Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5F2383E1ACA11F1943113BDDAE4EC9C.roa
File: F5F2383E1ACA11F1943113BDDAE4EC9C.roa (raw, json)
Hash identifier: g8QMt5mmcZpWB4lUaKjtCcBGR5m4h9uCvNGte84u7Z8=
Subject key identifier: 71:86:40:66:55:62:DD:43:E7:F5:49:E7:61:E2:7A:4B:E4:04:12:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE59
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5F2383E1ACA11F1943113BDDAE4EC9C.roa
Signing time: Sun 08 Mar 2026 08:44:04 +0000
ROA not before: Sun 08 Mar 2026 08:43:58 +0000
ROA not after: Tue 07 Apr 2026 08:43:58 +0000
asID: 214590
IP address blocks: 154.222.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Mar 2026 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114265 (0x1be59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 8 08:43:58 2026 GMT
Not After : Apr 7 08:43:58 2026 GMT
Subject: CN=69ad36d4-7780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6d:e2:92:b4:66:ea:e2:e7:02:66:4e:b3:14:
8a:62:49:6f:e3:a9:d8:08:9b:47:50:d4:dd:16:78:
38:d0:d0:b0:1f:77:51:f7:2b:6c:54:94:15:8c:9d:
38:ea:6b:fb:71:91:02:c3:75:89:36:d2:37:02:8f:
4e:d3:b0:67:7a:06:79:d8:7c:22:d5:23:87:8b:99:
0c:ad:0e:08:51:c3:3a:f9:08:cf:54:ec:fc:3f:87:
51:95:65:41:2a:14:29:f1:2a:5f:0b:be:ca:54:0e:
40:c1:b1:ef:45:d1:ea:da:3b:ef:e3:47:70:2b:4b:
21:0c:75:82:8f:b6:18:1a:37:d0:ea:6e:32:1d:90:
e6:64:56:6d:b3:95:40:2c:04:fc:0c:4d:ff:88:40:
1e:1b:f5:ad:8b:ef:42:20:5e:c6:92:bd:d6:bc:f9:
3f:b9:e3:83:1c:87:fd:f9:54:da:6e:8b:0c:7e:77:
12:ce:48:30:8f:3a:1e:64:78:ac:1e:e7:d0:b5:1c:
e9:47:df:fb:19:8b:83:ec:35:2f:eb:64:36:c5:0b:
15:67:3c:c9:b8:a5:0d:7e:2c:b4:44:0b:40:40:5b:
5b:f5:3b:08:46:3f:9a:28:a9:e2:0d:39:c0:bb:06:
1d:d9:dd:14:95:ab:5b:e0:60:5a:12:0d:68:30:26:
a2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:86:40:66:55:62:DD:43:E7:F5:49:E7:61:E2:7A:4B:E4:04:12:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5F2383E1ACA11F1943113BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.76.0/24
Signature Algorithm: sha256WithRSAEncryption
16:1d:77:cb:cf:e7:7e:16:5a:8d:4e:ad:5b:93:63:59:e5:9e:
ed:f2:6e:e3:18:30:3e:22:5a:48:9d:2c:82:6c:b4:56:58:74:
65:e9:9d:f5:8b:c0:93:7e:80:73:d7:0f:69:98:7a:66:86:7f:
a8:22:41:01:8e:ea:e1:6c:5e:80:01:1d:70:bf:fc:f1:da:3a:
ac:21:ee:4b:2e:df:a7:79:6c:01:df:f7:45:51:aa:e5:13:87:
b5:b4:b7:48:77:01:1b:22:55:56:d5:81:41:93:cf:f6:71:bd:
1d:7f:ef:1d:aa:2f:37:3a:82:99:19:48:0f:a4:d3:11:ed:ff:
7c:5f:0c:6d:5d:fd:cc:ae:cd:da:33:c9:e7:b9:38:0f:4f:bd:
11:66:ca:a8:45:1c:d1:59:38:cd:89:3b:2d:0d:b6:dc:c8:f8:
e4:99:c5:af:30:47:9b:2c:93:b7:80:b8:04:98:d1:af:54:27:
52:43:fd:1b:04:1e:b3:b8:e3:99:9d:a1:55:ea:d4:de:da:06:
87:ec:91:9e:9c:3f:25:7f:c1:2a:9c:5f:5a:dc:7b:d4:43:6a:
39:1b:b5:28:4e:f7:96:cb:18:64:9c:40:47:e2:ac:c8:5f:fa:
a6:0c:20:e0:53:10:c7:5d:d0:8d:d0:5d:83:05:66:0d:d1:ac:
a4:12:56:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 09:28:48 2026 by rpki-client