Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9F779EC239411F18343BEC2DAE4EC9C.roa
File: C9F779EC239411F18343BEC2DAE4EC9C.roa (raw, json)
Hash identifier: IPuJtC+JzVEVST4ZzlAAco1IMkMdqhi2tvHukFAe0uY=
Subject key identifier: DA:5E:68:9A:26:D2:AA:55:5C:92:CF:9E:E2:A2:77:CE:45:2C:F0:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BFE5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9F779EC239411F18343BEC2DAE4EC9C.roa
Signing time: Thu 19 Mar 2026 13:08:58 +0000
ROA not before: Thu 19 Mar 2026 13:08:52 +0000
ROA not after: Tue 31 Mar 2026 13:08:52 +0000
asID: 214143
IP address blocks: 154.92.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114661 (0x1bfe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 19 13:08:52 2026 GMT
Not After : Mar 31 13:08:52 2026 GMT
Subject: CN=69bbf56a-e3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:43:01:41:ad:54:54:50:ca:4a:e2:1a:93:ca:
3d:77:92:8b:1e:8d:94:8a:ff:3a:99:7a:b8:ea:e6:
a3:80:fa:cd:90:81:75:07:96:53:ac:11:59:cf:62:
3d:93:88:06:44:9b:5f:ca:5d:a7:77:77:f1:e7:ee:
1d:4e:2d:83:43:5c:ea:72:a9:c2:30:00:b1:a4:8f:
aa:55:96:5a:5b:4b:f8:ec:db:3a:e1:47:d6:8e:91:
7c:6e:19:fb:c1:0a:da:be:44:70:0b:6b:69:d9:99:
7b:79:39:d5:0c:a8:a2:ce:48:bf:1d:3c:a9:aa:54:
22:99:45:a0:aa:e9:8b:51:ef:58:61:91:b9:be:b9:
7d:9f:b2:3e:7a:bd:19:cd:06:55:1d:53:ca:80:f1:
ad:62:ba:ab:bf:dd:19:7c:e6:81:cc:4c:fa:b7:fd:
d7:f8:f2:f9:e2:b2:87:c6:0c:fb:26:03:ea:03:48:
6d:ab:a2:89:f4:75:79:dd:0a:a8:48:4d:86:ef:e7:
0a:7e:00:c2:e3:d5:98:88:c6:45:52:65:cb:c3:25:
77:b9:17:07:1d:72:09:16:fc:18:81:3f:c6:3d:c0:
e4:59:1f:17:6c:81:57:95:92:39:87:c5:b8:e3:a8:
b7:6f:19:1a:12:2d:f6:c6:c0:bc:68:9b:e4:c2:c7:
4f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5E:68:9A:26:D2:AA:55:5C:92:CF:9E:E2:A2:77:CE:45:2C:F0:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9F779EC239411F18343BEC2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.209.0/24
Signature Algorithm: sha256WithRSAEncryption
98:eb:25:82:8d:af:2c:21:b1:b9:cf:34:a4:53:6b:4b:e1:c1:
57:ea:09:6c:46:61:52:f6:8c:39:a8:e5:84:66:91:01:a8:4f:
90:07:38:38:99:99:bf:e3:b1:67:2c:7d:21:90:8d:4d:0e:4f:
c6:af:4f:67:43:4a:b9:79:25:3d:4e:e3:a1:ee:9b:61:c4:44:
94:c7:fb:3d:3d:77:38:e7:df:31:ca:40:80:c6:66:c6:63:04:
7c:ec:2a:3e:c6:02:3d:7e:4f:61:bf:b8:46:e1:fb:b7:28:12:
3e:98:61:dc:d7:6d:d1:7a:60:72:57:45:cc:a1:f0:a8:d7:26:
48:53:de:00:38:48:5f:be:2d:12:36:e8:6d:86:ff:17:4d:7d:
16:27:ca:98:6c:af:f6:95:50:2e:2b:96:05:07:57:bc:55:f1:
b4:9a:e0:86:7f:35:9e:40:e6:5a:3d:7a:b1:66:a8:c5:50:b6:
00:29:41:d4:31:33:c8:ed:3d:d1:af:99:aa:67:fe:b2:aa:5d:
26:a1:1b:1e:9c:a9:59:9d:ca:38:6e:2b:9a:38:d9:2c:a9:66:
f3:12:af:ab:50:86:6a:ed:c4:50:34:3d:11:c4:9a:d1:c8:95:
d4:49:e7:e3:6b:ee:80:8f:6b:60:9c:09:03:d2:c6:48:24:c9:
79:3b:6b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:18 2026 by rpki-client