Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F744AB00E2F11F192245BC7DAE4EC9C.roa
File: 1F744AB00E2F11F192245BC7DAE4EC9C.roa (raw, json)
Hash identifier: c9c1B/ULfWRxQzBPYG97L5kLBp/yeepF2fDi3xGXF9s=
Subject key identifier: 7A:4E:D6:BA:EA:D3:48:48:4C:C4:2D:B1:68:5B:44:E8:4D:94:8E:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA3E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F744AB00E2F11F192245BC7DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 07:38:19 +0000
ROA not before: Fri 20 Feb 2026 07:38:09 +0000
ROA not after: Thu 19 Mar 2026 07:38:09 +0000
asID: 6079
IP address blocks: 154.221.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113214 (0x1ba3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 07:38:09 2026 GMT
Not After : Mar 19 07:38:09 2026 GMT
Subject: CN=69980f6b-1518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2e:4b:be:bb:81:7d:cc:f0:f7:6d:ea:b9:67:
04:1c:10:0e:a9:be:5f:6d:45:51:2c:f5:7d:29:f5:
4a:10:ef:54:9a:7d:c7:b6:bf:54:d1:f3:47:29:69:
c4:ac:d4:4a:3a:93:b2:73:37:b5:62:89:15:9a:3c:
76:e1:2b:eb:36:88:73:ce:7b:fa:2c:09:da:47:ab:
da:02:16:a8:25:b7:01:fe:27:06:71:74:d0:4d:c2:
7c:5b:d5:19:a5:dd:7c:c8:e8:bf:fd:db:6b:90:38:
ed:f9:8d:ff:88:86:8a:34:c5:fd:5d:23:66:ec:d6:
1b:f1:e3:16:a0:3e:5b:4b:cb:68:59:a5:25:50:10:
bc:a0:83:07:9f:25:3a:be:a4:c2:43:13:f4:a7:fe:
17:ea:b0:14:e9:5f:94:86:3e:2a:86:c8:22:dd:59:
9e:bf:e1:12:9d:e4:09:81:94:f0:b4:f7:46:1b:38:
72:0d:de:5d:bc:1a:30:56:31:2b:75:88:02:86:72:
4d:bb:e8:07:17:67:66:69:8c:23:77:c3:54:69:c5:
23:ff:63:8a:1d:0f:52:c9:e6:13:02:e5:5b:64:14:
84:50:ed:37:0f:17:42:a1:af:18:1f:e8:ba:6a:6a:
1d:a3:93:0c:93:4f:bc:26:82:30:24:7c:72:fd:0f:
0b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4E:D6:BA:EA:D3:48:48:4C:C4:2D:B1:68:5B:44:E8:4D:94:8E:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F744AB00E2F11F192245BC7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.192.0/18
Signature Algorithm: sha256WithRSAEncryption
05:ce:52:68:5c:cb:ac:ed:c5:1c:2f:8c:a8:e1:75:a9:f4:61:
a0:07:71:06:a0:1a:69:1b:48:63:07:f3:d8:58:66:56:29:b2:
63:6d:dc:34:e6:ec:1b:41:c6:9a:a4:dd:90:ba:0c:6a:59:cc:
f7:14:ed:fe:46:7e:98:e7:90:f6:bd:e5:8b:ab:45:13:a4:22:
6e:95:18:90:f9:cb:23:9a:40:5f:43:00:41:b4:b9:39:81:88:
96:5a:20:85:5c:ca:e0:34:4f:c3:31:7b:e0:28:64:f1:b5:09:
28:6b:c1:ba:f5:c2:eb:4b:36:ec:b9:25:9a:0a:b0:78:d4:aa:
dd:64:f9:90:3a:50:0b:60:8d:31:8d:18:d8:9f:e7:5d:dc:ca:
bb:cd:3d:a6:6e:5c:96:db:e2:08:87:9e:21:76:e1:99:aa:69:
b0:6b:81:8e:fb:0c:99:7c:fd:1a:d0:6c:b3:7f:fd:37:7b:ee:
77:89:ce:8e:c0:b2:5c:fd:86:d6:87:7a:fa:41:b9:90:f6:60:
88:85:3e:10:24:9a:4a:87:4a:44:b8:c1:78:33:b0:6b:ad:6e:
76:58:b8:2d:dc:5a:6e:0f:3f:a8:1e:01:c6:7f:ed:5d:21:e7:
14:52:b8:03:6f:2f:07:b9:a5:69:13:52:df:aa:4c:da:4d:a2:
4d:52:94:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:13 2026 by rpki-client