Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C37658C115811F18B8A49ABDAE4EC9C.roa
File: 0C37658C115811F18B8A49ABDAE4EC9C.roa (raw, json)
Hash identifier: HRjJ3cGpe+MXsnxZVbgLrCpw9DkD0a1d9tsOTYb2F/8=
Subject key identifier: D7:78:FA:85:32:B5:E4:FD:62:25:C9:40:CC:95:80:63:DD:2D:EB:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB2A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C37658C115811F18B8A49ABDAE4EC9C.roa
Signing time: Tue 24 Feb 2026 08:08:48 +0000
ROA not before: Tue 24 Feb 2026 08:08:44 +0000
ROA not after: Mon 30 Mar 2026 08:08:44 +0000
asID: 40779
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113450 (0x1bb2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 08:08:44 2026 GMT
Not After : Mar 30 08:08:44 2026 GMT
Subject: CN=699d5c90-5272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:34:ce:3d:94:28:b3:40:6d:8f:ca:76:da:bf:
d2:90:e5:46:92:2e:0d:c2:d6:7f:87:19:97:58:40:
0c:35:a1:27:ed:fd:9b:c4:27:78:bc:97:52:54:5f:
02:3e:f0:ca:8e:61:db:30:86:21:ca:d0:9e:9e:2d:
fc:8e:68:b2:a9:6c:f3:ee:4a:b1:a4:ca:9c:70:87:
6a:e1:21:c4:a8:3f:60:4b:f5:7e:77:3a:89:31:71:
76:21:91:0b:8a:74:b4:7c:ff:a5:bc:94:09:44:a8:
d1:f4:33:4e:4a:0f:5f:1b:5c:81:d6:f2:24:ef:49:
5e:35:90:dd:f4:13:2d:73:51:a5:f8:93:01:ac:1c:
c5:d2:f5:d7:b3:d3:6c:a8:ea:02:b6:8c:37:94:fe:
54:fa:4f:e6:e5:8c:f8:a4:dc:a7:c3:1b:5d:5f:2b:
b9:bf:6f:ed:11:44:c6:a2:a8:7d:ca:f3:74:1b:6d:
32:0d:72:e3:36:3b:44:cf:c7:70:8f:c4:37:2b:33:
34:c4:9d:1e:bb:f6:3e:91:17:37:91:f6:73:31:25:
25:29:d5:25:68:0b:80:f4:5f:ae:ee:78:ea:9d:25:
4d:ad:f3:94:73:4d:7f:be:37:59:69:df:57:e4:40:
ba:bb:7d:ee:56:ef:81:20:13:2d:a2:43:7f:ca:58:
a5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:78:FA:85:32:B5:E4:FD:62:25:C9:40:CC:95:80:63:DD:2D:EB:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C37658C115811F18B8A49ABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
a9:e3:2c:0d:55:7e:b5:b3:8f:d7:7d:29:52:d4:d4:90:b4:d8:
e5:8a:4c:83:4d:1b:2f:9d:b6:ae:61:21:7f:1f:e2:d4:a8:08:
2d:44:be:1a:fc:e7:26:47:df:bc:5e:04:11:c6:4e:0c:f2:6e:
5e:23:6a:29:92:07:15:b7:e1:c6:4a:01:fc:15:02:f3:0c:b9:
59:6d:0d:55:c8:c1:29:b5:81:23:39:77:2c:2b:fd:ef:7f:64:
a7:b9:3a:41:90:5a:8c:e3:d6:d8:92:b0:88:ad:e8:07:3a:25:
22:79:a1:1a:0f:92:0d:33:5e:01:82:10:4c:ae:f0:f2:14:a0:
60:f0:6d:80:f9:60:9d:fe:fd:03:47:4c:23:ca:ba:82:8e:e5:
b7:95:fc:01:c7:c6:32:df:35:c2:b7:e1:78:74:3f:f7:30:5e:
04:a4:38:c1:02:04:f4:24:c0:9f:6f:f5:4d:c2:6c:aa:c0:21:
1a:4a:26:e5:6a:18:94:72:ef:85:93:25:1b:3a:75:71:3c:57:
95:cc:0a:0a:01:21:42:15:0e:23:d6:27:fc:4e:d6:d2:f8:0b:
3e:7f:61:a6:52:58:c9:9c:7a:85:81:aa:0d:2e:36:c0:a1:38:
e1:22:fc:44:d3:a7:1a:9e:4d:c4:14:a1:c3:ba:7d:64:d3:70:
22:f7:69:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:43 2026 by rpki-client