Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F7D42340CA311F1A0CCDDBDDAE4EC9C.roa
File: 0F7D42340CA311F1A0CCDDBDDAE4EC9C.roa (raw, json)
Hash identifier: L35KxFkqkqNhV+8YEoP2tQZAQis2PHHHBDNR8Ny1wGs=
Subject key identifier: 73:FA:7D:67:07:BA:60:87:B8:A4:15:CD:97:B0:81:E9:AA:89:13:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA1C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F7D42340CA311F1A0CCDDBDDAE4EC9C.roa
Signing time: Wed 18 Feb 2026 08:23:12 +0000
ROA not before: Wed 18 Feb 2026 08:23:04 +0000
ROA not after: Tue 24 Mar 2026 08:23:04 +0000
asID: 214413
IP address blocks: 154.194.226.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113180 (0x1ba1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 18 08:23:04 2026 GMT
Not After : Mar 24 08:23:04 2026 GMT
Subject: CN=699576f0-1c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:97:cc:72:b7:77:be:06:82:7f:98:41:a3:a6:
7d:1a:3d:e9:00:ad:a0:60:9d:d1:b9:81:97:85:16:
50:9e:d0:9b:50:b6:99:26:5b:d2:e6:38:30:7f:4e:
d5:45:c2:61:a8:80:47:60:4c:6b:4f:fa:8f:7c:81:
a3:a7:59:b0:e5:45:87:1d:64:b9:b0:03:f7:cf:1e:
49:74:54:6d:30:19:bd:f1:8e:37:c0:d7:b4:74:c0:
ae:5c:a2:45:30:e3:5a:54:af:75:ce:96:c4:91:31:
87:cd:c8:eb:46:81:09:23:a6:69:c8:00:4a:f8:12:
2e:f7:73:e9:31:b8:2f:d7:8a:16:5d:85:17:6f:22:
19:08:8a:2f:13:40:ed:c2:b2:dc:54:c4:6b:8d:2b:
d8:50:bd:d3:1b:68:c2:7e:91:8f:30:50:7f:4b:83:
0c:37:bb:33:ca:9a:b7:7a:d2:de:9d:fd:09:d3:2c:
01:eb:9d:3a:aa:ee:89:46:4a:f1:48:5a:6e:3e:4a:
c9:92:2d:75:b2:1d:af:a8:85:9f:87:5d:6b:b4:44:
b8:77:af:60:dd:00:59:eb:fc:21:37:14:c5:0a:a5:
c0:b1:5d:a4:3c:5c:63:a7:5f:30:fe:6a:27:12:bb:
8b:b5:b5:2b:79:8c:fb:cc:1b:6a:cf:0a:77:d9:04:
1f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FA:7D:67:07:BA:60:87:B8:A4:15:CD:97:B0:81:E9:AA:89:13:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F7D42340CA311F1A0CCDDBDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.226.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:17:86:78:17:49:b7:9d:e4:8b:3e:c2:89:24:6e:b8:e7:c2:
81:f4:d4:12:d2:19:f2:60:96:73:1c:09:ed:34:df:25:b6:c5:
5d:38:0e:48:b0:41:d9:da:0e:ec:d7:f2:ab:4f:00:9c:5c:54:
0b:4a:45:26:a2:81:24:b3:8b:21:7a:ed:75:1b:b3:67:2c:0d:
97:a4:cc:60:94:81:04:5b:5e:f8:50:b2:c1:d8:b7:24:61:08:
60:a5:ce:ff:64:7a:37:61:88:eb:ef:8a:8c:bc:a8:06:1c:0c:
5b:50:63:c8:9c:eb:81:18:48:67:79:81:13:9b:4d:6c:7b:3f:
be:15:7e:28:31:9d:6b:7f:00:d2:85:42:1d:ed:c3:1e:8a:91:
fd:87:6c:34:f5:20:b3:24:d3:ee:ba:20:06:f6:36:ed:e7:a5:
d0:ce:59:17:2a:71:74:ff:4d:c9:98:9e:53:61:f0:60:6a:c4:
e7:02:86:0c:73:16:98:63:17:15:74:26:25:1c:47:da:bb:7d:
29:36:d6:9e:dd:1b:7f:3f:4e:80:05:f9:ed:ca:bc:0b:74:7c:
ee:8a:ae:18:8c:48:0b:47:42:14:dc:3f:69:2d:c5:3a:40:9f:
05:77:5d:0f:dd:da:22:f7:f0:ef:eb:83:31:ce:4b:5b:58:0d:
c2:e0:17:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:31 2026 by rpki-client