Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3074FD862AD711F1AEBBCD8CDAE4EC9C.roa
File: 3074FD862AD711F1AEBBCD8CDAE4EC9C.roa (raw, json)
Hash identifier: ikLRbFTkCBKVAQXBCIxWT+7YDLb3zfb+Chhy6xwAvc4=
Subject key identifier: E5:34:C3:99:E2:B8:BD:AA:ED:9B:32:29:88:0B:CA:44:85:DD:F9:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C177
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3074FD862AD711F1AEBBCD8CDAE4EC9C.roa
Signing time: Sat 28 Mar 2026 18:51:55 +0000
ROA not before: Sat 28 Mar 2026 18:51:50 +0000
ROA not after: Wed 06 May 2026 18:51:50 +0000
asID: 15221
IP address blocks: 154.198.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115063 (0x1c177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 28 18:51:50 2026 GMT
Not After : May 6 18:51:50 2026 GMT
Subject: CN=69c8234b-6e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:9b:a5:ea:66:52:e2:2a:24:86:e9:b6:89:
16:e7:a2:8b:b5:71:5c:03:c0:67:10:ad:29:15:80:
92:b1:ae:0f:92:8a:33:00:df:e8:72:64:97:d7:56:
d1:92:e3:98:76:08:fc:4a:f1:c6:45:75:81:34:b0:
7e:b4:89:1d:6f:f4:60:16:92:40:53:a1:35:82:70:
f5:77:cf:e1:60:57:82:bc:bb:e7:a6:c5:34:1a:bb:
cf:a7:5f:62:cf:ee:d4:ed:b1:26:79:d3:6f:19:15:
e9:50:a9:26:82:9a:ac:12:be:b7:c2:14:a7:cc:bc:
f8:2d:ee:19:08:39:39:3d:e6:e7:1e:74:88:16:c9:
72:4d:fd:fb:6b:a8:7b:e1:bb:ae:74:15:e7:71:92:
6d:b3:24:1c:7b:de:23:96:34:21:52:23:1b:03:4e:
72:8a:73:ae:62:d5:c1:df:26:87:98:7e:f9:06:37:
84:c5:c7:74:04:0e:3a:ed:a6:ff:70:56:fb:a4:1f:
94:50:6b:ae:b3:6f:ed:80:dd:ca:28:ca:5c:39:d1:
67:82:45:73:02:94:97:b6:50:0d:3d:ba:6f:07:ca:
f4:be:3c:8c:31:a8:8e:00:98:36:bf:ad:df:4c:86:
b6:51:96:92:b6:71:ac:57:0b:e1:c2:2b:07:1d:5f:
82:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:34:C3:99:E2:B8:BD:AA:ED:9B:32:29:88:0B:CA:44:85:DD:F9:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3074FD862AD711F1AEBBCD8CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.32.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:b3:cc:08:5d:06:d3:7d:c6:0b:1d:47:98:e7:d2:df:04:8c:
62:03:08:be:d2:c1:ba:84:e4:aa:30:36:5c:c4:03:bf:9c:45:
61:f1:a6:a6:b8:82:62:0c:e8:c4:8a:84:a9:d7:64:c8:ae:42:
c8:24:cb:73:9b:a1:11:23:49:7b:0c:25:26:d6:4d:52:38:4c:
6e:92:13:47:5a:8d:ad:2d:08:72:23:8b:26:5a:6f:e5:33:1b:
0b:7b:85:92:4e:57:ac:76:1e:37:c0:69:79:23:90:e7:df:6d:
57:46:9c:5c:a8:9e:1b:9e:a3:79:1f:a3:00:31:59:28:ff:81:
5f:d1:1c:de:9d:cd:74:0f:fb:2b:e3:29:66:77:b2:45:3c:09:
ca:06:7d:d4:3d:bc:85:03:e8:35:c6:00:b8:29:99:fe:96:87:
cb:a3:dc:f8:78:14:05:f7:3c:43:f3:bf:31:ee:c4:58:80:4b:
d9:ef:ec:08:6a:97:c6:48:41:0b:7e:66:d9:03:52:0f:6b:33:
00:f7:55:c0:c3:a4:25:2d:f1:6e:e0:f7:70:f0:ac:7f:56:83:
30:52:d7:ec:d7:a7:4b:c7:9c:8b:8a:32:c3:f5:37:eb:54:33:
5b:0e:a7:9a:4d:cc:0a:09:b3:19:56:27:3f:4a:57:0f:e1:9a:
d2:51:9d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:23:35 2026 by rpki-client