Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A25763281C6611F1B10763DDDAE4EC9C.roa
File: A25763281C6611F1B10763DDDAE4EC9C.roa (raw, json)
Hash identifier: nQsZRvfyYJZZwLE9UrcXSPZxdLGCdQVJUcMnrPI6ZGs=
Subject key identifier: DE:8B:6C:2F:1F:CF:69:65:2C:24:19:65:F3:85:53:17:91:BF:E6:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BEAB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A25763281C6611F1B10763DDDAE4EC9C.roa
Signing time: Tue 10 Mar 2026 09:50:56 +0000
ROA not before: Tue 10 Mar 2026 09:50:52 +0000
ROA not after: Thu 09 Apr 2026 09:50:52 +0000
asID: 151352
IP address blocks: 154.82.136.0/23 maxlen: 24
154.85.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114347 (0x1beab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 10 09:50:52 2026 GMT
Not After : Apr 9 09:50:52 2026 GMT
Subject: CN=69afe980-36f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:80:20:bc:aa:e8:6d:9d:5d:4b:01:37:e8:ba:
9a:a8:3c:d4:23:b6:1f:a7:55:7b:bd:8c:22:8d:f3:
64:64:be:66:b7:0d:d4:00:0b:f8:35:c3:71:1b:e2:
72:da:8b:8e:56:2c:c5:b7:21:48:d6:42:dd:71:7f:
6e:b6:5c:0c:57:b6:72:89:af:df:93:ef:1b:20:1d:
3c:88:0e:58:e3:87:ea:57:cb:2d:2a:8d:3e:5a:83:
66:da:f1:9f:64:13:3c:c4:fe:70:06:5d:12:09:e5:
f8:a0:53:36:82:c5:1f:d2:0f:b1:42:0f:ee:b2:61:
cd:ae:0b:dd:c6:3c:6a:f5:68:b6:0e:ae:ed:9d:c7:
9c:00:38:89:45:df:76:4c:db:68:4c:d0:35:02:37:
9c:a7:2d:ca:f4:ae:33:9b:36:2e:4e:84:b9:66:8e:
ef:8f:16:15:d2:d0:1c:55:17:d9:7d:7c:a1:90:14:
c4:7b:8c:08:45:7c:ed:69:58:64:23:a5:e7:fd:e2:
4f:8b:c5:99:f2:03:78:69:76:3f:9a:99:d8:22:83:
97:a1:9b:9c:87:3b:1e:6d:e9:b2:98:57:46:49:a9:
1c:28:f3:fd:52:0a:5b:17:8b:ec:0d:aa:eb:30:68:
c5:1b:0f:95:9e:12:d0:5f:d7:9d:b7:4e:5b:a8:1c:
76:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8B:6C:2F:1F:CF:69:65:2C:24:19:65:F3:85:53:17:91:BF:E6:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A25763281C6611F1B10763DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.136.0/23
154.85.20.0/24
Signature Algorithm: sha256WithRSAEncryption
68:97:a2:8a:71:fd:9f:6d:89:b9:7f:11:d1:40:01:50:d0:43:
a6:5d:54:60:d1:62:8e:a0:af:d0:b4:12:ad:98:cb:10:cf:b9:
d1:06:3c:33:31:3d:6b:13:50:e2:9b:aa:a6:01:f3:4d:42:67:
1e:f4:2c:9c:78:24:d8:af:ea:54:a7:e3:93:a6:b0:37:ff:7d:
12:9c:fa:14:65:5a:bd:11:fe:88:b3:6a:18:d5:63:74:ca:75:
5e:9c:59:ca:af:58:db:3b:11:51:95:79:af:fa:e4:7d:83:bd:
69:99:36:ed:07:06:e9:02:c3:69:58:35:91:48:35:16:d4:c4:
79:c8:61:b0:64:de:d6:19:77:96:3b:85:9a:ec:7a:e2:7c:9b:
db:dd:b4:8f:1f:ea:6c:eb:87:a8:fc:3d:51:7a:e9:43:4d:0f:
c4:36:1e:7f:27:42:43:6b:82:05:b6:86:52:dd:8c:65:38:37:
ae:9e:3d:02:90:0b:0d:a5:45:45:d8:22:68:8d:53:bb:a1:75:
0f:71:a5:69:cc:92:3f:f9:49:fc:e0:90:a8:8b:cf:4f:49:b9:
de:aa:5c:14:33:0f:e6:03:63:0e:6c:ae:5e:45:a5:66:9f:7f:
3d:58:d1:ca:ed:8f:5c:58:f4:bf:03:3d:9b:94:42:97:47:a2:
28:5b:c9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:19:48 2026 by rpki-client