Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C389EFE41FA311F1AB1075C6DAE4EC9C.roa
File: C389EFE41FA311F1AB1075C6DAE4EC9C.roa (raw, json)
Hash identifier: /+cD4kxJdUyD9VfhCyYUGcG9j2uiseJVXIq64r0XCLg=
Subject key identifier: 98:32:3B:3F:BA:2D:75:7D:26:F2:AE:61:65:0B:CB:2D:AD:47:B9:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF70
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C389EFE41FA311F1AB1075C6DAE4EC9C.roa
Signing time: Sat 14 Mar 2026 12:46:05 +0000
ROA not before: Sat 14 Mar 2026 12:46:00 +0000
ROA not after: Sun 03 May 2026 12:46:00 +0000
asID: 63023
IP address blocks: 154.90.135.0/24 maxlen: 24
154.94.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114544 (0x1bf70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 14 12:46:00 2026 GMT
Not After : May 3 12:46:00 2026 GMT
Subject: CN=69b5588d-04c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:48:25:40:c8:42:5f:32:ae:17:27:30:82:b7:
28:45:5f:5e:59:c3:ce:bc:82:b1:70:76:38:a9:c3:
81:98:02:01:6a:34:bb:37:2d:81:5e:9e:23:d1:da:
5a:d0:17:92:f0:1f:84:56:38:c6:92:3e:4b:6c:08:
bd:c8:3a:30:50:9f:8d:82:af:73:67:a1:51:b0:18:
96:d4:e9:db:ee:ac:ea:e3:98:05:74:5a:ab:3e:25:
ae:e2:0d:8b:73:fa:25:09:b8:d4:27:58:ea:ba:c0:
96:f3:a6:75:64:81:15:c3:78:7e:d8:c9:0d:ab:26:
c3:3a:f9:a7:5b:a7:0e:bd:48:88:48:7a:70:43:8d:
bb:b8:6f:2f:21:08:20:85:1b:b9:7e:2e:54:ca:21:
bd:9c:49:f7:32:34:6e:41:90:e9:3b:e6:87:a9:db:
be:8b:2d:45:04:fb:73:7a:82:f0:7e:1e:22:83:d4:
38:f9:44:37:9a:7d:45:14:02:e0:58:8d:4c:3e:a5:
bc:63:ef:76:e9:ac:00:a0:0f:83:76:e0:94:8b:48:
c0:c9:82:f4:20:67:78:a3:6c:e4:69:24:aa:69:f0:
6f:5b:ea:c1:d6:b8:4d:18:42:7b:1e:4b:5f:8d:72:
b9:69:81:2d:3b:65:3c:ca:a8:25:3d:c9:97:fa:46:
7c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:32:3B:3F:BA:2D:75:7D:26:F2:AE:61:65:0B:CB:2D:AD:47:B9:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C389EFE41FA311F1AB1075C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.135.0/24
154.94.1.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:61:73:07:ba:44:51:db:98:e6:84:7c:15:fd:0b:1e:06:38:
8b:71:d4:d9:f3:01:79:df:75:d2:67:85:07:c1:72:35:e9:12:
55:ad:5d:5d:ff:b4:1e:dd:4f:0f:b8:02:a1:2c:24:68:d9:4c:
24:e5:40:f9:49:6e:52:87:32:c1:ae:30:94:05:47:a3:90:35:
d2:f6:58:9e:53:97:5b:60:70:5e:f0:7a:0e:fb:16:dd:1e:da:
6a:8c:76:a8:b4:38:40:0a:9e:59:55:7b:70:89:ba:75:c8:d5:
15:b3:cd:a6:f7:45:e9:88:8c:8e:9d:8d:87:3d:58:1f:d0:c7:
cb:2f:63:fd:1c:46:c9:25:1f:a6:c1:70:8f:69:b1:6d:70:9a:
d3:31:6e:09:97:a1:65:13:e0:26:1f:80:b0:43:ab:39:b1:aa:
7a:66:6e:46:93:6c:34:64:c1:51:29:e0:85:9a:d7:70:92:31:
54:5d:74:04:0b:a4:60:60:31:4b:9a:a1:e8:02:f3:19:64:97:
33:1f:ba:c8:da:b7:56:47:38:85:0b:e1:e3:14:3e:3b:88:54:
69:79:7a:d5:f4:1f:f5:8a:c2:22:aa:c1:b5:dd:6b:77:5d:77:
d7:55:50:3a:84:46:08:9e:21:54:3a:ce:5e:e4:03:48:97:3b:
c5:4e:0e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:16:07 2026 by rpki-client