Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2AAA668195811F18E742AD3DAE4EC9C.roa
File: D2AAA668195811F18E742AD3DAE4EC9C.roa (raw, json)
Hash identifier: EmioIzXhO78wqhWyH3s6KRD2OBni30IKy1uI6TA2qrc=
Subject key identifier: E2:6B:46:51:43:CC:2B:0B:0A:8D:58:B9:49:D9:32:06:20:35:4A:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE11
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2AAA668195811F18E742AD3DAE4EC9C.roa
Signing time: Fri 06 Mar 2026 12:34:31 +0000
ROA not before: Fri 06 Mar 2026 12:34:26 +0000
ROA not after: Thu 09 Apr 2026 12:34:26 +0000
asID: 141883
IP address blocks: 154.86.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114193 (0x1be11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 6 12:34:26 2026 GMT
Not After : Apr 9 12:34:26 2026 GMT
Subject: CN=69aac9d7-86cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:91:71:0f:92:81:29:f5:66:7e:9a:ea:7a:8c:
48:6b:d5:a3:6c:38:d1:e9:31:69:ec:b0:67:3d:90:
d7:1b:3b:34:2a:5e:08:8f:d3:61:ba:6b:ca:12:4d:
a6:81:45:08:02:ab:0c:8e:04:70:04:c5:b4:26:d6:
4c:d0:a5:13:93:9f:d9:bb:a3:e4:0a:84:e7:42:58:
50:27:01:dc:a8:88:09:f1:e7:ea:be:ae:d1:18:88:
95:ac:61:5d:b5:ee:15:1e:d0:c2:c3:dc:c0:a7:5c:
57:10:1d:fa:07:22:ab:ff:a8:c1:71:9c:d5:e6:d8:
95:a4:a6:3f:3c:0b:23:c9:ca:66:d1:04:99:54:22:
cc:ea:8b:28:1a:35:53:96:6a:9f:29:9d:4e:66:7a:
ea:15:a9:63:82:ef:70:be:db:25:ef:7c:25:e1:e9:
c9:8f:9a:e9:40:41:cb:a2:c4:33:e5:f8:80:b7:05:
88:3b:69:f1:3c:1a:18:56:d0:64:c9:80:a0:06:9b:
1b:f6:a8:b6:e0:7e:76:bd:76:8d:6e:be:3e:fb:e8:
ec:af:70:74:d0:05:3d:18:bb:88:dd:b0:0b:c3:40:
7f:53:78:c0:0d:bc:b2:46:56:45:6d:c0:4d:4b:1f:
25:33:5e:c1:bc:45:7c:bc:76:7b:3d:c5:e1:2b:0a:
92:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6B:46:51:43:CC:2B:0B:0A:8D:58:B9:49:D9:32:06:20:35:4A:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2AAA668195811F18E742AD3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.0.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:3d:b1:05:08:e0:d0:93:6b:83:e9:57:f4:b2:41:01:8d:bd:
59:0f:11:ba:27:bb:d8:43:e4:0f:01:88:ef:76:c4:83:31:20:
48:ae:65:84:12:a9:6a:ed:59:93:d4:2e:eb:ac:b0:a7:e6:43:
78:38:fd:e7:77:1d:20:b7:90:e0:83:2a:72:0f:79:e0:2b:e3:
5e:59:67:3f:13:8b:3b:d6:23:d3:6c:09:11:58:6c:a1:f4:49:
ff:d6:48:28:0b:ff:9b:6f:d3:8c:6b:ff:03:2b:42:26:de:36:
19:f1:9d:78:12:91:43:74:59:80:02:c2:c6:5c:ef:f2:16:b6:
ae:08:d3:0d:96:9a:d8:31:e7:35:50:3a:0c:e6:6e:65:8f:88:
bd:46:af:8d:b8:fd:03:b0:b4:5b:be:5b:bf:f8:e9:7e:4e:90:
fd:b8:80:56:08:51:44:30:b9:30:e8:ce:10:43:6a:ef:86:bb:
0e:2d:80:dc:c6:a0:f4:35:57:77:1e:51:20:25:6e:32:0c:46:
ca:23:2c:27:92:cf:7d:db:13:ed:4e:bc:9e:47:91:73:79:80:
45:49:b9:1a:47:aa:91:ca:4c:d2:c6:dd:ce:2e:28:48:59:25:
8d:16:3e:0d:e1:4c:ca:85:4b:f5:81:fc:88:29:fb:ce:dc:cf:
90:3a:56:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:23 2026 by rpki-client