Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1CC9D36237B11F1A135FBB5DAE4EC9C.roa
File: E1CC9D36237B11F1A135FBB5DAE4EC9C.roa (raw, json)
Hash identifier: VS5DgMTgY78cmsXdxjSjsWBmqfuMQHjJvWwsgti7u60=
Subject key identifier: 3B:D0:3E:6F:D8:50:3C:48:1E:3C:1B:59:EF:47:21:C3:32:D4:10:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BFD9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1CC9D36237B11F1A135FBB5DAE4EC9C.roa
Signing time: Thu 19 Mar 2026 10:10:41 +0000
ROA not before: Thu 19 Mar 2026 10:10:35 +0000
ROA not after: Fri 24 Apr 2026 10:10:35 +0000
asID: 61414
IP address blocks: 154.217.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114649 (0x1bfd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 19 10:10:35 2026 GMT
Not After : Apr 24 10:10:35 2026 GMT
Subject: CN=69bbcba1-0284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:95:54:1b:bf:48:10:81:54:bf:cb:0e:68:ab:
74:71:a8:bb:da:c4:c9:ab:b0:7a:4e:42:64:c6:0f:
00:30:04:80:43:46:a4:10:42:de:ec:dc:64:25:eb:
ef:d3:fd:24:41:a3:5e:52:7e:1e:27:37:a7:c4:70:
67:c5:57:f4:70:b0:df:03:70:1e:69:ba:00:bf:78:
66:aa:f4:33:96:b3:ec:f6:e9:b1:c4:88:4c:2d:cf:
ff:6a:0d:cc:50:60:ec:d8:81:44:5b:aa:7b:8c:bd:
f9:b8:ff:c8:29:aa:7c:f7:64:f0:c9:f2:39:37:0a:
ba:97:27:df:56:ed:18:90:22:c0:c5:e4:98:43:0c:
18:26:c3:f4:33:a4:2f:33:92:f8:fb:c3:7f:fa:e3:
61:0d:a2:83:93:2b:67:3b:d9:ef:0a:fb:f1:d2:9c:
37:91:db:99:94:0d:e3:43:a7:18:bc:2e:68:73:5f:
5e:5a:a7:f7:0f:5a:85:d5:43:e6:97:f1:19:36:9f:
a2:8d:a7:3d:5c:d9:69:8f:1f:db:63:c4:bd:92:43:
8e:e7:cd:ca:57:8a:79:d2:52:7c:e7:a4:53:24:35:
e7:03:dd:b0:62:00:a3:e6:6d:95:8a:e2:b7:1b:08:
61:46:86:c2:c1:dd:9e:27:b8:9e:f4:e8:4a:f1:72:
36:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D0:3E:6F:D8:50:3C:48:1E:3C:1B:59:EF:47:21:C3:32:D4:10:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1CC9D36237B11F1A135FBB5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.248.0/21
Signature Algorithm: sha256WithRSAEncryption
52:f4:e8:28:e2:e4:70:e7:7f:e4:07:ba:70:d0:f4:d6:48:c5:
25:a5:6b:5d:a1:43:22:04:3f:bc:05:40:80:af:7b:6d:0d:c3:
2d:43:d5:8c:f0:a3:24:f3:66:62:82:9a:4d:0b:e9:3a:10:f2:
e1:ba:e8:f4:6d:0c:b8:6c:2f:95:a1:d5:c3:dc:ab:a3:92:2d:
9e:95:d3:db:a1:c3:e2:09:26:d4:a3:32:84:fd:cf:01:3e:68:
09:c0:3d:99:0a:ad:85:14:7e:10:0f:52:df:b4:3f:75:dc:d8:
a5:5d:d1:05:97:28:78:97:3d:5f:3a:30:7d:3f:8d:59:a0:b3:
b7:a0:08:34:05:07:27:18:84:88:7e:17:3b:84:3c:75:71:91:
80:5a:7c:84:8c:d1:1b:b0:1e:79:dd:4a:4e:7c:6c:9d:cd:c3:
e4:02:25:cc:2d:e2:b9:a8:f5:82:fa:e4:7c:52:72:82:43:da:
5f:60:5e:f3:31:ed:48:23:41:ac:56:22:56:12:52:0a:47:93:
0f:62:cf:75:00:ee:cf:1d:5a:d0:a4:36:27:da:79:0d:3b:b2:
0e:bb:ad:93:7d:e0:fd:87:ad:e1:21:3a:4e:c3:e0:e0:71:c4:
1a:e0:c5:8e:29:15:2e:a8:1e:b5:5e:95:75:2f:15:64:85:1a:
db:de:ff:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:16:07 2026 by rpki-client