Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E1A175E0E8E11F199833E83DAE4EC9C.roa
File: 0E1A175E0E8E11F199833E83DAE4EC9C.roa (raw, json)
Hash identifier: bL5kCbwOoOqgY7JJoxN1AviRqvbk56gWHMK8LQDv5bs=
Subject key identifier: 7B:E5:9E:A1:1F:2F:67:67:A7:ED:57:62:E8:42:3C:D7:CC:1C:42:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA9E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E1A175E0E8E11F199833E83DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 18:57:51 +0000
ROA not before: Fri 20 Feb 2026 18:57:47 +0000
ROA not after: Thu 26 Mar 2026 18:57:47 +0000
asID: 150698
IP address blocks: 154.197.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113310 (0x1ba9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 18:57:47 2026 GMT
Not After : Mar 26 18:57:47 2026 GMT
Subject: CN=6998aeaf-7722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d8:d2:55:2c:38:d0:0c:0d:b8:01:b8:b4:e3:
9b:31:45:52:9a:29:24:3b:e6:e0:59:83:e6:c9:6d:
05:92:7a:0b:3d:8c:45:a5:26:78:72:0d:c3:9d:6a:
e7:3c:58:0f:ec:0c:76:b4:f1:12:f9:0b:09:bd:a7:
53:a8:33:3e:3a:70:d7:8c:a5:53:61:a9:b7:aa:82:
d6:1f:13:70:54:d9:49:ce:9d:f9:d7:77:dc:8e:01:
73:ae:89:99:d7:79:ec:cf:5d:ad:39:2a:08:03:91:
6c:9b:40:ae:c2:2f:cc:cb:10:9d:4b:30:c8:bc:82:
fc:32:48:91:6a:9b:b2:ad:c2:7e:96:59:55:7c:9a:
5d:9c:67:17:fc:f5:e1:c4:0e:7d:93:d9:6e:c9:f2:
af:5c:c6:6a:e5:f7:df:bd:84:5e:62:fd:24:bf:8d:
e2:8d:f1:99:7a:34:ba:27:8c:7c:29:57:9a:c5:01:
44:73:d2:11:f2:85:6c:fc:2b:e8:1f:c8:ba:57:a5:
8f:46:a0:ca:7b:bb:c8:d3:41:8b:62:41:10:91:cd:
de:b1:04:c1:dd:a6:ae:d2:09:67:a8:76:d3:6b:c1:
c2:09:54:a4:8a:a7:30:df:5b:ea:77:a5:95:a3:95:
a7:0e:8b:8d:07:7c:5c:35:bc:d2:fb:fc:3b:30:b1:
88:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E5:9E:A1:1F:2F:67:67:A7:ED:57:62:E8:42:3C:D7:CC:1C:42:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E1A175E0E8E11F199833E83DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.119.0/24
Signature Algorithm: sha256WithRSAEncryption
92:eb:61:8f:3f:3b:d1:d7:42:60:1e:45:ca:90:65:c9:50:b5:
ee:cb:ec:9f:51:ee:15:25:8e:b6:6f:72:37:cf:52:5e:79:3e:
f3:e7:a0:cd:ed:0d:47:d6:c4:26:d9:eb:0a:72:b0:19:18:26:
77:ba:e6:a6:52:54:9d:8e:6c:6c:9f:43:be:39:a5:94:58:35:
ab:cf:dc:66:41:e7:da:a6:cc:65:e9:06:11:2f:95:76:8d:18:
03:54:16:f6:43:e3:54:32:62:9f:2a:4c:a7:1a:fc:7b:6a:8f:
46:16:a3:e2:72:22:f7:4e:40:2d:0e:7e:27:a6:03:06:0f:02:
33:fd:99:34:cb:a9:08:94:aa:8a:d6:b0:7c:a1:c9:98:ac:1f:
6f:61:99:7a:c5:fb:50:cd:09:1a:cf:67:c1:b8:e2:e5:fd:c5:
4e:38:35:f5:97:6a:d2:11:0f:53:69:e4:3e:33:05:72:d7:f6:
94:b4:10:d0:13:17:4e:03:b6:82:f8:8d:d2:b2:31:97:f4:70:
b3:40:3d:03:b0:01:67:70:54:64:dc:09:7f:e8:e0:0e:f5:69:
ae:be:29:e9:c1:d5:be:e8:05:c2:84:0d:39:14:5e:6c:30:0c:
c5:cf:1c:40:c5:ed:e9:32:62:9d:ad:ff:c4:e8:e0:82:42:3b:
31:0c:c6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:39:30 2026 by rpki-client