Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1A0F57818D311F18231BF96DAE4EC9C.roa
File: C1A0F57818D311F18231BF96DAE4EC9C.roa (raw, json)
Hash identifier: v37ZFtNeRyx4Cu+rPGkJUVDjliq6+dmgWe74+AWQ3g8=
Subject key identifier: EA:36:C7:D6:94:C3:16:01:1D:E3:DC:01:F9:80:E3:89:FE:74:E0:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BDDC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1A0F57818D311F18231BF96DAE4EC9C.roa
Signing time: Thu 05 Mar 2026 20:41:59 +0000
ROA not before: Thu 05 Mar 2026 20:41:54 +0000
ROA not after: Sat 04 Apr 2026 20:41:54 +0000
asID: 214769
IP address blocks: 154.91.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114140 (0x1bddc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 5 20:41:54 2026 GMT
Not After : Apr 4 20:41:54 2026 GMT
Subject: CN=69a9ea97-549b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:83:dc:10:61:e0:de:6e:47:8b:d9:b7:fe:cb:
a7:a7:7f:a7:dc:e1:f4:b2:97:70:67:57:7f:52:3f:
bb:c2:17:9f:a4:55:f5:c1:84:d8:1c:87:8a:80:fd:
b5:8d:24:b9:f5:af:bb:94:4d:85:20:9e:2f:12:d4:
80:46:33:6c:69:b9:ee:e5:3e:7e:5a:32:a9:da:b2:
a2:56:c3:89:3f:fd:be:5a:c9:58:f9:5d:74:ff:1a:
c4:cc:a5:8f:43:61:47:36:75:45:86:45:cf:39:49:
4b:4d:10:3e:f0:8a:04:13:7c:b1:1b:7b:f2:25:5d:
68:c7:ef:f2:73:44:66:36:46:55:eb:1f:cc:8b:15:
04:47:9f:49:67:d2:8c:02:c0:90:9b:f4:6d:db:dd:
53:30:c4:4d:fc:f8:6a:a1:cf:63:1f:34:85:cc:21:
10:b8:72:8e:86:91:44:77:87:62:3e:e8:62:aa:01:
a0:bb:62:0c:db:0d:1b:a9:d8:33:61:13:a6:81:3c:
e4:af:d7:3b:22:cb:ab:ed:2f:57:82:45:c0:47:ba:
eb:04:49:46:9c:04:6e:2a:ad:81:5d:a8:56:b2:fb:
58:3c:38:65:c1:5d:99:98:d2:e2:7a:21:63:b9:08:
02:7a:18:e9:42:ac:e9:3d:8a:28:20:ae:2e:a3:b5:
69:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:36:C7:D6:94:C3:16:01:1D:E3:DC:01:F9:80:E3:89:FE:74:E0:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1A0F57818D311F18231BF96DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.38.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:df:47:5e:26:36:0c:af:39:9a:a7:f0:6d:b7:0e:0e:ab:67:
ae:29:52:ac:a3:fb:73:d7:01:e0:76:c1:7d:cc:bb:e1:e8:73:
9f:04:96:97:00:38:99:d2:a6:7d:0c:1a:94:b1:0d:18:ba:19:
7d:07:fc:64:69:1d:1d:c4:51:70:79:42:5a:f7:c0:ae:c7:e9:
8e:09:9a:18:32:b0:03:1c:67:fb:86:57:f2:b0:62:d7:b0:f8:
b4:14:15:16:31:21:84:9b:b1:bd:48:9e:f4:c7:de:06:f7:19:
42:bc:07:72:31:e6:e2:2e:e5:0c:52:67:b7:95:86:d8:de:7c:
14:7a:eb:58:91:13:89:6d:c7:2a:19:94:e8:45:ce:40:a7:a3:
7a:27:6d:ce:c4:a0:74:27:50:a1:cc:80:01:3c:ba:eb:30:98:
b1:48:f3:05:eb:7d:43:5a:d3:92:7d:13:77:c3:af:46:ed:16:
57:9b:d9:ee:68:07:7e:f2:4d:cb:e8:67:42:eb:c9:c9:c7:55:
b8:64:c3:d2:c7:06:bc:ab:65:53:dd:85:60:8c:9f:2a:22:1b:
29:6a:a5:15:ec:47:00:d1:22:0a:dc:12:91:1f:39:7f:8b:85:
eb:64:d9:63:a3:d9:80:80:37:f0:95:48:8f:48:dc:1a:fd:98:
07:1b:74:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:15:58 2026 by rpki-client