Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13AD1F3A0CA011F1984256ADDAE4EC9C.roa
File: 13AD1F3A0CA011F1984256ADDAE4EC9C.roa (raw, json)
Hash identifier: j7Btg7wHI7jzI6RPX1rFZoR1BFdILaCH1hSxPWuNr3o=
Subject key identifier: A0:8A:7A:99:53:54:CC:A8:13:20:18:C2:53:0D:20:6E:D7:69:CE:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA18
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13AD1F3A0CA011F1984256ADDAE4EC9C.roa
Signing time: Wed 18 Feb 2026 08:01:51 +0000
ROA not before: Wed 18 Feb 2026 08:01:43 +0000
ROA not after: Tue 05 May 2026 08:01:43 +0000
asID: 150750
IP address blocks: 154.208.42.0/24 maxlen: 24
154.208.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113176 (0x1ba18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 18 08:01:43 2026 GMT
Not After : May 5 08:01:43 2026 GMT
Subject: CN=699571ef-697e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:11:ba:5e:10:d2:20:09:99:06:d8:06:ca:83:
2f:a5:17:0c:dd:a8:00:64:82:0e:cb:8b:02:dd:2d:
08:37:de:76:3f:f7:22:4c:fb:74:3c:e2:02:39:ca:
16:8a:da:03:38:e4:a9:eb:86:5e:1b:8b:dd:fe:cb:
cf:11:2d:0f:5c:df:a0:22:9c:fa:18:23:4f:88:c2:
ee:0e:8b:63:58:67:13:b8:ce:52:aa:bc:98:94:34:
07:9c:10:f8:ee:0a:f5:40:a3:69:fd:34:e6:fe:ab:
f7:ab:47:ce:10:71:30:e2:5f:1a:6c:e7:d2:31:39:
ee:5c:95:e0:ca:2f:5e:dd:e2:44:5c:f6:1b:5d:aa:
e8:cd:25:00:30:c5:03:48:91:4c:35:cb:f6:b9:e8:
6a:5c:29:9e:a6:91:0d:c7:ed:be:01:02:97:de:c7:
91:d6:fa:ea:e7:8b:8c:66:73:0a:6d:c2:9f:a8:5a:
f3:06:24:d3:67:5d:60:b5:35:9e:e4:2c:38:b4:df:
0b:d7:51:a3:a6:93:9e:de:bb:2c:5c:fa:6b:9b:d1:
28:f0:83:50:5e:46:7e:7c:a1:68:a9:da:16:4c:d5:
64:92:b0:08:7f:51:82:6c:03:40:5f:62:05:75:aa:
df:db:f8:28:c9:fc:60:fb:f4:c8:32:b6:fa:e6:28:
38:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8A:7A:99:53:54:CC:A8:13:20:18:C2:53:0D:20:6E:D7:69:CE:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13AD1F3A0CA011F1984256ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.42.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:f5:16:c1:78:b1:e8:f3:eb:e3:5d:7f:80:1f:22:aa:24:5d:
9a:89:0b:d7:0a:0d:67:49:fa:ec:a3:b6:09:05:bc:5c:1e:1f:
78:7a:8b:29:63:81:f7:4e:91:e1:85:6c:90:3a:34:24:d2:f4:
03:6d:69:2e:c4:0e:ec:5a:6a:27:57:18:cb:29:dc:ed:e7:38:
b2:db:6a:dd:0d:99:7b:e5:6d:1b:ac:3c:fd:7b:08:2d:af:35:
dd:ac:20:34:74:9f:b5:39:ec:c2:4b:ea:6f:28:4b:e6:1e:46:
9a:c5:40:bc:e8:3e:60:d7:a2:c7:4f:f7:bd:0f:2a:5b:29:eb:
53:20:dd:f6:67:cb:d6:38:a7:ef:85:28:a2:a8:4e:c6:d0:8b:
2f:8a:c1:c3:7d:45:ec:03:21:3b:9d:45:fd:48:de:7e:9c:61:
6f:02:c9:bd:9c:4a:55:00:63:ac:0b:2f:33:af:25:f5:9b:b9:
51:45:6c:5d:e9:9d:ea:46:c1:4b:0c:47:77:90:f1:7e:a3:fc:
cb:90:be:fd:53:0c:5b:d1:8c:33:a9:13:95:e5:07:c6:43:e3:
e3:c4:2f:37:e0:44:c0:8b:62:0c:7f:8d:43:43:c6:a5:b6:ba:
46:c8:e7:aa:5d:e1:25:32:1b:84:b5:4f:71:82:dc:22:e4:43:
3b:2b:2e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:24 2026 by rpki-client