Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC047DC81B9411F18E891892DAE4EC9C.roa
File: CC047DC81B9411F18E891892DAE4EC9C.roa (raw, json)
Hash identifier: j9yJCI/G74BkVOKFFNBeMk1BGRhpFH9cJ9a0fodL/5s=
Subject key identifier: 1A:0C:D2:5E:2C:67:2E:7A:E5:A5:07:9F:47:0A:4F:86:BE:84:85:BA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE78
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC047DC81B9411F18E891892DAE4EC9C.roa
Signing time: Mon 09 Mar 2026 08:48:52 +0000
ROA not before: Mon 09 Mar 2026 08:48:48 +0000
ROA not after: Wed 25 Mar 2026 08:48:48 +0000
asID: 139613
IP address blocks: 154.198.9.0/24 maxlen: 24
154.198.10.0/24 maxlen: 24
154.200.241.0/24 maxlen: 24
154.200.242.0/24 maxlen: 24
154.200.248.0/23 maxlen: 24
154.201.7.0/24 maxlen: 24
154.201.8.0/22 maxlen: 24
154.201.40.0/23 maxlen: 24
154.213.211.0/24 maxlen: 24
154.213.212.0/24 maxlen: 24
154.222.77.0/24 maxlen: 24
154.222.78.0/24 maxlen: 24
154.222.136.0/23 maxlen: 24
154.222.146.0/23 maxlen: 24
154.223.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 11 Mar 2026 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114296 (0x1be78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 9 08:48:48 2026 GMT
Not After : Mar 25 08:48:48 2026 GMT
Subject: CN=69ae8974-4870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:34:95:d0:c3:9a:d5:1a:88:b5:6a:71:e2:69:
67:b5:a1:c1:0c:ed:31:2a:8e:52:ff:3d:51:fd:b8:
c1:80:66:87:0f:29:35:40:94:e9:df:d0:8b:ee:15:
4e:2f:dd:7d:7a:e2:ce:e9:ad:a1:1f:1a:35:b9:50:
30:47:a9:0e:f9:8a:82:39:27:30:f2:42:aa:56:f3:
5f:00:a8:b9:b2:33:6d:4a:8e:ff:19:6e:a7:e3:7f:
21:93:5d:4c:c0:0b:01:7e:05:22:54:e2:6d:99:c4:
48:61:68:98:9d:80:59:0d:2e:78:35:a8:c9:f5:d1:
d2:64:61:bd:c7:d4:cd:de:65:65:93:89:35:99:7f:
c8:c0:bb:02:92:08:43:ee:d7:d9:a3:46:14:2a:4f:
9e:36:c9:05:c6:09:69:cf:75:6c:a0:e8:fa:6a:41:
d2:ca:c7:af:e4:60:fc:46:6d:4d:0a:92:4a:a2:f4:
1e:bd:e1:dd:14:0f:83:e9:4d:8e:18:eb:53:66:1f:
a0:7e:28:a4:2f:9f:7a:6d:37:c9:f4:e5:8e:4b:a0:
cb:a6:8a:4e:4d:56:77:57:fd:43:e9:5c:a3:ad:ee:
41:36:15:8f:dc:cb:a6:46:98:3f:ab:03:79:67:2a:
97:cc:96:b4:a2:b3:d2:10:8c:b0:d8:17:ca:80:65:
d0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0C:D2:5E:2C:67:2E:7A:E5:A5:07:9F:47:0A:4F:86:BE:84:85:BA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC047DC81B9411F18E891892DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.9.0-154.198.10.255
154.200.241.0-154.200.242.255
154.200.248.0/23
154.201.7.0-154.201.11.255
154.201.40.0/23
154.213.211.0-154.213.212.255
154.222.77.0-154.222.78.255
154.222.136.0/23
154.222.146.0/23
154.223.230.0/23
Signature Algorithm: sha256WithRSAEncryption
64:3e:8f:ef:eb:d7:e3:fc:31:2a:34:05:93:7b:a5:38:97:80:
57:da:08:1a:e1:e6:b3:ba:db:e9:ec:38:c6:8e:53:e4:da:95:
76:ad:8c:e0:8b:a0:f7:e6:7d:1e:c5:e8:20:27:20:cc:d5:7b:
28:e0:ef:04:ea:97:bd:28:16:9f:3f:28:78:c1:ab:e3:49:ea:
43:d1:95:bb:6e:5b:d3:01:8a:6b:19:65:d4:e1:41:fd:5b:5f:
c2:73:a4:d8:7f:e3:a7:7b:2b:b9:ac:ba:64:52:8b:e3:6e:7d:
a9:41:40:e9:7c:05:2e:6f:96:05:89:03:47:79:5f:bb:4c:d2:
be:18:67:9e:bd:8c:ce:0b:51:e9:01:36:88:b9:37:2b:a2:14:
5d:ae:17:31:63:4b:32:d7:c9:d1:2f:52:31:f8:f6:d6:5a:5c:
a0:56:67:50:d0:df:08:ba:de:bb:3c:0c:03:ac:c2:f3:10:72:
0b:50:d9:e3:e5:a4:e8:53:54:71:12:b8:40:b8:de:fb:3c:32:
9e:52:54:4c:49:8a:82:15:f9:42:d8:b9:3c:f8:f1:52:d7:5a:
91:91:f6:6f:a3:c0:2b:35:9d:ef:2b:1a:23:0f:5f:5b:e6:c0:
f8:b6:f2:e1:a5:07:82:92:aa:42:eb:28:ec:ae:11:ff:54:f6:
cf:9c:ac:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 9 14:08:46 2026 by rpki-client