Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/157C1AC0065E11F1B45D5AB6DAE4EC9C.roa
File: 157C1AC0065E11F1B45D5AB6DAE4EC9C.roa (raw, json)
Hash identifier: hNprQS565zrf262HCiFpsaXnbl5NZwkQsqtvHOG7GRM=
Subject key identifier: 85:73:A1:1A:70:7D:8F:78:C3:45:0E:E2:D4:88:96:5B:2C:90:05:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B903
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/157C1AC0065E11F1B45D5AB6DAE4EC9C.roa
Signing time: Tue 10 Feb 2026 08:54:18 +0000
ROA not before: Tue 10 Feb 2026 08:54:14 +0000
ROA not after: Tue 17 Mar 2026 08:54:14 +0000
asID: 153671
IP address blocks: 154.196.170.0/23 maxlen: 24
154.196.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112899 (0x1b903)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 10 08:54:14 2026 GMT
Not After : Mar 17 08:54:14 2026 GMT
Subject: CN=698af23a-6872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:dc:4d:13:4f:7b:80:fd:f4:28:f6:cf:c5:2a:
70:7d:65:47:d5:95:83:f4:ef:8a:32:b5:47:a3:5a:
c7:8a:0d:59:9f:11:86:8d:82:42:28:d9:8e:be:67:
8a:00:50:8a:65:44:45:0f:e7:02:0e:db:3a:24:54:
bc:11:54:15:2f:7b:4e:9b:cc:d4:70:54:38:0d:ad:
44:a5:80:8e:ef:7f:ec:4f:3c:90:c3:6d:ea:13:e9:
ad:ad:1b:6b:68:2c:96:43:d5:4e:a0:05:42:2a:40:
a0:76:36:1a:ba:b6:07:88:cb:7c:45:de:81:8d:82:
2e:b9:16:8b:c2:6b:19:94:d6:0b:79:58:7d:85:3b:
93:2e:bb:18:43:32:fc:d1:b2:fd:6a:b6:4f:7f:ac:
79:a8:ee:48:b7:a8:26:31:64:8c:e1:3c:78:e4:98:
8b:28:92:4a:c0:c3:2b:b7:4f:45:76:6b:41:92:6e:
21:cf:f3:5b:63:a5:c5:44:7d:a8:e6:43:e3:1b:06:
80:73:fc:62:36:6c:3a:b6:06:af:33:33:01:d4:28:
ca:60:92:10:8c:c2:c1:4c:23:27:c0:63:a8:95:5d:
dc:dc:7b:51:7f:87:e2:cf:ac:66:33:0a:6d:20:d4:
23:6e:5c:a2:d0:d3:8e:12:df:19:10:99:fc:79:b6:
a2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:73:A1:1A:70:7D:8F:78:C3:45:0E:E2:D4:88:96:5B:2C:90:05:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/157C1AC0065E11F1B45D5AB6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.170.0/23
154.196.248.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:21:d8:28:eb:94:9e:c0:c0:56:33:c0:0b:b7:99:0d:7b:39:
da:37:bc:4f:b6:0e:fc:eb:2f:f8:0f:d4:e3:5e:67:04:22:d8:
83:aa:e0:cb:a9:53:ec:66:57:28:6b:6f:e1:8d:26:04:35:68:
4b:fc:7b:4d:69:31:05:d2:64:26:63:67:aa:ac:7b:cd:92:e6:
51:a0:1a:b3:be:85:d9:dd:0b:59:44:b5:f9:ce:3f:c4:c3:9a:
85:53:b6:59:61:dd:5b:60:c4:19:63:a6:1a:55:e3:9d:19:4b:
c3:c2:bd:89:6d:21:26:a5:5d:94:8a:9f:44:9e:5e:82:45:4f:
d6:8a:5f:78:c4:ab:03:f4:7b:16:18:c3:cd:b9:b1:67:87:a0:
e6:f4:52:85:cf:fb:db:31:fe:00:6f:da:dd:b6:0d:b7:94:42:
fe:a9:a7:db:12:c9:8a:0c:4c:7a:9b:af:bf:cd:a3:f8:27:e2:
89:93:1d:74:2e:19:b8:e3:4a:6b:ce:f9:9d:db:09:4a:40:ea:
82:4f:7c:7d:db:1b:c1:f1:2b:d7:29:86:2e:98:93:fe:4e:11:
20:de:03:2c:06:34:a0:29:9b:f1:44:f7:69:67:4c:26:53:bc:
94:36:cf:c8:0a:78:97:02:92:ee:cc:0d:6a:bf:6b:c6:99:59:
e2:53:e5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:01 2026 by rpki-client