Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0C4A42C1AAF11F19C66E89ADAE4EC9C.roa
File: D0C4A42C1AAF11F19C66E89ADAE4EC9C.roa (raw, json)
Hash identifier: wq4lq2Sp/uSN+xGoExp2A6GK9XEzZzv5ADi4C9eQnbA=
Subject key identifier: 85:B1:16:DF:00:8E:A1:4F:A6:1B:96:DE:13:A7:21:A4:AA:33:2E:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE41
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0C4A42C1AAF11F19C66E89ADAE4EC9C.roa
Signing time: Sun 08 Mar 2026 05:29:45 +0000
ROA not before: Sun 08 Mar 2026 05:29:39 +0000
ROA not after: Sat 11 Apr 2026 05:29:39 +0000
asID: 214143
IP address blocks: 154.81.132.0/22 maxlen: 24
154.81.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114241 (0x1be41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 8 05:29:39 2026 GMT
Not After : Apr 11 05:29:39 2026 GMT
Subject: CN=69ad0949-078f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6d:06:e8:c2:7b:f1:ac:e5:e0:92:76:9e:ad:
b2:3e:c5:fa:87:68:8b:bd:c2:2c:b8:c8:e1:f0:66:
32:fd:90:d3:b7:eb:c0:ad:1c:ec:89:29:21:93:e7:
76:78:37:b9:85:01:a0:2c:58:69:d8:48:af:17:c1:
6b:73:cf:c1:24:47:30:fd:6c:ad:00:26:2d:58:66:
2f:87:66:b4:66:79:15:ea:48:de:9b:fe:fd:88:79:
37:95:04:5c:71:1c:07:31:29:e9:99:7a:22:3c:cb:
44:ab:95:cc:9f:78:cd:48:16:78:0d:f9:60:51:27:
ec:d9:99:6f:fb:d7:6e:f9:49:b4:83:44:df:23:be:
b3:f8:e1:a5:f0:33:da:51:3b:d6:c2:42:9a:6e:76:
c0:7c:7b:74:e7:09:a8:c2:6b:5b:53:6f:61:6b:99:
da:2e:c7:fe:c6:3e:b3:db:51:99:97:d1:5e:a5:25:
ab:05:9d:07:32:89:fb:ad:08:68:7c:85:4d:73:65:
da:eb:75:15:23:e6:ad:ad:12:60:7f:fc:a1:cf:21:
2e:b2:80:25:35:8f:6c:21:2e:4c:a1:d3:bd:77:cb:
1b:70:6d:91:f1:52:53:b9:1e:18:f8:e0:3f:63:63:
b9:99:8e:03:cc:0a:f8:51:b0:05:d6:7c:1c:a7:41:
72:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B1:16:DF:00:8E:A1:4F:A6:1B:96:DE:13:A7:21:A4:AA:33:2E:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0C4A42C1AAF11F19C66E89ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.132.0/22
154.81.138.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:01:c5:05:26:2e:03:ee:f8:cf:27:e4:d3:04:61:5e:ae:d9:
18:a1:ca:2b:c7:18:6b:1a:1b:2b:cc:88:da:23:56:fd:f9:17:
b2:6c:96:ca:54:f5:d7:67:fd:08:4b:3b:0a:04:16:40:69:e8:
63:c8:fe:ec:13:b2:c7:b3:cf:27:d8:65:8c:9f:7d:7c:6a:ad:
86:a2:b6:03:9b:40:38:e8:3f:35:fa:b9:2a:29:34:6d:42:70:
99:89:9f:a0:7a:d4:d7:98:75:3f:7a:05:c7:e8:78:0e:10:6b:
0f:a5:eb:d3:cb:1d:fe:df:4e:b5:52:90:d9:4b:9b:b0:bd:f4:
f9:19:75:b4:8b:cd:13:e8:c2:a8:c0:39:9f:7e:7b:76:c8:75:
69:a5:c1:4a:cc:39:6f:94:99:0a:75:6e:55:7c:92:e6:2e:8a:
d5:b3:5a:bc:30:6b:fd:ee:05:07:ce:be:85:90:02:e3:15:a8:
70:5f:ee:59:50:40:c4:d9:5f:38:fd:1d:8e:72:90:b8:51:8e:
bb:e7:f4:87:c2:d7:30:bd:d2:61:32:f2:2f:ba:89:34:7b:f6:
e4:a5:44:a2:05:48:a1:d9:8e:c4:66:6f:ce:3a:92:42:8b:80:
15:d6:75:ef:07:ae:bc:71:62:dd:9a:93:14:55:4e:51:c3:90:
68:89:66:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:15:56 2026 by rpki-client