Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3DFCF1C1AB511F198435CBFDAE4EC9C.roa
File: F3DFCF1C1AB511F198435CBFDAE4EC9C.roa (raw, json)
Hash identifier: K/lIiuN9mJyY8lRkohVCxh+jC3xE/sAD4Hnc/UH9hg8=
Subject key identifier: 43:21:E0:C1:9E:47:8D:80:02:9C:39:21:A2:D1:C4:56:F3:B4:91:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE4F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3DFCF1C1AB511F198435CBFDAE4EC9C.roa
Signing time: Sun 08 Mar 2026 06:13:41 +0000
ROA not before: Sun 08 Mar 2026 06:13:36 +0000
ROA not after: Thu 28 May 2026 06:13:36 +0000
asID: 401701
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Mar 2026 00:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114255 (0x1be4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 8 06:13:36 2026 GMT
Not After : May 28 06:13:36 2026 GMT
Subject: CN=69ad1395-78f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:be:aa:80:60:ae:ed:40:90:81:ef:14:a6:6e:
be:c4:46:a4:92:b3:37:8c:f5:63:51:65:48:02:46:
77:d4:3d:cd:4b:48:c5:d6:35:0b:2f:d0:93:07:8a:
a8:d3:d2:60:86:dc:9c:76:93:c3:e7:8b:75:7f:9d:
3b:37:98:af:ee:0b:34:95:ce:a8:1a:6b:8d:39:66:
c6:36:6c:41:6f:b9:e0:8f:fb:a3:3e:39:e5:7a:9e:
63:83:d3:47:90:89:2e:4b:ab:14:82:10:d6:42:97:
5c:d2:a9:ca:ce:9f:5e:31:56:b9:41:c9:bf:f3:1b:
2e:1d:3f:7a:a8:85:fc:bd:e0:38:b7:69:e2:fa:24:
16:36:f0:42:3d:21:33:97:fb:ec:4f:ab:2e:ac:3b:
53:f3:7c:22:66:0e:a8:6e:18:8f:45:ae:4b:06:f9:
a9:c0:b3:38:28:e1:7b:29:86:53:e4:53:71:78:b2:
3d:a9:91:c3:b1:3f:be:b2:61:56:df:af:f7:0a:44:
b9:cf:2d:18:9e:27:d7:5b:11:2e:98:d1:e7:5b:11:
ef:8b:33:c7:0f:cc:d6:22:ac:a9:fd:ac:94:b5:ff:
df:1d:44:0c:53:34:33:ab:4f:70:a7:39:df:20:16:
c7:a1:df:ef:17:4f:39:d5:14:7e:11:35:dc:aa:eb:
da:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:21:E0:C1:9E:47:8D:80:02:9C:39:21:A2:D1:C4:56:F3:B4:91:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3DFCF1C1AB511F198435CBFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
5c:d7:75:66:41:8d:a8:44:56:b7:9d:18:93:11:f0:a6:25:9d:
d5:f0:87:ec:6e:5d:f7:18:cb:7f:1b:c4:cd:86:7f:07:af:5a:
17:83:cf:84:90:92:53:c6:97:66:e2:70:a4:54:91:6b:6b:f8:
f2:31:6c:e5:88:82:20:79:62:fe:fa:5b:da:d9:69:a4:60:24:
4d:b6:b6:94:1b:78:c6:28:97:d4:d4:71:31:75:07:5e:2f:af:
53:c0:c0:62:1f:cf:d0:b4:3b:48:1e:61:6f:be:e4:12:35:33:
27:b9:3e:1e:1f:fc:7d:c1:e7:81:89:8c:f3:3b:9a:a9:5a:0e:
c3:83:af:39:aa:88:2f:73:dd:4b:49:a8:00:c2:d7:76:29:87:
f9:6d:e6:d1:96:55:d3:22:e5:7c:75:8d:99:eb:80:97:0e:ba:
6c:fa:03:34:2e:c3:c0:af:25:b6:af:0a:29:28:83:45:80:28:
21:f3:56:83:37:cf:10:37:1a:d9:d9:48:f8:b7:b7:31:af:d8:
96:6d:05:54:5e:f0:31:96:5f:8b:02:17:20:79:19:dd:43:04:
f4:94:b2:b6:3a:b7:1c:b7:8d:83:cb:bf:ec:77:04:99:dc:46:
4e:5b:66:69:1a:d8:73:b0:d3:94:89:63:3c:16:79:45:8b:5e:
ef:54:32:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 17:16:32 2026 by rpki-client