Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C727DC4115C11F1BE12EDC4DAE4EC9C.roa
File: 2C727DC4115C11F1BE12EDC4DAE4EC9C.roa (raw, json)
Hash identifier: Wt/hvqOrIHA3c9OZRdJ9jWwY4rhIS/fgQoqdURymP0g=
Subject key identifier: 26:ED:D6:66:DE:99:8C:03:11:94:FF:2B:85:70:AF:5F:3D:14:FA:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB32
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C727DC4115C11F1BE12EDC4DAE4EC9C.roa
Signing time: Tue 24 Feb 2026 08:38:21 +0000
ROA not before: Tue 24 Feb 2026 08:38:15 +0000
ROA not after: Mon 30 Mar 2026 08:38:15 +0000
asID: 401696
IP address blocks: 154.201.64.0/19 maxlen: 24
154.201.94.0/23 maxlen: 24
154.201.94.0/24 maxlen: 24
154.201.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113458 (0x1bb32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 08:38:15 2026 GMT
Not After : Mar 30 08:38:15 2026 GMT
Subject: CN=699d637c-f94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:81:6b:f3:55:5c:c0:e5:b2:e1:b0:34:88:be:
86:65:eb:df:ec:fd:c9:8d:89:c9:5d:67:18:26:54:
d7:48:0a:e7:50:2b:3c:2d:05:03:50:8f:e4:dc:b0:
af:cc:71:de:f9:56:c4:26:3a:72:22:4d:fd:8e:45:
00:fa:9a:b9:c4:71:1e:e6:d4:39:a4:64:2e:ac:2a:
59:b5:a4:90:38:bd:b4:73:bb:7f:56:ed:77:18:98:
be:69:8d:72:3b:a3:8d:70:c6:a9:af:89:4f:89:c0:
f6:a7:34:cd:46:e1:5e:24:b6:4e:72:c3:63:bf:32:
f2:01:27:04:9d:f6:6c:43:56:f8:b5:f0:6c:b9:d9:
43:fb:04:69:57:ff:33:8a:90:4f:8d:36:75:28:9b:
73:13:f3:71:66:14:dd:94:c5:8e:8f:e0:84:6b:43:
ab:3a:05:a1:fb:53:a4:0c:94:fb:16:a9:b4:fb:18:
91:21:c6:a5:6a:05:27:88:49:10:eb:c3:6b:62:42:
65:27:6a:bd:45:fd:0d:a3:59:b4:82:22:34:86:95:
d8:6b:b0:fe:d9:fd:82:1c:5d:01:68:c6:27:59:a1:
ba:15:3e:de:e4:c9:10:1b:e0:c3:78:b8:d5:de:0c:
a3:21:c9:5f:2a:dd:25:dd:4d:e5:82:58:82:bf:39:
8d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:ED:D6:66:DE:99:8C:03:11:94:FF:2B:85:70:AF:5F:3D:14:FA:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C727DC4115C11F1BE12EDC4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
7d:08:98:50:97:f4:5c:7c:88:2d:a4:a7:3b:48:8e:cf:27:4d:
2d:2e:7c:c8:af:00:bb:0a:12:a5:12:17:26:9b:28:8a:e6:d2:
52:75:6d:eb:26:9c:d6:a5:9c:69:ec:c0:fb:bb:42:3e:54:f2:
62:62:37:c9:ce:3e:16:b4:7f:52:07:0a:7b:a2:bf:3c:47:50:
3f:8c:1f:2b:e3:68:ee:d5:3b:8c:61:8d:71:3c:6e:b3:b6:f2:
f3:7b:2c:f9:c2:41:d8:dc:06:ad:08:e5:06:48:73:a8:57:bb:
96:73:af:70:80:35:2f:27:88:86:f2:93:6a:cd:02:e2:20:03:
5a:60:35:c6:3a:da:62:bc:06:78:dd:35:b7:f4:dd:5d:f1:70:
15:99:dc:ff:da:93:6b:e6:33:3e:f1:31:9c:fc:45:e0:57:21:
bd:47:c9:88:66:20:54:2b:2e:af:74:cb:93:74:9e:38:ef:95:
ff:1e:27:4c:50:1b:57:ac:a4:9a:99:9e:9a:12:4f:b5:b9:c5:
c9:a3:d8:0e:3b:ee:79:13:a8:e9:b3:b9:48:df:d6:29:18:a0:
c1:b4:11:b2:25:a0:fb:5a:89:2c:b1:24:ae:38:21:a7:d0:a2:
2f:95:e9:c2:8f:d1:6c:6c:db:4e:fc:9f:f2:7f:16:ad:39:47:
6a:43:84:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:22 2026 by rpki-client