Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23FA05A413B411F1A517C3A8DAE4EC9C.roa
File: 23FA05A413B411F1A517C3A8DAE4EC9C.roa (raw, json)
Hash identifier: EcQgUUmfMHqNh0F/2n9mdpjEPkg0775+fN/xsVaRKL8=
Subject key identifier: A6:12:DD:E4:B8:DA:F8:BE:91:8B:BB:24:53:39:09:2D:97:29:57:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC2E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23FA05A413B411F1A517C3A8DAE4EC9C.roa
Signing time: Fri 27 Feb 2026 08:13:04 +0000
ROA not before: Fri 27 Feb 2026 08:13:00 +0000
ROA not after: Wed 01 Apr 2026 08:13:00 +0000
asID: 11427
IP address blocks: 154.82.28.0/22 maxlen: 24
154.85.100.0/22 maxlen: 24
154.94.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113710 (0x1bc2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 08:13:00 2026 GMT
Not After : Apr 1 08:13:00 2026 GMT
Subject: CN=69a15210-f67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:33:46:6f:97:ce:da:e2:07:24:ae:ce:19:92:
62:a7:82:f3:19:a9:53:7f:ec:69:57:bb:2b:09:76:
7c:ca:e9:a5:dd:ca:78:16:72:32:6f:fc:14:c6:c5:
17:f9:b2:a9:3b:b3:e5:65:d4:8d:fe:91:76:b6:91:
4a:db:ad:77:14:1d:0c:f0:a9:6f:3d:99:c2:d7:f5:
1a:e2:61:5c:e0:b9:fa:ed:71:b1:67:9d:f3:3e:fd:
c6:db:e7:54:02:68:ff:d1:89:9e:65:40:49:e5:aa:
fa:24:c7:d6:f5:0c:10:bb:55:1e:fe:03:ab:5a:fd:
87:e7:65:f3:9e:f3:a8:15:5e:c3:14:30:45:44:1e:
9b:71:0e:80:03:14:95:51:c2:62:41:e4:04:f9:97:
26:64:1c:18:e0:b6:8e:fb:52:59:f3:d9:47:96:7b:
e7:dd:41:d6:bf:31:6f:72:ae:d1:e0:f2:ef:a7:5a:
bf:5a:d9:0f:16:e8:65:29:6e:62:8e:0e:f0:4c:63:
19:c6:95:a7:7d:db:62:38:b3:e6:b0:56:1f:f1:09:
25:af:ef:68:5a:c1:ad:d9:a2:36:d9:9b:a1:45:1a:
7c:34:e5:b9:67:55:8d:15:3a:90:08:3c:49:42:0d:
2c:39:fa:5d:e3:ca:42:55:6a:49:9b:55:d6:c7:b8:
9f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:12:DD:E4:B8:DA:F8:BE:91:8B:BB:24:53:39:09:2D:97:29:57:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23FA05A413B411F1A517C3A8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.28.0/22
154.85.100.0/22
154.94.128.0/18
Signature Algorithm: sha256WithRSAEncryption
30:37:ab:04:02:fa:b6:e2:72:08:88:b8:ca:d5:9f:88:ed:c6:
c0:dd:ee:20:31:05:c1:c9:87:f6:e4:2a:c5:ac:e4:3f:05:1e:
da:3f:04:3c:17:e7:86:21:7f:9e:1b:e7:b0:e2:3c:f4:3c:7d:
b6:46:10:fc:cc:af:0c:15:e6:91:5d:37:a0:85:a2:31:2c:48:
27:54:bd:53:f0:64:d9:23:ed:17:a9:10:1b:11:1f:b0:7f:9c:
4f:a5:c0:db:7c:2f:c6:9d:53:b5:df:c8:09:f4:d6:73:4c:b7:
5a:d6:e1:cd:42:9a:c5:f7:f0:3c:5d:05:8b:da:2b:8e:97:f5:
b5:7d:a1:78:16:d5:6f:ad:8d:bd:17:cb:31:8a:1d:e6:85:05:
4f:b8:76:8a:3e:92:21:fa:4b:ae:68:5d:18:b8:46:e9:af:3d:
91:2d:df:21:6b:69:f1:ae:74:19:63:f8:87:c8:e6:78:35:a1:
4b:48:6a:24:7f:90:c1:36:13:cd:29:64:9d:c7:8e:b3:9d:f8:
34:e5:a7:d2:fe:55:91:7d:34:e7:5a:dd:20:3a:3b:58:87:58:
a6:b3:0d:1c:b9:35:ed:5b:6b:57:72:82:fc:df:d9:94:2f:4b:
7a:90:df:d2:d1:4e:2c:6d:c7:3a:cf:10:99:4d:bd:13:29:b5:
4b:6d:07:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:13:59 2026 by rpki-client