Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F310ECA2188E11F1A50AF778DAE4EC9C.roa
File: F310ECA2188E11F1A50AF778DAE4EC9C.roa (raw, json)
Hash identifier: agwz+BR80y+SFU81ovfc4YETJW5BaPhH9qE8B0LonOE=
Subject key identifier: 71:89:93:C2:41:0E:67:FD:8A:B3:40:85:73:D8:11:E0:FC:98:E3:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BDCB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F310ECA2188E11F1A50AF778DAE4EC9C.roa
Signing time: Thu 05 Mar 2026 12:29:27 +0000
ROA not before: Thu 05 Mar 2026 12:29:22 +0000
ROA not after: Sat 11 Apr 2026 12:29:22 +0000
asID: 49981
IP address blocks: 154.193.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Mar 2026 00:06:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114123 (0x1bdcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 5 12:29:22 2026 GMT
Not After : Apr 11 12:29:22 2026 GMT
Subject: CN=69a97727-d263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:49:61:83:a2:79:ba:8f:4a:c4:b7:5f:5a:5f:
9c:47:ba:79:38:51:e4:14:18:15:45:26:bf:59:60:
91:b7:c5:1a:13:b5:40:3b:c5:09:bc:8d:0e:13:1c:
37:64:a8:92:af:6c:30:c3:10:e9:66:d5:91:2c:58:
39:52:a7:50:80:f5:68:ec:0a:e0:43:db:c4:91:b1:
0a:ea:e7:9c:c2:af:96:4c:a6:d2:27:28:01:e0:e0:
96:66:db:83:8c:52:54:ed:a2:f3:d2:b0:6c:b0:97:
7e:63:9f:db:07:0f:10:83:70:b7:71:43:b1:b6:da:
d4:01:19:83:b5:53:b4:72:d6:57:8b:2a:a1:85:81:
73:46:67:33:06:25:9e:5b:bb:f1:69:77:43:f4:8b:
bc:02:fa:9b:61:61:d0:24:a6:f1:bb:9a:ea:a5:4e:
bc:a6:d0:a4:79:98:67:d7:b5:b6:36:e2:fa:f3:b1:
d0:11:41:57:88:18:40:e0:e6:0e:a7:46:25:09:1e:
75:6d:af:20:65:a7:4c:37:06:24:f4:b0:72:55:2d:
cd:2c:1a:a2:df:35:1a:c4:a2:09:19:3e:04:d3:fb:
92:87:b5:3b:70:ae:7e:02:2f:5a:74:65:cc:28:51:
12:cc:54:6f:ef:4b:47:8b:08:b5:65:c8:14:c6:29:
9f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:89:93:C2:41:0E:67:FD:8A:B3:40:85:73:D8:11:E0:FC:98:E3:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F310ECA2188E11F1A50AF778DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.129.0/24
Signature Algorithm: sha256WithRSAEncryption
12:69:cb:24:b4:d1:c9:b7:a6:e9:95:9e:0a:9a:d3:93:fc:7c:
0f:86:41:70:cf:43:f5:6c:0d:41:82:b3:42:64:c9:ea:4c:cd:
15:51:5c:2a:14:a4:2b:d6:b8:be:ae:74:46:31:07:e2:c9:80:
72:0f:08:af:24:6d:8a:bd:05:24:7d:55:f0:89:90:57:b5:86:
e4:2a:43:c1:5e:31:2b:70:00:2e:28:db:5f:3f:f3:c0:e2:27:
e8:e6:5b:91:f5:5d:ba:17:e7:34:9d:46:0d:75:22:b1:4d:d7:
37:30:d0:08:bf:eb:d6:34:e8:75:b5:c4:bd:26:2a:5e:1b:99:
07:a7:e2:95:ef:34:95:89:bd:3b:ca:ff:a3:94:11:99:24:0f:
44:08:b7:a6:67:c7:e4:ee:27:39:6a:22:1f:34:0a:ae:c4:86:
5c:b2:7b:c7:f8:fe:74:c7:fd:75:28:e1:8f:9e:74:ce:17:52:
36:b7:9b:8f:7f:ea:7a:76:09:e7:11:3d:53:30:ad:f3:30:a1:
bd:46:d9:60:77:c2:5a:12:3c:39:cd:57:0d:79:6d:33:a4:63:
3a:3a:e6:fa:7d:90:72:36:87:0f:7d:3e:4c:ec:39:65:e5:5a:
09:45:14:71:f7:75:a9:2b:5a:7a:79:d4:46:22:0b:6a:df:c0:
f9:28:69:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 20:25:35 2026 by rpki-client