Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C09E5F60250511F183ACB6A8DAE4EC9C.roa
File: C09E5F60250511F183ACB6A8DAE4EC9C.roa (raw, json)
Hash identifier: x4IJ3PPBQTxPmfDcGXYplaC5Qb9+C2v0fLdZHs2tcjc=
Subject key identifier: FE:B6:10:79:CE:CC:2B:5D:7E:15:0A:AD:36:A8:84:A6:2C:2E:DA:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C047
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C09E5F60250511F183ACB6A8DAE4EC9C.roa
Signing time: Sat 21 Mar 2026 09:10:07 +0000
ROA not before: Sat 21 Mar 2026 09:10:01 +0000
ROA not after: Mon 27 Apr 2026 09:10:01 +0000
asID: 17561
IP address blocks: 154.82.154.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114759 (0x1c047)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 09:10:01 2026 GMT
Not After : Apr 27 09:10:01 2026 GMT
Subject: CN=69be606f-a6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:74:84:58:85:20:c1:79:e8:e6:0e:12:88:26:
67:f6:52:b4:18:34:3b:c7:69:4f:f9:eb:67:10:dd:
b9:6c:3b:e2:59:fe:2e:76:bf:e3:da:da:fd:27:a5:
5b:47:5f:17:69:21:2d:e0:6f:8b:b6:e0:1a:4c:52:
88:07:8a:f8:29:d2:49:79:89:ac:09:69:98:71:95:
68:d4:84:7b:28:8f:bd:c6:de:2e:5d:aa:da:81:26:
5e:07:32:a5:23:73:3f:9e:52:d3:ff:12:5d:92:e2:
7f:b3:c2:6b:20:4f:63:a7:36:d2:c5:2f:08:3c:5b:
fa:96:5d:11:81:13:db:25:85:1a:16:e9:eb:24:1f:
dc:f6:c6:fa:4c:3b:af:67:11:cd:d4:6d:5f:3a:65:
81:e8:e8:be:07:79:5e:67:9c:24:b5:a4:c7:c9:06:
82:41:80:a5:d3:f6:9d:51:30:aa:93:99:9e:68:fa:
bf:69:19:0f:0c:49:b8:da:8a:86:a2:ee:b7:31:73:
17:1f:7e:84:10:f4:f1:49:ad:3c:74:da:2a:24:91:
da:59:3b:47:54:32:6f:9c:15:2d:ee:bf:9f:f2:84:
41:05:cc:6f:73:71:43:b3:36:3e:05:39:65:db:3d:
5b:92:81:34:1a:15:82:e4:b1:57:03:38:96:dc:ab:
f8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B6:10:79:CE:CC:2B:5D:7E:15:0A:AD:36:A8:84:A6:2C:2E:DA:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C09E5F60250511F183ACB6A8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.154.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:1c:28:58:0a:1b:eb:d9:af:d9:2a:7f:e5:49:7b:7a:43:f8:
c4:c8:da:d7:59:9d:43:43:8b:41:a5:16:cd:8b:bf:9f:57:57:
be:1e:86:7b:68:33:3e:c4:14:ef:4c:79:c0:be:e7:46:ef:6b:
ad:ad:5f:db:ef:aa:77:c6:a8:69:1e:b2:c7:d1:49:06:28:d8:
9d:66:84:cf:ee:6f:5f:36:74:65:6c:b6:51:30:c4:29:3b:a9:
ba:95:cf:18:a2:8d:a7:9f:75:a5:62:a7:0d:eb:e9:b3:aa:8d:
b2:36:0d:bd:37:da:da:79:c7:58:96:4c:8b:74:8e:c9:68:0a:
2a:42:86:30:ff:18:95:46:32:62:a7:39:61:fa:5f:ed:86:bb:
d3:2c:a9:33:7a:6f:73:91:3e:e9:f5:ce:03:4a:6c:0e:6b:35:
22:44:1f:e1:d9:d5:01:fb:94:2e:10:5f:89:44:31:05:0b:a1:
2a:9c:18:b1:e5:c3:0f:bd:86:70:de:41:46:54:f0:01:aa:d6:
c3:fc:90:fe:df:6b:9e:7b:4e:af:14:b2:96:55:71:f6:e2:d3:
ba:66:de:b2:49:2c:40:db:a4:2c:35:d0:fe:9e:89:95:8c:14:
8e:64:d1:97:24:d8:ad:77:36:91:eb:7f:d8:25:e2:65:dd:17:
d6:ea:da:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:25 2026 by rpki-client