Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFC41B9416DF11F1AB2BC7A0DAE4EC9C.roa
File: CFC41B9416DF11F1AB2BC7A0DAE4EC9C.roa (raw, json)
Hash identifier: ZkwE2utgkprO6T636ky9YWOSmVXDhgCxOjSmWTCtc9s=
Subject key identifier: D6:47:F0:94:A8:DD:08:43:17:95:9B:19:9E:E7:27:0F:C3:3A:9E:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BD1A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFC41B9416DF11F1AB2BC7A0DAE4EC9C.roa
Signing time: Tue 03 Mar 2026 09:03:14 +0000
ROA not before: Tue 03 Mar 2026 09:03:09 +0000
ROA not after: Thu 12 Mar 2026 09:03:09 +0000
asID: 150706
IP address blocks: 154.223.168.0/22 maxlen: 24
154.223.176.0/22 maxlen: 24
154.223.180.0/22 maxlen: 24
154.223.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Mar 2026 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113946 (0x1bd1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 09:03:09 2026 GMT
Not After : Mar 12 09:03:09 2026 GMT
Subject: CN=69a6a3d2-ac2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:46:90:1b:f7:bc:9c:8b:d4:b1:62:ae:39:0c:
7d:9a:cf:67:70:9d:5c:f0:a1:19:5c:25:e5:42:65:
8c:c6:16:61:78:ee:ac:47:42:2c:60:7e:61:01:4b:
48:5e:8d:ff:40:69:08:23:09:50:45:4c:92:b4:f6:
3a:a9:60:01:2b:d4:57:d2:97:ba:ef:5e:08:c8:90:
10:27:5f:47:47:1f:66:55:e2:0b:9b:de:08:2c:1c:
6d:ec:5f:31:72:25:58:8c:e9:98:21:4a:ae:3a:a0:
46:14:92:a9:c5:29:4d:10:ef:b9:f8:41:9d:e2:4d:
50:6b:ea:8a:f9:bd:91:52:5e:1f:e4:53:be:87:cb:
b5:08:d5:69:0c:cb:56:dc:33:ae:df:09:75:88:e4:
0f:5f:0d:5f:d7:e1:bc:10:60:80:6d:bd:a2:9f:8a:
0a:e7:90:f2:37:43:3a:12:71:55:89:e3:80:25:08:
7a:20:38:ce:c8:7a:48:9b:2b:fa:a2:1a:f6:2c:53:
40:37:77:fe:fa:8b:c4:d4:40:4b:79:13:82:fa:45:
bc:db:99:97:a2:82:49:cc:a6:e8:35:1f:99:04:f1:
81:83:40:6d:7b:ac:2d:13:76:29:9e:10:b8:a8:31:
19:b2:e3:11:e3:da:7b:a2:e3:1c:bb:a4:50:bf:a8:
05:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:47:F0:94:A8:DD:08:43:17:95:9B:19:9E:E7:27:0F:C3:3A:9E:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFC41B9416DF11F1AB2BC7A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.168.0/22
154.223.176.0/21
154.223.188.0/22
Signature Algorithm: sha256WithRSAEncryption
30:f5:1c:26:2b:04:74:14:00:f3:1e:05:d7:1d:34:9e:39:22:
84:b0:e5:87:0c:7c:c8:8e:6c:14:ed:ac:d5:44:83:9d:f8:a2:
80:6c:85:72:0d:69:b4:aa:1e:f2:27:6f:d7:5d:07:c1:37:fe:
1c:e2:a5:d1:77:66:aa:03:df:33:b2:4f:ef:4d:b9:bc:ae:60:
26:d9:4a:85:a3:83:bf:93:5b:12:dd:63:06:3e:76:f3:8d:2c:
ac:89:4d:4d:f1:c3:13:2e:a3:6a:6c:77:6d:f8:a8:e0:34:d6:
77:ec:26:82:03:d3:4e:91:f0:eb:f9:0c:c9:a5:4b:63:84:67:
1e:c8:93:ce:82:7a:0f:ce:9a:cc:e7:c6:5f:f0:56:82:b3:81:
09:df:6e:b5:19:8b:af:b5:91:a8:2b:3d:64:a8:ca:c1:64:08:
aa:92:49:cd:5a:92:eb:d8:80:94:77:ac:82:b3:f7:91:b0:08:
dd:17:f8:db:49:f6:43:5f:0d:33:fc:18:86:22:59:f5:a4:03:
ba:27:f5:89:c3:0d:7c:62:21:0d:2c:74:a2:25:37:14:3e:25:
a0:a4:19:cc:1b:99:c5:e8:53:34:78:df:aa:89:ea:ec:fe:f9:
7a:6b:bc:0a:7e:b5:75:d0:88:2c:ea:8a:90:64:27:16:57:56:
76:02:69:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 09:54:36 2026 by rpki-client