Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CADCD052189811F190F669B4DAE4EC9C.roa
File: CADCD052189811F190F669B4DAE4EC9C.roa (raw, json)
Hash identifier: 0bVRQ0ZnUR1A9Y4q9hmwqEQa3MO4ma7gXimF9ArqlM0=
Subject key identifier: 80:A2:39:55:B0:89:B5:81:B5:87:D3:BB:CB:43:33:EB:A3:0E:A1:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BDCD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CADCD052189811F190F669B4DAE4EC9C.roa
Signing time: Thu 05 Mar 2026 13:39:55 +0000
ROA not before: Thu 05 Mar 2026 13:39:49 +0000
ROA not after: Thu 09 Apr 2026 13:39:49 +0000
asID: 53055
IP address blocks: 154.91.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114125 (0x1bdcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 5 13:39:49 2026 GMT
Not After : Apr 9 13:39:49 2026 GMT
Subject: CN=69a987ab-c57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:39:99:cd:2a:3a:80:8d:64:2e:66:c1:93:14:
5f:3b:cc:5f:c2:d1:c5:67:e2:86:9d:45:6d:20:72:
61:26:1e:a9:d5:1f:9d:67:5c:1d:8c:a5:9a:0f:66:
a9:d9:ad:84:08:58:19:3a:45:d7:ab:0e:c4:1b:66:
ae:de:cb:b2:0c:6a:b6:31:d2:cc:7d:af:71:0b:92:
b8:b0:16:f7:de:0e:a5:cd:2a:ba:b9:11:4b:e5:10:
b8:24:e2:7e:9e:bd:28:41:d5:7a:54:b7:8d:d3:7c:
f0:80:fe:ee:e7:cf:6f:88:9d:9a:78:73:ae:e0:99:
b9:96:d5:4a:b2:de:4c:7d:99:f0:22:03:6e:24:90:
2a:e8:e3:a9:0e:b6:b1:d9:93:22:01:f7:b9:b3:4a:
5c:5b:5b:99:95:28:2e:a3:a8:0b:85:eb:d0:65:80:
9d:61:6d:1f:2c:0a:49:46:fe:1e:95:f6:13:7e:71:
2d:fa:fe:ca:3c:d0:53:d4:ca:b9:6f:6a:d8:70:01:
5f:e1:be:ac:95:ea:2e:bf:bd:38:79:7e:23:7d:29:
91:77:de:d8:15:ab:c2:da:7c:50:04:c3:86:ad:94:
62:99:09:04:7c:d1:3c:3e:4b:ea:b4:02:e7:06:64:
3e:2b:6d:76:2c:a7:e9:e0:0d:7b:7b:ac:a9:6b:36:
6a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A2:39:55:B0:89:B5:81:B5:87:D3:BB:CB:43:33:EB:A3:0E:A1:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CADCD052189811F190F669B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.128.0/21
Signature Algorithm: sha256WithRSAEncryption
a2:b1:7b:c7:04:a4:ae:b1:45:ef:84:04:6e:1e:5b:51:cd:bc:
87:6c:20:98:12:6b:ff:b6:fe:33:1d:b2:22:44:3c:28:6a:c0:
5e:c9:ef:8e:2c:db:d2:42:c7:72:8e:f2:dc:b3:38:ed:d9:42:
5e:f8:14:9d:5b:cc:08:6f:98:89:b5:e5:9f:bd:b1:16:f7:25:
56:86:60:5e:1c:96:83:00:84:a4:b7:c2:8a:b0:f3:ac:95:6e:
ee:75:ec:49:b8:0d:b0:a0:bc:21:ff:5d:91:7e:ae:92:7e:10:
b7:36:91:42:07:af:70:d5:f2:22:d0:e8:8d:5c:c1:e1:6c:22:
23:65:5e:be:1e:c7:c8:c8:00:76:0c:1e:83:7d:ad:1e:17:d9:
57:54:06:1f:90:16:5a:63:c5:18:31:e5:91:6f:3d:11:83:00:
05:09:4f:bb:40:93:c9:9c:4b:19:91:34:bf:02:8c:a5:c3:07:
a2:c5:e7:a5:84:a5:1d:c3:89:89:94:90:d0:d9:57:21:85:9b:
9b:b0:0b:13:9a:12:54:12:7e:10:5b:51:e5:a2:77:41:e3:e3:
2d:6c:d3:75:f8:65:96:d8:9e:71:f1:27:31:7d:44:da:34:db:
5a:45:d4:f0:7a:46:84:15:e5:ac:74:1f:82:d4:2f:de:81:97:
29:7f:b3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:17 2026 by rpki-client