Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C6FD69E01AA11F18C4869D2DAE4EC9C.roa
File: 2C6FD69E01AA11F18C4869D2DAE4EC9C.roa (raw, json)
Hash identifier: 0aKH8XX0fJWkh1pRcpwe9FzmseQTQDiJBFzNAqvY+ZU=
Subject key identifier: 35:2A:A7:06:41:FC:A1:BC:34:B5:5F:7E:C4:F9:15:CA:D7:53:02:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B885
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C6FD69E01AA11F18C4869D2DAE4EC9C.roa
Signing time: Wed 04 Feb 2026 09:16:23 +0000
ROA not before: Wed 04 Feb 2026 09:16:17 +0000
ROA not after: Thu 12 Mar 2026 09:16:17 +0000
asID: 138915
IP address blocks: 154.223.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112773 (0x1b885)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 4 09:16:17 2026 GMT
Not After : Mar 12 09:16:17 2026 GMT
Subject: CN=69830e67-ad35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:67:2e:a2:32:8d:9f:6f:9e:73:64:3d:38:fa:
24:07:6a:c8:c8:b4:28:95:61:0f:ad:b2:61:74:e0:
ec:dd:54:7a:d9:3d:23:33:2f:5e:2f:e6:af:57:f5:
7e:36:08:b3:ce:be:84:67:10:48:71:4e:8f:07:cd:
2d:13:e7:d3:eb:18:66:45:e5:cf:81:d9:3a:b0:ac:
3c:3b:d6:af:0a:1d:f1:95:50:4f:63:67:d4:0d:54:
07:41:bb:f0:be:7a:d9:0e:61:19:96:12:19:89:1d:
2b:8d:0c:8e:e9:26:01:7b:0a:13:5f:6d:cb:db:03:
69:58:0d:36:ca:72:8a:19:68:f6:f2:36:bc:d1:5a:
7e:73:d7:fd:31:30:c2:37:5f:6c:79:74:0e:ad:91:
24:c3:e6:35:b7:35:2c:64:ae:66:9f:d7:d9:6d:2a:
64:91:48:d1:9c:bd:95:6e:d3:71:97:4d:2b:32:7a:
da:87:3e:cd:55:e0:65:2f:81:ed:d7:b6:75:a1:f3:
49:8c:dd:82:b2:96:fb:70:35:e7:c2:42:58:a2:e1:
0e:1b:ac:b5:4f:d1:37:2c:a6:c2:43:7a:d2:3e:17:
a0:e5:4f:ed:42:98:ee:7d:92:85:b7:60:da:79:98:
07:89:6c:62:21:34:ad:d0:2d:9f:b0:e3:70:41:91:
dd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2A:A7:06:41:FC:A1:BC:34:B5:5F:7E:C4:F9:15:CA:D7:53:02:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C6FD69E01AA11F18C4869D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.65.0/24
Signature Algorithm: sha256WithRSAEncryption
05:d7:80:70:29:52:79:7f:c8:43:8b:ea:24:92:44:87:5c:3d:
56:94:5d:62:6c:a5:f7:a4:e2:c6:9d:58:f3:49:01:e3:cc:03:
09:c5:42:e5:8f:ce:9e:9e:01:66:f1:a5:e4:b9:18:be:c5:a8:
c1:73:c2:d7:22:b6:ea:8a:3a:89:f5:3e:48:ab:e2:c8:04:f8:
74:72:09:df:91:ea:97:cc:55:10:ad:2f:d8:c5:e2:9c:0e:10:
70:71:98:76:26:d7:69:2a:98:7e:95:94:90:73:3e:a7:51:f4:
f7:6d:d4:2e:db:d8:35:b6:50:42:e4:b9:8c:43:57:0a:fc:a9:
ac:52:34:a0:7b:b5:15:49:0e:7e:c0:14:5d:08:e3:a8:d7:65:
cb:7c:e4:11:65:4d:da:fe:48:f9:20:5f:9f:39:43:74:4f:d2:
d7:08:e2:32:49:f7:0d:84:8c:d1:df:3d:57:c6:f9:75:7a:f7:
bf:cc:bd:2d:1c:38:9e:70:81:d6:82:db:56:0f:0e:95:22:07:
43:e6:6f:2b:fb:d8:48:39:88:51:84:eb:2b:c3:fe:67:41:0d:
23:d1:ef:96:fb:a5:a2:c5:f9:c1:d8:d9:53:5e:2c:60:55:8e:
5a:23:7d:90:d1:02:f7:99:65:a4:74:ca:fe:b9:bc:80:26:85:
fe:a2:d6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:11:26 2026 by rpki-client