Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01002FEA12DF11F18460778DDAE4EC9C.roa
File: 01002FEA12DF11F18460778DDAE4EC9C.roa (raw, json)
Hash identifier: +YQ06fy5V9wzL5cdztmsK2KQdN88eDyacRgrKsvCSYI=
Subject key identifier: 38:B9:51:79:8D:F5:4B:F3:9A:74:89:BF:6D:19:56:63:B8:85:2A:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BBDC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01002FEA12DF11F18460778DDAE4EC9C.roa
Signing time: Thu 26 Feb 2026 06:47:23 +0000
ROA not before: Thu 26 Feb 2026 06:47:17 +0000
ROA not after: Wed 01 Apr 2026 06:47:17 +0000
asID: 20001
IP address blocks: 154.202.192.0/18 maxlen: 24
154.220.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113628 (0x1bbdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 26 06:47:17 2026 GMT
Not After : Apr 1 06:47:17 2026 GMT
Subject: CN=699fec7b-7618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2b:02:15:97:fd:76:61:cf:19:57:a2:45:a1:
94:27:76:27:83:67:f1:27:61:40:c7:31:b7:5e:22:
0c:b4:be:a5:31:f4:5a:1c:2c:0c:ca:fb:d4:79:47:
38:92:d0:2b:94:77:17:6f:54:73:10:99:7b:04:08:
70:ad:ae:c3:a6:29:52:a0:5b:38:16:94:f3:ee:ec:
dd:02:0a:c2:8e:2f:5c:4d:ef:43:d7:da:6f:23:2b:
7c:3c:0a:69:74:66:91:24:3b:04:48:2a:36:f6:e9:
f4:cb:80:77:13:ca:8a:87:f5:3d:e1:4c:39:a5:c6:
ac:dd:01:b6:88:39:20:04:41:32:bd:71:83:a0:4f:
7c:9e:84:fe:35:e4:1f:1d:b8:2f:cc:19:73:6c:83:
3b:25:ba:d7:1d:2a:59:32:44:77:f3:33:24:91:28:
e2:ee:59:39:07:8e:46:5d:b7:6c:2a:b8:b3:5b:fb:
f0:8e:35:2d:7a:bb:f4:fa:9a:94:3a:ab:0f:4a:b4:
c9:53:a2:d0:e5:2a:ab:d5:c5:e5:96:e6:21:22:7c:
d8:30:51:b5:3e:1d:ab:65:46:5c:c4:63:09:38:8b:
ad:09:2c:a4:b7:fa:cc:60:f2:79:6f:b8:75:b9:73:
9b:6d:81:11:4a:92:58:46:8a:cb:bc:80:6b:4f:21:
b3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B9:51:79:8D:F5:4B:F3:9A:74:89:BF:6D:19:56:63:B8:85:2A:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01002FEA12DF11F18460778DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.192.0/18
154.220.128.0/18
Signature Algorithm: sha256WithRSAEncryption
09:d5:0b:fb:8f:78:c0:84:7f:6e:75:17:b8:f0:39:e8:ad:be:
d6:2d:c4:ad:64:c3:4a:e5:ce:32:5e:04:c4:fc:53:cb:b6:ca:
8f:5d:72:75:86:02:8d:16:b9:2b:ef:ca:d2:fd:bf:8d:a8:ad:
2f:18:b6:e6:9c:d3:70:2f:5f:62:90:4e:3f:9e:f1:b8:bd:d7:
c6:cd:9b:ba:16:0c:b4:98:88:1a:a0:f1:e2:a6:0e:9a:09:a8:
4f:f3:63:c6:58:5c:74:12:cb:a6:e6:3a:65:e4:7c:ef:47:ae:
9e:ed:7d:5d:9d:c9:62:7a:ab:f0:a9:30:2c:d3:c0:8a:f7:9e:
dc:ab:9c:3a:89:fb:2a:56:10:da:48:4f:14:22:0a:d8:b4:91:
ef:8f:86:c8:c1:66:11:9c:46:7d:d3:44:10:a3:ec:59:5e:fd:
dc:f8:52:73:1a:fe:94:1e:d4:7b:8b:d9:a9:63:11:7e:e7:90:
5f:b7:fe:31:cc:48:ac:e6:d9:b6:1b:5b:14:cf:67:b0:2d:7e:
3d:36:af:18:23:54:3d:30:c5:4a:fa:f7:33:86:a3:1d:6e:4d:
62:55:b1:47:21:ea:bd:b7:2b:2e:7f:05:bc:e3:a5:80:cc:57:
df:95:f5:7a:a7:e3:a9:d8:d8:c8:72:30:32:05:b0:70:87:a0:
c8:52:51:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:11:17 2026 by rpki-client