Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DD731D619F811F1AD71CCB1DAE4EC9C.roa
File: 9DD731D619F811F1AD71CCB1DAE4EC9C.roa (raw, json)
Hash identifier: qgBTGEENZcKo/UpVPXijLlfyMlhoP72NDf9RXs0TipI=
Subject key identifier: A5:13:30:B9:FF:2F:6A:68:97:82:03:D2:DD:93:03:8A:4F:4D:29:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE28
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DD731D619F811F1AD71CCB1DAE4EC9C.roa
Signing time: Sat 07 Mar 2026 07:38:22 +0000
ROA not before: Sat 07 Mar 2026 07:38:17 +0000
ROA not after: Thu 04 Jun 2026 07:38:17 +0000
asID: 142403
IP address blocks: 154.221.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114216 (0x1be28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 7 07:38:17 2026 GMT
Not After : Jun 4 07:38:17 2026 GMT
Subject: CN=69abd5ee-805b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:08:13:88:46:bd:f8:99:ca:8d:1d:00:cb:10:
2a:2a:6b:43:94:44:63:1d:6f:b4:62:10:bb:9c:d3:
d4:9a:7c:59:b5:1b:b9:50:1a:c8:5e:17:1e:2b:c2:
90:e1:09:53:23:c6:b5:34:39:fd:c5:a5:75:46:77:
15:1a:d7:54:d9:74:d1:f7:ec:25:3f:39:d3:19:6d:
c2:9e:e7:6c:7c:ea:76:75:df:cb:8e:fd:f5:dd:76:
98:f2:7b:84:b5:b1:6d:94:74:93:ec:b2:07:6d:89:
ed:16:39:7b:eb:7f:4e:19:4d:ea:d6:4e:a5:a7:6b:
89:97:c1:1b:ff:d4:2e:f9:a9:93:89:eb:5b:3c:a8:
83:66:b3:14:f5:90:7b:44:74:d0:90:bd:47:81:56:
5a:18:f3:eb:0f:fc:d2:3c:79:9c:83:57:06:be:2f:
47:7a:3a:e5:05:97:af:87:91:96:d6:5b:78:68:03:
a7:a9:2f:25:53:92:51:50:9f:88:86:7f:6b:bb:42:
5e:93:ff:4c:7d:04:c3:51:18:38:7d:e8:c1:6f:9b:
68:b8:1d:8b:bf:f1:ac:63:bd:1c:eb:de:d9:f4:23:
1d:05:da:a7:a1:bc:22:21:74:91:02:37:85:c8:f2:
5d:95:c8:bb:7e:25:2a:1f:37:06:a6:0d:3d:97:92:
48:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:13:30:B9:FF:2F:6A:68:97:82:03:D2:DD:93:03:8A:4F:4D:29:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DD731D619F811F1AD71CCB1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.31.0/24
Signature Algorithm: sha256WithRSAEncryption
22:84:d6:6a:06:9e:99:d9:dc:df:04:a2:51:4c:a9:05:e2:f6:
a8:a0:a4:d7:47:6c:20:f6:f2:a6:57:84:54:6b:32:7d:6b:a9:
b2:65:14:9e:52:dd:6a:61:5e:09:e1:23:31:8b:e4:72:09:98:
45:eb:57:97:4e:e4:17:b4:14:16:fa:56:b9:c9:dd:ca:bb:f9:
6b:62:43:ba:d8:de:a3:bc:5a:2c:a1:ec:26:4e:3c:cb:bc:a0:
a8:4a:f5:53:70:38:48:09:4f:df:95:0f:e7:85:40:b0:33:8a:
57:1c:ca:c5:97:7d:39:9f:1b:07:13:8d:93:dd:d9:6a:b8:9d:
45:0b:e3:e1:ad:c1:06:f2:e7:bb:57:91:0e:d1:89:e9:84:2f:
8b:b4:22:3e:f8:2b:ad:9a:25:08:13:e7:6a:5d:7b:d0:5d:3f:
fd:f2:c5:0b:48:9b:89:38:bf:fb:47:da:dc:b9:03:d8:21:00:
a6:d1:a2:15:8c:c2:30:02:2f:d9:77:b8:10:68:40:61:0a:e8:
25:34:76:b4:80:67:f9:62:ed:7a:83:4b:f1:c3:25:6c:ed:36:
cf:26:ff:70:5a:82:c2:a0:83:92:bc:5d:17:e1:2a:8c:07:ed:
f7:77:79:b8:b1:d8:ad:e9:30:d0:f9:d2:af:54:bc:33:f0:7e:
f5:45:e2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:19:13 2026 by rpki-client