Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8ECD252242E11F1A702FACBDAE4EC9C.roa
File: F8ECD252242E11F1A702FACBDAE4EC9C.roa (raw, json)
Hash identifier: GxHNvzsuhWWk+28mpm2JNhZU1pXVJM+ks7KX3Gj/qfY=
Subject key identifier: 2E:A9:5E:33:A4:5E:B2:51:EF:A5:CD:4D:A9:B7:5A:F6:21:F0:D1:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BFF6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8ECD252242E11F1A702FACBDAE4EC9C.roa
Signing time: Fri 20 Mar 2026 07:32:39 +0000
ROA not before: Fri 20 Mar 2026 07:32:34 +0000
ROA not after: Sun 26 Apr 2026 07:32:34 +0000
asID: 150698
IP address blocks: 154.197.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114678 (0x1bff6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 20 07:32:34 2026 GMT
Not After : Apr 26 07:32:34 2026 GMT
Subject: CN=69bcf817-85ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:16:2e:74:91:37:85:ce:dc:c2:22:b7:4e:07:
90:cc:a0:1d:53:23:39:35:70:3c:1f:29:6b:af:5a:
0b:fa:c9:d6:1c:8b:04:4d:3a:c0:0e:42:9a:05:a8:
30:b7:2b:dc:86:81:22:40:67:cf:7a:cf:ba:79:41:
c7:f6:45:ad:a4:b9:fd:7d:da:f6:0f:78:17:33:c2:
f6:00:b2:e0:e3:fd:fb:ef:1b:71:6c:65:2e:36:0c:
f1:92:87:2b:14:ac:90:77:24:f7:20:63:7e:20:fb:
c0:f7:2c:26:c4:e4:77:e6:4e:c9:9b:21:ca:7f:bf:
af:87:f3:66:26:80:e6:7c:2a:52:ae:ea:29:ab:5e:
41:73:c3:69:8c:64:f0:6f:c2:9e:cd:f0:61:bb:d5:
5e:7c:61:e3:4e:9d:a2:17:9e:17:fc:c5:29:d3:14:
62:9f:a8:a3:dc:21:54:9d:bc:ca:0c:2d:94:63:10:
7d:de:af:95:0a:07:42:87:1a:6e:be:bb:1a:d0:44:
df:46:90:2d:52:a9:df:ea:a4:a8:ea:a0:58:51:44:
b8:bb:e3:71:92:13:64:ed:ae:48:2c:5e:01:dc:09:
09:2d:41:99:0f:ba:b8:31:85:ce:aa:15:be:48:93:
3b:b4:75:18:69:02:26:e1:5e:5b:68:fd:2d:52:94:
16:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A9:5E:33:A4:5E:B2:51:EF:A5:CD:4D:A9:B7:5A:F6:21:F0:D1:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8ECD252242E11F1A702FACBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.119.0/24
Signature Algorithm: sha256WithRSAEncryption
84:21:68:10:a4:01:c5:e2:84:04:0e:d1:41:a3:91:df:c3:7e:
28:78:1f:5b:f7:da:46:9f:b5:66:2b:4b:0c:c4:04:cd:cd:8a:
5b:7d:e5:46:d2:f7:41:06:12:f8:09:f2:fb:74:e1:04:15:3f:
70:73:57:d3:11:4f:0e:f6:e7:8a:db:ae:e5:48:45:31:bc:a5:
1f:97:46:72:26:92:06:8a:f0:2b:a6:23:b5:5a:53:fa:35:8f:
75:62:c7:67:7a:5e:fe:67:07:f5:47:9b:8f:0a:9d:5c:cd:09:
35:cf:37:c3:32:82:87:b2:a7:1b:d4:38:5d:82:f7:b7:88:21:
02:81:81:ff:df:e6:9e:31:10:60:53:d0:f4:3c:a0:34:70:8e:
18:f6:66:6b:53:d4:17:b8:d5:78:e8:ae:4c:3b:06:e3:d0:26:
9e:9e:e8:e3:e1:b8:e3:41:e3:6f:ad:25:f7:e4:4f:fc:47:37:
31:20:01:92:c9:5a:9b:f8:a9:1b:e3:75:59:15:20:fb:7c:19:
77:4b:6d:44:43:ad:d6:fd:1d:44:4e:7b:27:ea:4d:23:26:38:
07:09:96:7c:05:73:b9:9d:e4:24:bc:3f:dd:2e:fb:62:8a:48:
b3:8a:e3:66:46:38:24:70:b8:7e:dc:4a:39:bf:70:aa:e0:4e:
15:58:27:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:19:14 2026 by rpki-client