Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6CDD2EA16E811F19D8048D7DAE4EC9C.roa
File: E6CDD2EA16E811F19D8048D7DAE4EC9C.roa (raw, json)
Hash identifier: fmb6J3jKNduW9X2jbF4/X2ff3XOKw1kGnTWDzU92t6E=
Subject key identifier: DB:48:A3:58:10:2C:22:49:C4:AC:E7:53:3F:B3:A3:36:AF:B0:B2:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BD2E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6CDD2EA16E811F19D8048D7DAE4EC9C.roa
Signing time: Tue 03 Mar 2026 10:08:19 +0000
ROA not before: Tue 03 Mar 2026 10:08:13 +0000
ROA not after: Mon 16 Mar 2026 10:08:13 +0000
asID: 401696
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Mar 2026 00:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113966 (0x1bd2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 10:08:13 2026 GMT
Not After : Mar 16 10:08:13 2026 GMT
Subject: CN=69a6b312-1c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e2:81:5f:01:bc:f0:fd:f8:93:b9:33:00:6c:
1f:6e:4e:fd:06:ea:72:c2:5f:c1:3e:a5:c3:47:cf:
a8:41:1d:40:16:db:68:c8:f5:91:5d:53:e8:b4:a0:
37:a2:11:9a:50:b5:c4:21:0a:17:88:22:13:9b:e1:
67:2c:3c:52:de:d6:2d:bf:4f:fe:fe:dc:4a:02:a5:
a2:5c:7a:44:c6:d5:d4:13:14:47:bb:03:af:b4:8e:
08:57:16:85:a5:77:93:f1:43:5c:43:02:93:d5:cf:
ae:c7:f7:ae:d9:26:39:e5:a1:38:ff:b8:71:39:65:
10:6f:3c:f0:d9:18:ec:64:ee:34:a4:72:17:d6:06:
75:49:2b:9b:ca:e1:49:a4:a3:f5:3c:36:d9:b6:94:
0c:e1:a4:8d:67:8e:56:83:b5:95:a0:d3:e7:2f:8b:
5e:4d:ff:59:b0:e7:77:8c:a9:7d:ee:21:c8:ce:95:
30:72:91:fe:6a:c7:6c:9f:c4:43:a1:03:1d:d4:9c:
ae:6a:88:6e:7a:ec:68:06:7f:89:23:0e:a1:b3:fb:
1f:36:46:d6:02:a9:e3:8c:6e:b1:90:67:46:0b:de:
f1:b4:8e:29:b9:15:33:43:7a:b1:fd:d7:67:15:ed:
da:eb:ca:e5:74:61:b4:e4:96:89:02:be:fb:ee:33:
20:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:48:A3:58:10:2C:22:49:C4:AC:E7:53:3F:B3:A3:36:AF:B0:B2:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6CDD2EA16E811F19D8048D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
60:2f:c8:9e:1b:01:24:a8:cf:c7:85:79:dc:63:96:52:25:7d:
15:4e:f6:bc:8d:93:05:d2:04:7a:31:25:bb:ed:33:2c:a8:f3:
d3:30:3e:54:39:fa:b2:9d:c5:c0:13:a0:6e:93:e8:e1:2f:1f:
5a:9e:c0:ea:42:ad:33:46:45:b5:93:1c:4b:27:92:5f:96:35:
22:58:b5:ba:bb:bb:59:4b:b7:be:88:84:69:59:05:04:38:91:
f8:fd:53:14:68:38:78:33:61:08:d0:c2:fd:5f:64:42:2f:65:
2a:0d:b6:81:48:18:93:d0:24:c9:95:d8:22:bb:06:b9:aa:26:
1a:0e:7a:ce:ee:73:fe:a5:81:fb:ee:48:9a:b8:56:8b:9b:6b:
88:0c:73:83:35:cb:24:3a:b3:61:23:47:5a:50:a3:3a:45:04:
7b:05:ee:d0:1c:4c:b2:bd:95:cd:6d:03:64:1c:2d:c2:c0:93:
8c:6e:96:d9:67:6a:31:1b:e0:06:30:3f:f2:ac:86:6b:1c:c5:
87:fd:54:e5:62:eb:70:83:a5:a0:18:ad:34:0c:9a:e0:51:72:
3d:a5:be:33:cb:ea:a4:3e:98:42:bb:91:d1:5a:37:40:d1:63:
9f:ec:b5:1f:56:63:d8:e8:31:cf:7a:e8:c9:ce:d2:e5:4b:b2:
fc:90:6f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 14:20:18 2026 by rpki-client