Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2CC878E1AB311F185D4C0B4DAE4EC9C.roa
File: F2CC878E1AB311F185D4C0B4DAE4EC9C.roa (raw, json)
Hash identifier: WSm9R6tsdkcj/wMhuZqVgguZiHxHnVsvjsXBJ2paceQ=
Subject key identifier: F0:C6:EB:C5:E4:AF:2A:D9:78:2A:BB:B1:0F:E2:97:85:DD:DC:B3:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE49
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2CC878E1AB311F185D4C0B4DAE4EC9C.roa
Signing time: Sun 08 Mar 2026 05:59:20 +0000
ROA not before: Sun 08 Mar 2026 05:59:16 +0000
ROA not after: Thu 28 May 2026 05:59:16 +0000
asID: 395886
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 25 Mar 2026 10:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114249 (0x1be49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 8 05:59:16 2026 GMT
Not After : May 28 05:59:16 2026 GMT
Subject: CN=69ad1038-94b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d8:df:85:65:8d:90:36:c2:db:f9:18:51:50:
7f:d6:8d:60:33:e4:81:e8:47:cd:0b:f4:5a:20:42:
23:e6:75:9d:ba:99:a5:5f:f1:b9:37:69:ed:91:a5:
06:05:05:6a:6a:de:e5:65:88:bf:b3:98:98:26:db:
cf:9f:43:e4:f7:e7:09:81:70:5b:e7:54:e9:df:49:
f1:ee:7d:b4:1a:52:c1:86:04:05:13:2a:c9:a7:9f:
74:bd:85:56:eb:4d:81:42:75:0f:88:31:bc:e7:5f:
ed:99:50:f0:7a:8f:d3:fd:00:ba:a6:4e:e1:f1:9d:
7c:25:29:88:8d:e8:48:97:92:0c:a1:29:4c:48:78:
a9:53:63:2f:bd:67:fa:25:7c:88:55:a5:13:a4:bb:
ee:79:bf:84:b4:be:2b:19:70:b5:c8:f9:b0:9d:e2:
76:4c:44:4f:93:d3:15:77:22:85:3b:62:0f:2a:0e:
53:53:5f:d3:c5:62:52:68:b1:79:91:5a:f6:9c:40:
02:14:d6:34:ea:cc:34:9b:f9:01:e4:79:50:79:ff:
a4:a3:9d:0d:4e:d1:c8:bd:11:eb:55:e9:48:3b:c5:
05:b6:1e:5f:95:e8:3b:8b:66:6f:b8:a9:8c:f3:27:
dc:c3:dc:45:35:0d:8d:ea:ea:c8:bc:31:42:15:01:
6c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C6:EB:C5:E4:AF:2A:D9:78:2A:BB:B1:0F:E2:97:85:DD:DC:B3:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2CC878E1AB311F185D4C0B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
b7:d3:21:c4:d9:2a:9d:b5:ed:8a:01:4c:c0:e8:71:9f:98:c7:
5f:4a:0c:e5:53:19:a9:43:f3:09:b7:26:85:31:c4:94:4d:4c:
3f:54:3a:00:3c:f1:80:7a:c8:ca:7c:73:c2:70:fb:37:f2:08:
ae:0b:31:56:cc:dc:c3:ae:fc:66:01:23:9c:67:6b:9c:33:16:
1b:c7:53:a2:90:d2:d2:6d:dd:8a:e9:94:f4:7b:76:ac:96:2c:
49:85:0b:67:04:3d:b6:f3:42:64:ae:40:21:8e:78:6f:49:5e:
64:0b:25:de:5a:4f:7f:d8:e3:bf:6d:b3:2f:6d:bf:5a:32:65:
db:36:d1:23:0d:8e:ab:e4:9f:38:ec:ef:a2:9e:cc:ab:dc:43:
7f:1f:03:8a:2d:55:5f:a5:67:3f:fe:c4:a5:60:25:0d:77:57:
52:94:c5:13:b8:73:bd:fa:1b:d3:29:e6:99:a7:1f:bb:f4:0f:
6a:a6:a3:e2:12:f6:59:a2:74:38:97:5f:27:32:f7:52:60:d2:
55:7c:33:e1:f9:f0:91:af:5f:20:4c:44:e5:2c:cf:ba:8a:87:
2d:9d:ec:e9:29:6d:9c:d1:23:54:fe:36:33:a7:d4:6d:b2:db:
c1:90:24:81:86:70:f0:6c:59:5c:ad:fa:34:f6:8e:8a:ba:27:
a0:d2:2a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 20:17:48 2026 by rpki-client