Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF34B390197B11F1B2C562A5DAE4EC9C.roa
File: AF34B390197B11F1B2C562A5DAE4EC9C.roa (raw, json)
Hash identifier: ZPMG8Gz3lfAMDHbAOWii6AtJxoprGkw6v8Q9ySWLTKI=
Subject key identifier: FF:89:AA:E8:33:B6:77:66:C6:A0:8E:06:76:90:46:3F:D3:20:0C:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE15
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF34B390197B11F1B2C562A5DAE4EC9C.roa
Signing time: Fri 06 Mar 2026 16:44:04 +0000
ROA not before: Fri 06 Mar 2026 16:43:59 +0000
ROA not after: Sat 21 Mar 2026 16:43:59 +0000
asID: 1405
IP address blocks: 154.83.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Mar 2026 00:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114197 (0x1be15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 6 16:43:59 2026 GMT
Not After : Mar 21 16:43:59 2026 GMT
Subject: CN=69ab0454-0d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:af:f6:dd:3f:80:37:d5:78:80:9d:d3:b2:c1:
c7:8e:4e:45:67:34:25:fa:ca:4d:68:8a:35:40:16:
91:12:35:9a:88:cf:97:0c:e6:fa:b4:3b:e2:e2:09:
f5:c4:e5:6a:cf:c3:fd:c5:7b:21:c4:3b:38:ac:5f:
f5:05:f4:5e:30:22:0b:df:ed:ef:2c:c4:7d:8c:fd:
13:c3:21:14:e4:cc:e0:16:59:c3:66:63:da:19:54:
ed:12:9b:df:d9:4a:ef:e3:57:69:e2:7c:37:26:40:
22:03:d8:be:d2:b1:f4:2b:08:af:b8:e1:d7:a7:15:
fe:ba:1e:e6:39:67:c6:73:7a:22:14:bc:4b:4f:65:
32:a4:cc:ea:17:b0:b8:d1:68:66:87:15:bc:9e:9e:
5e:77:ed:cd:f9:5d:09:3e:22:a3:e3:82:32:d9:63:
e7:20:31:c9:cc:4b:e3:43:43:a0:7b:41:52:3b:07:
f4:68:78:cc:19:fc:3a:15:42:62:6d:e0:b4:8d:47:
35:06:48:4c:2a:1b:bf:ab:56:a1:fc:25:ea:95:4d:
44:e4:87:02:9f:ec:21:4a:37:e3:fe:bc:0b:dd:ed:
af:10:ad:db:1f:5f:df:6e:30:fb:2e:dd:ba:ba:14:
6d:21:f4:52:10:6e:31:3f:7f:57:33:dc:13:f6:24:
f4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:89:AA:E8:33:B6:77:66:C6:A0:8E:06:76:90:46:3F:D3:20:0C:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF34B390197B11F1B2C562A5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.88.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:73:52:f0:83:78:13:ab:23:82:79:3b:aa:c7:dd:8f:e3:5c:
d9:bb:cf:4f:1d:44:3f:f4:3f:1a:d7:a5:eb:03:63:3e:47:a4:
b2:59:29:eb:7d:0f:7c:2a:14:a5:1a:73:cc:6a:d9:b3:c6:ae:
40:67:2d:90:55:7e:1b:e0:01:68:3d:f9:fd:07:47:e9:9c:38:
99:de:b9:86:c6:41:1f:c7:16:64:bb:0f:b7:48:6c:3b:00:74:
65:56:2b:bc:42:6d:0f:4f:54:1d:81:13:e0:6b:39:a8:e8:26:
ea:8d:8c:7b:ec:e9:89:c9:37:61:ba:4f:5d:bb:0b:2e:ce:e3:
df:fe:b7:fa:7f:49:9b:a3:94:41:88:37:db:ae:2c:ab:07:5c:
07:28:ea:dd:7b:fd:59:5e:94:a9:e2:09:f6:1a:f2:48:d8:77:
a6:1b:0f:e8:4f:a2:fe:70:14:07:ff:8f:f1:49:0b:1d:01:94:
e0:1a:f3:cf:08:f7:34:c8:21:57:3e:0b:3b:f2:3a:3d:b4:65:
7e:c3:b4:18:0d:19:5f:8b:58:43:d4:ed:62:1c:22:35:6d:73:
73:07:d9:c1:dc:0d:1f:c0:d9:ec:8e:61:79:28:59:58:91:17:
b6:47:5c:89:41:1b:e3:4c:92:4e:65:f8:c6:0b:b7:b9:b3:f1:
c8:28:d1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 04:54:20 2026 by rpki-client