fd:5a:9c:85:d8:a4:34:85:95:
90:4d:2d:6e:97:ed:e9:d5:18:c6:17:f4:4a:3a:e3:87:4a:06:
b2:c5:3f:b9:05:54:16:47:44:12:62:f2:d5:d0:3e:85:ab:b0:
ff:e1:2b:28:f8:1e:09:c7:0f:87:61:54:4f:06:3c:4a:5a:f6:
88:22:6e:7b:70:9d:8b:5f:21:ee:74:32:a2:ba:91:6c:c2:8a:
2b:28:ed:b7:b0:2e:7f:a7:0d:a9:fe:ca:a7:94:be:f7:6e:28:
9a:2e:a6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:49 2026 by rpki-client