Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD4BC1D8227211F1B2A92A9EDAE4EC9C.roa
File: DD4BC1D8227211F1B2A92A9EDAE4EC9C.roa (raw, json)
Hash identifier: rkYNLGeob7sA0IIMp6+Lax2A80oOiq12auHeMzngVzk=
Subject key identifier: 3C:E6:17:C7:5A:20:5F:71:60:CE:92:59:A7:87:0D:DE:ED:C6:5C:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF9E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD4BC1D8227211F1B2A92A9EDAE4EC9C.roa
Signing time: Wed 18 Mar 2026 02:33:36 +0000
ROA not before: Wed 18 Mar 2026 02:33:31 +0000
ROA not after: Wed 25 Mar 2026 02:33:31 +0000
asID: 17497
IP address blocks: 154.196.170.0/23 maxlen: 24
154.196.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 25 Mar 2026 02:33:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114590 (0x1bf9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 18 02:33:31 2026 GMT
Not After : Mar 25 02:33:31 2026 GMT
Subject: CN=69ba0f00-223e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ed:a2:ab:91:e7:05:c0:dd:ea:12:3c:1d:c0:
82:b2:bc:1b:69:61:51:bf:62:f5:61:17:3f:5d:d3:
2c:ee:1c:4a:74:d4:f9:aa:88:0c:15:a7:29:ee:b0:
cc:9e:37:28:3f:11:0b:a5:f3:a4:34:a1:e7:49:95:
d0:23:88:03:e0:fe:87:ff:14:be:15:fb:32:61:d7:
5f:12:1d:02:d7:93:98:0e:64:a5:ee:57:1b:3d:83:
d1:8d:d3:2d:81:0e:02:19:33:46:ff:76:79:04:84:
32:75:01:cc:b9:d1:b3:0d:a5:3a:31:3f:c3:1f:3d:
ad:cb:29:d8:f7:b0:fc:86:d6:69:fb:0d:6b:6d:97:
24:bd:b5:12:6a:9a:73:6a:7a:cd:fc:56:c6:3a:7f:
5c:f0:ec:05:d1:05:9a:61:19:b1:20:b1:94:a9:8b:
2a:e3:da:75:47:ff:6b:d2:70:51:41:71:3f:a6:9b:
e4:a1:69:bb:27:cc:ad:92:9a:5c:37:89:d6:6b:27:
f8:6b:bb:e5:77:e0:30:76:66:b3:fd:7f:c3:4d:c0:
12:85:7a:02:49:ec:20:6b:5f:12:dd:b3:64:d4:fe:
0a:c7:91:cd:db:c1:82:18:89:5d:c5:12:40:29:74:
e6:65:84:be:20:c4:1a:33:a7:d5:c4:31:8c:b1:ae:
fb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E6:17:C7:5A:20:5F:71:60:CE:92:59:A7:87:0D:DE:ED:C6:5C:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD4BC1D8227211F1B2A92A9EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.170.0/23
154.196.248.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:4b:24:dd:3f:fa:b6:1e:62:74:db:aa:27:20:3e:c7:ee:ec:
4c:72:3d:fd:21:71:09:f6:bb:18:62:03:7c:01:07:6e:92:b6:
91:ff:32:79:ce:9d:12:44:a7:44:eb:68:c2:a5:9d:7b:d5:a3:
00:57:1f:ee:86:9e:52:37:bc:e9:42:f6:7b:bb:6f:4e:34:b8:
6f:da:af:9c:d8:90:6b:20:7e:ed:97:80:5b:60:d8:a0:07:b2:
19:af:c1:1e:98:35:7c:a3:11:7e:cf:1d:fe:bd:2c:be:4f:cb:
43:89:71:30:64:dc:99:ab:65:2c:bf:7b:f2:7e:a9:66:d6:5e:
40:5a:f8:97:dc:f4:ed:a9:c2:ad:52:aa:37:70:8c:a0:9a:8a:
b5:05:82:c7:78:8a:2e:74:5b:92:ad:40:c1:e0:86:1d:e9:03:
1f:00:33:eb:ac:b3:82:1a:17:d7:c0:a3:9a:43:42:63:41:07:
f9:2c:83:bd:68:12:29:9f:0b:fd:e8:81:37:70:56:c2:ed:93:
0e:36:0d:56:fd:b7:2e:3e:5e:48:56:7d:44:30:e3:50:70:df:
12:eb:3b:1a:10:f3:64:03:e4:a4:e7:9e:f5:f3:8f:fb:a0:90:
01:9c:7f:99:a7:e0:92:d4:7a:b2:4c:79:cd:3d:51:bb:26:72:
52:bc:e2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:15:58 2026 by rpki-client