Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C7C667C29D311F19943EFACDAE4EC9C.roa
File: 9C7C667C29D311F19943EFACDAE4EC9C.roa (raw, json)
Hash identifier: cBGWIHsBTjey5S1dU9xxTXKL+ll3a774JIelfDIJ9QE=
Subject key identifier: B9:A1:5E:CF:61:E1:C8:7C:51:D6:74:5F:FF:5E:6D:FE:FA:87:1B:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C12C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C7C667C29D311F19943EFACDAE4EC9C.roa
Signing time: Fri 27 Mar 2026 11:53:47 +0000
ROA not before: Fri 27 Mar 2026 11:53:42 +0000
ROA not after: Fri 01 May 2026 11:53:42 +0000
asID: 2914
IP address blocks: 154.83.11.0/24 maxlen: 24
154.92.199.0/24 maxlen: 24
154.92.206.0/24 maxlen: 24
154.92.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Apr 2026 08:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114988 (0x1c12c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 27 11:53:42 2026 GMT
Not After : May 1 11:53:42 2026 GMT
Subject: CN=69c66fcb-320b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:18:a7:64:25:2f:48:c5:7a:43:e1:b9:2c:
f0:c6:b9:70:06:94:e6:49:2a:17:49:d7:04:45:38:
03:a4:8a:7d:e6:35:e8:9c:46:b7:86:6c:26:ce:b6:
aa:ac:09:9f:bb:64:23:47:55:a3:6b:c1:9a:46:b6:
80:66:56:e8:10:e5:00:5c:96:31:81:bd:00:51:db:
e0:65:47:c8:0d:18:0b:77:e7:14:f4:10:fa:63:13:
3a:b6:2d:fa:cc:a9:1f:24:65:58:f0:a7:1c:81:84:
fa:99:47:e7:17:6c:fa:74:b4:a1:e9:01:6d:5a:b2:
9c:24:9e:ef:f8:42:2f:fc:62:42:4e:46:a5:6c:dc:
80:7e:d3:21:27:ba:d8:46:f6:c2:4c:6d:96:83:56:
40:da:8b:e8:04:9c:82:2b:0f:75:ff:ce:70:39:46:
b8:73:4d:80:79:6b:d0:5b:b4:aa:73:b5:c8:28:29:
ef:58:ff:f7:0a:52:ed:56:8d:97:7b:93:e6:27:5f:
9a:da:94:a1:6b:fc:64:36:4d:35:dd:6c:ac:3e:6b:
f6:37:f5:48:50:00:fb:45:e4:fd:a0:80:00:df:ec:
29:bc:c7:a2:fa:c4:73:65:74:c7:9e:8f:8e:c5:3d:
c5:fb:e8:9f:ab:9b:2b:ac:eb:e4:87:24:24:50:e4:
3e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A1:5E:CF:61:E1:C8:7C:51:D6:74:5F:FF:5E:6D:FE:FA:87:1B:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C7C667C29D311F19943EFACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.11.0/24
154.92.199.0/24
154.92.206.0/24
154.92.208.0/24
Signature Algorithm: sha256WithRSAEncryption
98:b7:0a:61:5d:ee:f5:90:4f:56:bd:87:3c:98:2b:fe:26:62:
86:f2:d9:d5:e9:11:f4:0a:2e:0e:8f:9c:99:8c:60:e2:e6:dc:
77:c8:6f:9f:00:1b:85:53:bb:0b:bb:eb:a2:a3:97:b3:ad:8a:
4a:05:93:bc:8f:d2:13:b3:89:10:59:d3:66:f4:c7:bb:bf:8e:
bf:be:39:e1:07:81:f9:e3:99:5f:3c:80:c7:fa:b1:c8:ff:b3:
9e:9d:c9:d4:aa:cf:3a:92:ae:04:ee:f9:53:7f:a5:34:db:b6:
06:fb:db:9a:78:4a:00:8c:f0:b3:2c:c5:22:e1:6f:3e:de:95:
0a:49:e8:72:dd:05:bc:0e:7c:14:80:a3:81:38:83:6f:c1:c4:
f2:be:18:2f:0d:82:73:5f:f9:07:d4:0f:dd:45:a6:93:fd:e5:
87:55:0e:a0:37:f8:1a:81:1a:68:da:3d:da:82:a6:ff:ee:b4:
76:05:1e:3b:07:32:3c:56:3f:71:8e:68:c6:9d:d8:e4:6a:83:
76:07:cf:2b:62:68:61:54:c3:44:a8:51:f1:81:37:ae:59:b9:
56:36:ab:ed:fe:29:a2:ad:90:62:43:2d:de:95:57:e3:a2:04:
7a:77:97:0e:6f:8a:92:8f:88:d6:75:8d:f9:55:62:e7:dd:65:
d5:e5:60:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:50:12 2026 by rpki-client