Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B1A83B6114F11F198078679DAE4EC9C.roa
File: 2B1A83B6114F11F198078679DAE4EC9C.roa (raw, json)
Hash identifier: 2aQmBQCFH+QvvLjItAnnLu66BRn7aVfpmZQlP0Lo/r0=
Subject key identifier: 38:42:CC:11:4B:C8:19:84:1B:7A:B2:83:E0:51:FC:09:41:40:DF:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB22
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B1A83B6114F11F198078679DAE4EC9C.roa
Signing time: Tue 24 Feb 2026 07:05:15 +0000
ROA not before: Tue 24 Feb 2026 07:05:10 +0000
ROA not after: Wed 11 Mar 2026 07:05:10 +0000
asID: 214143
IP address blocks: 154.197.60.0/23 maxlen: 24
154.197.86.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113442 (0x1bb22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 07:05:10 2026 GMT
Not After : Mar 11 07:05:10 2026 GMT
Subject: CN=699d4dab-6fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9a:7e:59:01:50:5d:52:72:11:0e:69:b2:a1:
c2:6c:cf:84:ef:75:77:f5:ff:de:ab:54:db:0a:aa:
70:2a:56:b6:98:27:d9:e2:97:6d:22:04:7d:2b:55:
40:ab:ba:84:a3:32:02:b3:5a:5a:29:7d:4a:c0:02:
8e:0f:a2:ea:a0:92:e0:cc:26:42:9a:2d:44:c2:47:
4c:6b:79:97:6f:73:c0:f2:f8:82:1d:f7:d3:49:92:
a9:60:de:a0:aa:4e:49:4e:51:9a:55:7a:b0:ca:c7:
4b:ea:90:d2:29:9f:93:d7:51:ec:a5:97:73:98:d2:
77:b7:aa:fb:0d:c7:2b:03:86:e1:ab:75:3d:7d:31:
f5:ce:c1:cc:08:a1:f3:1d:28:f0:20:e6:f9:55:57:
75:d7:6d:7c:d9:d2:7c:63:cb:c2:b5:18:c3:dd:5e:
7a:b5:df:c9:2f:48:71:4d:75:35:3c:6b:7c:18:a3:
d2:51:34:84:77:ec:ad:dd:70:1d:fa:16:0b:ae:71:
7f:ed:34:3a:e1:e7:e2:b1:16:bf:6a:08:e1:78:93:
c4:9e:3a:f3:13:0a:8c:86:fe:a6:a5:73:36:f5:00:
f0:28:ae:1a:f6:d0:a8:7f:d0:f8:92:63:39:24:62:
47:54:6c:86:64:84:46:44:15:90:82:ec:e9:a4:18:
83:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:42:CC:11:4B:C8:19:84:1B:7A:B2:83:E0:51:FC:09:41:40:DF:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B1A83B6114F11F198078679DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.60.0/23
154.197.86.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:84:a6:e8:2b:74:ce:d9:36:2f:39:ac:07:a7:29:d8:48:b9:
5f:79:9f:1f:ea:02:61:3f:f0:9f:09:73:3e:9b:fc:27:75:3e:
59:af:2b:04:49:72:9c:df:43:43:87:2d:28:a1:5f:19:6b:73:
24:87:6b:92:c0:cd:45:72:c6:53:a7:35:b4:31:65:e5:c7:57:
2e:15:be:72:52:43:14:c3:d3:ee:15:a0:9c:39:50:de:33:9a:
f0:9a:a4:30:cc:4e:32:93:48:f2:0d:5f:09:e0:ca:56:9f:46:
06:e9:14:1e:db:67:33:8f:7b:19:14:8c:f3:fa:d8:8f:4e:7f:
34:3b:ce:f9:84:63:de:41:98:17:f7:91:9c:7f:be:bb:de:3d:
88:a3:83:66:39:ee:cc:66:9d:17:00:a7:04:ed:50:18:63:57:
95:93:20:10:9b:78:4a:e7:41:bf:cc:a7:1a:e6:c8:24:76:35:
61:8d:30:2e:e0:ea:37:81:63:67:a2:7a:6f:dc:12:ce:bb:86:
a4:b1:59:11:00:6f:52:e2:5d:3e:68:93:67:34:6a:e3:0c:03:
54:87:c9:af:e1:10:11:e9:27:c1:f4:ef:15:73:06:64:27:b6:
97:8c:ff:31:17:19:b6:5c:6f:74:72:8e:d9:1b:20:33:c2:f7:
8f:6e:35:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:45:01 2026 by rpki-client