Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A048C4981C6911F18DBCB2EEDAE4EC9C.roa
File: A048C4981C6911F18DBCB2EEDAE4EC9C.roa (raw, json)
Hash identifier: IuktQLMrfPAFXFDvwiaRWNqjHOoF+KxzxY+ndkrXBx0=
Subject key identifier: EF:29:88:E8:1D:71:14:3E:6D:BF:E2:38:91:9D:EB:76:46:7E:DB:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BEB3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A048C4981C6911F18DBCB2EEDAE4EC9C.roa
Signing time: Tue 10 Mar 2026 10:12:22 +0000
ROA not before: Tue 10 Mar 2026 10:12:16 +0000
ROA not after: Thu 16 Apr 2026 10:12:16 +0000
asID: 61112
IP address blocks: 154.85.18.0/23 maxlen: 24
154.85.18.0/24 maxlen: 24
154.85.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114355 (0x1beb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 10 10:12:16 2026 GMT
Not After : Apr 16 10:12:16 2026 GMT
Subject: CN=69afee85-088a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:35:e4:e7:8e:c8:9e:64:6b:ef:e5:2b:b4:c5:
cf:22:0f:fc:f6:b7:69:6b:b2:f7:4a:55:a6:2a:ab:
5c:f8:68:fc:d6:a0:a0:30:5b:2f:d8:6e:5b:25:03:
99:5d:6b:63:c2:5e:54:4f:9a:d8:e9:28:12:3c:57:
07:55:e7:49:ef:19:ee:a9:7e:9c:1c:5e:e1:ef:23:
72:03:04:31:d8:11:0d:ab:56:35:fd:a0:2a:54:eb:
f1:22:5c:a2:f1:b7:68:a7:d2:f2:15:1a:43:84:d3:
c0:ae:8b:0d:0d:b2:1d:20:88:70:4b:18:be:04:ef:
a3:93:fa:de:48:37:22:71:c5:62:65:52:a5:6f:b0:
6e:60:3b:a1:2b:f2:a4:a2:92:83:80:8d:d9:c0:e4:
15:8e:93:d9:f9:43:e7:e0:63:1b:23:ef:b5:da:70:
9a:ac:3b:c1:9f:00:d2:da:b7:fa:dd:b3:38:5c:c3:
c7:23:17:33:fd:a5:1e:55:f0:59:51:5e:15:96:10:
8f:78:2c:f2:ca:55:f1:ef:92:be:aa:23:56:db:79:
45:c0:7c:31:2f:16:73:ce:78:b3:61:ff:87:2c:e8:
94:08:65:c1:a0:78:1a:96:78:23:76:8c:a1:3e:69:
24:6b:1a:b9:65:f3:9b:6b:9c:c3:b6:ff:6f:8c:53:
93:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:29:88:E8:1D:71:14:3E:6D:BF:E2:38:91:9D:EB:76:46:7E:DB:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A048C4981C6911F18DBCB2EEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.18.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:df:dd:d1:69:95:21:0c:8d:61:78:a9:93:f9:3f:da:d7:20:
78:4b:f9:65:58:35:f0:8a:df:cf:49:db:00:a2:d5:ba:36:d2:
17:6b:f8:81:6b:90:e0:c2:e7:4f:fd:98:f1:0a:72:8f:71:e4:
cc:30:a9:34:1f:b3:6e:8d:f4:8a:93:df:b1:fa:aa:2d:4d:52:
3e:65:84:4e:95:62:a8:81:fc:3b:f7:57:61:84:ee:4b:df:f2:
e2:29:52:4e:ea:95:e0:0c:8a:36:d0:ca:f2:73:a7:51:bf:20:
1c:09:98:4a:e2:3f:78:ab:cd:bb:f5:46:60:90:ea:28:cc:68:
34:a3:ac:44:c7:c9:74:91:75:e7:75:5a:0c:d5:1d:57:c2:ac:
49:58:6a:13:8b:fb:2e:6b:f2:a0:f7:d2:e7:13:1e:96:c3:1d:
36:65:6c:7e:57:26:62:23:53:8a:3f:51:c6:73:61:61:45:15:
fe:22:74:3e:e1:8d:e6:b1:f3:98:d0:35:ec:0d:42:d3:15:4f:
14:72:54:f3:23:ce:a8:16:ed:b5:29:2b:1f:fb:52:9d:16:3b:
c9:a2:e3:05:17:7a:df:2e:57:99:bd:8d:b6:52:df:ad:e9:6c:
f1:94:50:37:cd:bd:1b:94:99:58:6b:06:9e:97:3d:a1:b9:c9:
cf:b2:3e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:34 2026 by rpki-client