Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF2C7D58161C11F1A3E3F4EFDAE4EC9C.roa
File: BF2C7D58161C11F1A3E3F4EFDAE4EC9C.roa (raw, json)
Hash identifier: 9QRDzLfO/vbJ+ATqdpu12nYmNY2H2mGu/tcw8izte7w=
Subject key identifier: 8C:6F:6B:8C:12:30:29:7E:5D:8B:D8:1C:A0:D5:0F:90:C2:94:93:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BCE9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF2C7D58161C11F1A3E3F4EFDAE4EC9C.roa
Signing time: Mon 02 Mar 2026 09:46:55 +0000
ROA not before: Mon 02 Mar 2026 09:46:50 +0000
ROA not after: Mon 13 Apr 2026 09:46:50 +0000
asID: 272854
IP address blocks: 154.194.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Mar 2026 00:06:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113897 (0x1bce9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 2 09:46:50 2026 GMT
Not After : Apr 13 09:46:50 2026 GMT
Subject: CN=69a55c8f-fce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9d:79:e3:1e:5f:d8:8f:b5:47:b1:86:b4:0c:
77:d5:c7:01:c9:ac:1f:9b:4c:62:0a:aa:3a:ae:2a:
47:6b:59:60:a8:32:7d:85:86:79:e0:ba:78:d4:9f:
61:1c:89:ae:2f:78:0a:e2:de:66:24:9a:1c:27:5c:
e0:75:2f:55:b9:46:80:3c:b9:a2:bf:50:6a:79:e7:
55:dd:83:78:f7:4e:1f:7b:b1:e8:41:d2:23:7f:d1:
83:ae:86:c0:6c:8e:14:bb:c4:ce:bf:17:c5:7c:2d:
f1:c7:87:e0:3e:89:2a:f0:66:9d:e1:ea:33:06:fc:
89:20:6e:ce:44:d0:99:42:e5:b1:78:2e:33:13:6f:
0f:6e:79:4b:c9:0e:38:00:c0:e8:11:8e:a1:25:3a:
00:93:c9:eb:4a:36:cc:b6:9e:c7:97:68:23:20:ce:
74:21:f5:c0:9a:8b:71:78:50:b4:d9:8b:dd:1f:a6:
b2:00:85:ef:46:e9:74:3c:5b:a3:8c:e8:80:cb:7a:
51:d2:55:4c:6f:a7:0b:09:49:55:74:01:fe:27:ea:
41:2c:fd:2e:3b:46:da:08:d5:d8:4f:00:56:34:45:
72:38:f9:a7:85:fe:fc:4c:62:48:8f:d1:75:3f:4e:
02:af:91:e0:11:a8:40:07:6c:ce:b4:41:a9:55:ee:
05:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6F:6B:8C:12:30:29:7E:5D:8B:D8:1C:A0:D5:0F:90:C2:94:93:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF2C7D58161C11F1A3E3F4EFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.44.0/24
Signature Algorithm: sha256WithRSAEncryption
20:ae:43:e7:51:16:4a:92:ec:0b:76:63:4a:57:a5:1a:d0:53:
3f:27:a2:af:ac:01:28:15:14:5e:3b:ce:db:c9:07:2b:fb:cd:
61:06:68:75:fe:06:c7:54:d3:56:f5:0c:4f:ca:3f:bd:b9:1a:
bc:aa:b1:b6:0a:df:94:93:02:6c:7c:2f:54:34:a4:2a:f7:59:
b5:c3:bc:40:1b:b5:d6:be:0b:61:ca:aa:5e:e7:33:4b:9c:dc:
23:13:e1:0c:20:11:5f:14:55:64:68:d7:54:eb:eb:ff:fa:73:
fd:4e:d8:cc:71:68:95:0d:02:9a:4a:37:c3:d8:11:7b:db:9c:
55:ec:28:ee:9e:13:32:53:85:7f:6b:36:84:b3:65:be:1a:28:
f5:11:5a:fd:d4:a6:39:72:fd:14:a8:d5:66:93:70:bc:e5:08:
8b:a3:24:4c:56:81:3c:bb:f5:71:e5:ae:05:fb:46:01:bb:91:
73:23:a0:3a:bf:2d:5a:70:9e:f9:c9:9d:c2:bf:e0:ed:cc:ad:
fc:9f:d4:cc:d3:d8:fa:61:bb:a9:d1:c4:16:29:19:08:42:35:
06:77:7a:0f:64:b8:98:74:a2:81:e1:e0:b4:59:a2:96:b8:ba:
c8:c7:89:34:76:f3:d9:03:58:d5:34:de:fa:47:7f:6e:89:40:
57:65:05:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:25:30 2026 by rpki-client