Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A3C960212F811F1AA86D6A3DAE4EC9C.roa
File: 0A3C960212F811F1AA86D6A3DAE4EC9C.roa (raw, json)
Hash identifier: sQcQ5aPP7g+t+w1u8Qa2bwh1IvkPbBFF3Od2d8zTW7Q=
Subject key identifier: 5A:3E:9E:BE:2B:F5:F0:0B:1C:BB:1C:8E:EB:2B:E2:47:63:2B:65:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC07
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A3C960212F811F1AA86D6A3DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 09:46:36 +0000
ROA not before: Thu 26 Feb 2026 09:46:31 +0000
ROA not after: Thu 05 Mar 2026 09:46:31 +0000
asID: 45669
IP address blocks: 154.80.0.0/17 maxlen: 24
154.81.224.0/19 maxlen: 24
154.91.160.0/22 maxlen: 24
154.91.164.0/23 maxlen: 24
154.198.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113671 (0x1bc07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 26 09:46:31 2026 GMT
Not After : Mar 5 09:46:31 2026 GMT
Subject: CN=69a0167c-d22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bd:45:cb:5b:ac:12:02:71:81:b4:86:cd:32:
36:a6:cd:7e:16:b3:a5:ba:af:df:4e:29:29:d5:6f:
35:81:d4:5c:c2:04:b8:62:a9:c6:ba:19:7f:cf:7f:
f8:53:9f:f0:3b:c9:e0:5a:a5:75:ff:a3:d0:9a:a7:
06:86:3a:07:bc:88:f9:48:aa:4d:43:9a:90:92:7c:
28:c5:7b:91:32:6a:2c:06:d9:d8:74:2b:5e:2e:75:
6e:90:1d:bb:27:22:72:bd:e4:ea:72:7a:79:5c:7e:
e3:4b:f3:da:40:92:80:9f:fd:44:e6:76:3e:fd:86:
ae:af:98:55:26:e5:37:0a:a2:d1:56:6b:a3:12:37:
4a:c3:43:15:fe:60:a5:3c:83:7a:05:7d:fa:ca:2a:
7b:07:43:f8:4a:7b:0c:59:14:20:90:d4:34:eb:6a:
5e:75:29:09:1d:99:ca:fb:e2:db:29:bb:d7:1a:80:
78:96:63:15:d4:e5:a9:0f:3e:bf:02:f7:41:7f:ea:
ec:36:49:d7:dc:58:58:4c:e4:1b:66:b8:2e:23:91:
fb:ab:4d:12:55:1c:63:cc:97:73:62:80:e9:c1:e8:
35:06:0f:7e:25:e0:5d:08:a6:be:c2:fb:78:06:81:
96:61:b0:70:d5:13:8b:9b:2d:27:5d:a6:61:cc:3d:
4a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3E:9E:BE:2B:F5:F0:0B:1C:BB:1C:8E:EB:2B:E2:47:63:2B:65:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A3C960212F811F1AA86D6A3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.0.0/17
154.81.224.0/19
154.91.160.0-154.91.165.255
154.198.64.0/18
Signature Algorithm: sha256WithRSAEncryption
73:68:ff:1a:e6:0d:08:d7:e6:21:7b:a9:c4:b1:d5:ee:ea:08:
82:2f:a9:87:94:c1:6a:d9:4c:8a:67:df:62:ef:90:4e:6a:2b:
17:81:6b:22:5d:d3:fd:a7:2f:09:8b:c9:f9:ff:e9:22:51:ae:
3a:c2:ee:10:7e:3e:44:0e:ab:4c:87:0a:18:1f:b4:f5:2d:ec:
05:27:02:bc:f8:ad:6f:7d:ec:7a:b6:d1:bd:4c:be:84:7c:cd:
3a:5a:c3:46:a1:63:06:89:63:59:2a:b9:29:23:26:b9:09:6d:
f0:92:bb:1f:6e:bb:f9:fe:2a:c0:ef:29:d4:9b:6c:9a:e8:9a:
78:15:3f:99:50:43:4a:55:6b:7e:9b:5b:fa:f7:29:c6:bb:5f:
2e:ed:8f:65:77:33:d7:3b:78:a0:ba:b5:e4:8e:3b:9d:07:19:
40:82:9d:2a:ec:f4:a1:45:71:12:71:a0:8d:d3:3c:35:7e:00:
81:7e:17:04:de:1b:50:e8:f0:26:c7:a4:6a:6d:73:91:d5:5c:
8a:6a:20:f3:06:af:de:e2:5d:f3:ea:94:98:65:4a:25:24:bf:
7b:38:7d:b8:5b:98:24:fb:db:e3:d8:f6:3d:c4:1e:e3:de:ea:
a6:64:06:48:87:bc:b2:9e:30:d8:5d:04:9d:6e:51:ef:d0:ce:
8b:d0:5c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:26:59 2026 by rpki-client