Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05CE78FAFF4911F0AE878AB2DAE4EC9C.roa
File: 05CE78FAFF4911F0AE878AB2DAE4EC9C.roa (raw, json)
Hash identifier: IylmP9BQCHQqALstXMsmXiIfcpDRV/7u11h7AvgXGOc=
Subject key identifier: CC:2E:E7:43:3E:F3:65:46:CE:D9:9B:E4:7E:C4:EC:2E:6F:2C:1A:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B7FA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05CE78FAFF4911F0AE878AB2DAE4EC9C.roa
Signing time: Sun 01 Feb 2026 08:35:55 +0000
ROA not before: Sun 01 Feb 2026 08:35:50 +0000
ROA not after: Sat 07 Mar 2026 08:35:50 +0000
asID: 398823
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112634 (0x1b7fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 1 08:35:50 2026 GMT
Not After : Mar 7 08:35:50 2026 GMT
Subject: CN=697f106b-090d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e0:da:62:db:a8:be:48:97:9e:81:31:8a:47:
05:55:0c:df:b2:2b:b6:36:53:56:bb:b0:33:6e:33:
6a:63:a1:70:e4:9f:b0:95:a4:da:88:8f:58:81:7b:
66:ef:d6:bf:db:53:5f:22:a3:1b:31:29:e3:8b:36:
03:3c:6f:cc:93:d2:70:a4:39:a5:39:1c:4c:11:e2:
07:fa:a6:15:d5:bb:96:f3:2d:67:81:36:9a:66:82:
ec:05:b9:2f:a7:0a:09:8f:3a:5b:85:a5:b6:6d:34:
1e:f4:d7:65:51:f9:d7:31:16:f2:06:3c:41:d8:10:
61:ae:2c:48:28:97:9c:73:76:fe:51:83:57:8b:61:
1c:18:da:47:80:82:1a:e9:33:93:a1:c2:f6:f6:cc:
8f:c7:3f:db:24:60:42:f5:2c:00:f9:fc:08:54:1b:
e5:42:9d:48:9c:48:00:1a:16:28:86:9c:92:e4:bd:
df:54:ee:06:ac:68:c5:8e:ce:68:ac:2e:f0:71:5e:
50:2e:ea:08:52:e3:8f:4b:08:5d:6a:59:7e:99:8b:
22:fe:11:f8:9f:cd:57:3d:16:13:77:cf:df:06:fe:
f0:44:21:d3:9d:cb:40:c3:ca:be:a4:9c:96:70:82:
77:04:ab:c7:3e:70:be:a2:d3:cf:e2:f3:50:b6:fc:
af:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2E:E7:43:3E:F3:65:46:CE:D9:9B:E4:7E:C4:EC:2E:6F:2C:1A:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05CE78FAFF4911F0AE878AB2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
d7:de:da:cf:b4:2d:60:8a:5d:60:ca:25:d7:0c:d0:8a:78:f3:
c2:d0:9b:c8:f1:14:fd:f6:60:0f:3f:4e:56:9f:ce:d4:74:e9:
52:ed:50:c5:a4:44:86:cb:16:3a:1c:97:53:d8:94:20:35:82:
b4:6f:74:21:3f:ed:b3:5c:86:92:a3:c3:2a:ac:8f:7b:9a:19:
31:cd:a7:71:19:fd:c5:b9:dd:22:ab:96:2f:08:58:32:e7:e4:
a7:31:e3:02:e8:81:8c:54:36:62:e0:2d:62:fc:81:45:d7:a4:
c6:33:4a:d0:14:3b:e5:f9:52:51:d0:6e:a6:4f:58:57:75:cb:
09:3e:3c:77:57:a2:cf:c3:60:a2:0c:5e:39:40:15:3e:ec:61:
6b:1a:c0:fb:bd:96:b6:b4:d7:f5:e2:f8:5f:86:29:a0:a9:a7:
a7:cb:41:c1:ee:31:e6:08:f2:0e:c6:23:11:c0:e7:ff:f5:bd:
c4:40:05:9e:9a:4a:f3:d5:bb:89:91:03:d9:21:ef:3c:53:a2:
57:fa:8b:de:0d:19:91:c7:8a:bb:e8:6b:1c:b6:30:d5:78:ab:
a6:54:22:6d:fb:e6:07:7f:ab:63:16:cc:0b:61:3c:76:9f:20:
2c:54:32:e9:38:2b:fa:42:8d:94:ae:c5:70:d0:1a:72:98:99:
98:c8:53:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:11:40 2026 by rpki-client