Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D818C5781B6811F1AB6D5681DAE4EC9C.roa
File: D818C5781B6811F1AB6D5681DAE4EC9C.roa (raw, json)
Hash identifier: 4L3TxmF5Xj7YxmrrmvIk/cQpgDWehXOWYUtm4cvLSeU=
Subject key identifier: A2:B0:1D:10:12:47:7C:10:B4:7B:1C:97:F3:35:32:29:60:CF:78:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE5C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D818C5781B6811F1AB6D5681DAE4EC9C.roa
Signing time: Mon 09 Mar 2026 03:34:15 +0000
ROA not before: Mon 09 Mar 2026 03:34:09 +0000
ROA not after: Thu 16 Apr 2026 03:34:09 +0000
asID: 17497
IP address blocks: 154.197.16.0/21 maxlen: 24
154.197.26.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Mar 2026 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114268 (0x1be5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 9 03:34:09 2026 GMT
Not After : Apr 16 03:34:09 2026 GMT
Subject: CN=69ae3fb6-414e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fb:00:f2:44:32:ef:70:eb:6e:01:57:68:c1:
8f:d1:4d:ea:dd:44:2a:e0:e2:d3:17:ae:b9:a8:77:
8d:1d:52:bb:f0:bd:d8:85:89:1e:ad:42:a4:6b:62:
97:86:aa:4c:13:a4:88:6d:0a:03:5a:31:e8:87:0f:
49:06:86:50:af:d8:3c:6a:83:cb:7d:f7:98:f1:9b:
1a:13:35:38:d9:5b:d7:37:2d:3c:1d:80:e2:13:ed:
2d:d0:c3:1e:35:1d:39:88:e8:cb:0e:be:f9:b9:7e:
7d:e6:cc:bc:dc:ac:6b:1e:ed:19:57:b1:93:bd:41:
30:c6:d7:20:be:89:1b:ef:f9:36:d1:f5:2a:df:d3:
a5:f3:e0:cb:aa:da:05:cc:3d:10:9f:5e:8b:26:8c:
76:1f:af:8a:bb:84:8e:de:91:cc:ad:85:4f:2a:53:
d1:af:70:ed:fd:0d:95:1b:e5:af:30:84:41:5a:94:
59:fb:8c:54:c8:84:23:4b:2b:19:29:d3:1e:ff:a9:
b3:a2:bf:31:33:ae:77:97:0e:3a:67:79:0e:af:dc:
cf:21:44:b9:94:9b:5c:aa:89:91:c5:d0:47:1a:81:
26:57:35:a6:e7:54:f2:d9:ec:a5:c0:7e:72:71:30:
84:8b:6e:a6:8b:6f:39:fc:cc:8f:c8:14:02:02:28:
13:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B0:1D:10:12:47:7C:10:B4:7B:1C:97:F3:35:32:29:60:CF:78:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D818C5781B6811F1AB6D5681DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.16.0/21
154.197.26.0/23
Signature Algorithm: sha256WithRSAEncryption
74:7d:e2:80:fc:75:57:57:43:84:f1:8b:82:2a:6f:5f:bf:25:
54:4d:3b:43:25:6d:e6:cc:a3:f7:22:44:e6:73:e4:0e:fe:78:
66:af:42:40:62:40:65:8b:8a:18:8c:6b:46:7d:33:13:8a:97:
69:8e:7d:4e:6e:63:de:72:1e:16:93:a5:10:92:b2:a9:c9:dc:
6d:f3:25:c6:f1:1d:da:a0:f8:0b:b0:aa:09:17:87:e8:5d:f5:
80:17:84:c8:dc:56:44:90:b2:6f:9a:c4:af:69:f0:db:53:78:
15:0f:14:3f:26:8e:5d:ac:7e:d5:f2:51:38:e7:f3:f2:1a:bb:
e8:52:62:b0:4e:43:7e:b1:d2:15:c8:5d:39:28:1f:ce:e4:87:
4b:50:3a:b5:0b:05:56:8b:33:a0:25:01:af:9d:bb:f4:b9:7b:
d4:05:8c:f3:69:86:92:0c:69:11:22:af:45:da:6a:00:34:f8:
d1:f6:f8:85:ba:87:a6:92:e0:ff:ff:16:34:ac:11:62:c7:e5:
33:82:62:8c:32:97:2a:a5:ac:9b:ba:26:4b:c6:3d:0a:7d:0f:
5b:4d:66:d9:da:3e:ab:1f:b5:f3:e7:4d:09:78:bc:eb:5d:f5:
7d:6d:09:77:aa:bf:db:43:17:55:de:56:b9:c5:1d:e3:9c:c9:
e0:e0:0e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 09:28:48 2026 by rpki-client