Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3567DD52067111F1A16893AADAE4EC9C.roa
File: 3567DD52067111F1A16893AADAE4EC9C.roa (raw, json)
Hash identifier: noXfJNUIBEi0SGy/rAJnfUdGfpdfGvojVbYIFaWtbb8=
Subject key identifier: C2:4B:8C:7F:D5:A7:B1:3F:54:97:C5:F9:63:3D:2A:CD:45:EE:07:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B90D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3567DD52067111F1A16893AADAE4EC9C.roa
Signing time: Tue 10 Feb 2026 11:11:13 +0000
ROA not before: Tue 10 Feb 2026 11:11:08 +0000
ROA not after: Mon 18 May 2026 11:11:08 +0000
asID: 402169
IP address blocks: 154.202.117.0/24 maxlen: 24
154.202.120.0/21 maxlen: 24
154.217.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112909 (0x1b90d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 10 11:11:08 2026 GMT
Not After : May 18 11:11:08 2026 GMT
Subject: CN=698b1250-b0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f9:f3:26:b5:d6:08:f4:61:b3:7e:43:bf:5f:
87:1c:cc:99:22:6a:9e:20:46:ae:d1:cd:48:41:7b:
1d:c7:44:35:24:81:91:2b:20:89:4f:a9:38:74:02:
7b:3e:ac:76:02:1d:08:88:f8:bb:01:ad:4f:f2:d2:
35:f0:fd:86:b0:68:6d:43:46:eb:32:2e:94:74:05:
94:00:1c:69:b5:7e:21:a6:d5:55:c0:44:ba:74:77:
e4:48:ab:81:99:65:16:d4:c1:10:44:fb:c2:fb:a0:
f2:d9:bd:54:ba:59:1a:34:7e:3a:16:9c:80:89:49:
a6:33:e7:54:ce:88:28:57:1b:c0:9d:5f:c1:4d:e8:
f6:8a:29:3e:52:9c:5a:1f:7d:0e:3e:71:09:a0:c1:
df:06:6f:4a:12:fa:34:1a:0e:d2:d2:13:86:45:7f:
17:c8:1d:f8:f8:cb:a6:ed:a0:89:33:18:3f:44:2c:
6a:ed:b8:3c:70:47:2c:64:77:b6:42:3e:a0:b4:fa:
05:a7:ad:85:44:e7:88:e8:57:0a:dc:bb:44:80:e6:
2b:8d:f6:48:84:19:6b:b4:1e:76:1f:c3:3a:5a:c6:
8f:f0:39:23:b5:8f:e4:01:9f:61:e5:a6:33:a2:ec:
dc:36:dc:16:75:be:d4:a7:94:97:5f:5d:67:51:93:
2d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4B:8C:7F:D5:A7:B1:3F:54:97:C5:F9:63:3D:2A:CD:45:EE:07:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3567DD52067111F1A16893AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.117.0/24
154.202.120.0/21
154.217.234.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:27:8d:2b:b8:dc:5d:d2:5b:21:d4:57:f1:3b:b0:a7:51:2b:
24:87:01:15:eb:fa:00:52:11:c0:46:36:74:0f:19:4f:98:aa:
80:e8:d6:47:5b:ff:74:00:61:1d:51:e1:ee:9f:91:44:78:17:
c1:06:ac:53:4a:e7:41:a6:8c:f6:b3:40:bb:46:a9:c8:cf:01:
de:29:de:a3:92:9f:52:e4:2e:1a:5a:48:c8:c1:2b:b2:a5:0b:
7b:93:d3:0d:b6:40:b1:7b:8e:64:95:3b:2b:52:fa:9b:53:6b:
72:e0:e4:34:d5:fc:d4:f6:b9:1c:a3:c6:88:e5:d3:02:f3:76:
97:5d:98:bb:4d:c1:61:38:29:02:01:bd:fe:1e:ed:4d:9a:06:
45:ff:1b:5b:33:3d:f3:5a:bb:6d:8e:11:92:74:67:e3:53:df:
ca:28:c9:e0:1c:a5:c0:75:5c:48:69:f4:bc:70:d2:2c:44:14:
01:a5:51:8c:10:ee:63:1b:27:3a:0c:85:89:2e:af:c0:58:8e:
dc:d4:52:b3:f2:8c:81:3f:ee:7c:5a:ee:c6:eb:6c:a6:36:50:
1b:67:dc:86:d8:55:1e:b6:69:ac:dc:a5:72:c4:8d:2c:5f:fd:
73:bc:b4:50:07:4c:87:0f:d6:32:60:44:f0:21:b1:8e:23:0d:
5a:d7:fe:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:03:05 2026 by rpki-client