Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38A3E1B20B8711F1B48E5BDDDAE4EC9C.roa
File: 38A3E1B20B8711F1B48E5BDDDAE4EC9C.roa (raw, json)
Hash identifier: bSYKfF17y3lz8t/PKlhW+PpMMXF52vov61/OaJV5Cbs=
Subject key identifier: 04:DC:F6:F4:44:E2:A3:D5:50:CA:05:EA:2B:CD:3E:48:26:46:5D:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B9DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38A3E1B20B8711F1B48E5BDDDAE4EC9C.roa
Signing time: Mon 16 Feb 2026 22:31:23 +0000
ROA not before: Tue 17 Feb 2026 22:31:16 +0000
ROA not after: Mon 09 Mar 2026 22:31:16 +0000
asID: 201670
IP address blocks: 154.213.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113118 (0x1b9de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 17 22:31:16 2026 GMT
Not After : Mar 9 22:31:16 2026 GMT
Subject: CN=69939abb-62e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a9:ed:0d:7f:60:dc:e6:67:87:fa:a3:b0:bf:
80:f2:9f:4c:20:53:fd:1b:98:b1:50:f9:eb:c4:89:
dd:79:bb:cd:eb:d1:ca:79:6a:7c:5d:b5:44:96:dc:
3a:2e:c6:1d:29:9d:d1:1f:12:d5:71:a8:bd:17:7f:
f5:9f:dd:71:ea:e8:7f:b2:2b:fc:1b:42:44:75:4d:
36:89:97:c1:b0:0b:59:20:f0:12:b5:21:4a:d0:f6:
83:2d:5b:11:d0:5b:ae:16:d8:78:02:ce:a9:88:d5:
f5:24:f3:21:80:c3:9f:5c:b8:27:04:1a:d3:b6:f6:
20:80:17:6d:77:f4:d2:24:ca:6f:68:4e:6e:22:be:
57:b2:fc:f5:31:92:f4:c7:3a:61:ac:e3:d1:b0:8a:
6e:ff:9e:61:18:e6:96:8f:58:b3:79:bf:41:3b:3f:
cc:6e:51:52:6b:a2:1d:7a:12:22:86:26:7e:54:6a:
fc:5d:87:3d:c1:64:c8:fa:87:ab:86:7c:96:68:50:
a7:77:86:eb:d7:d7:ab:d3:f9:0d:e9:59:43:e1:e3:
fd:0f:9b:d7:12:fd:7e:cd:e2:97:38:07:45:c8:26:
b5:6e:ab:bc:86:05:a7:99:60:86:5c:50:1a:f0:37:
8d:1b:9d:81:f0:9f:2b:f0:46:8c:c2:fb:59:16:16:
bb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DC:F6:F4:44:E2:A3:D5:50:CA:05:EA:2B:CD:3E:48:26:46:5D:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38A3E1B20B8711F1B48E5BDDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.167.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:b4:48:cd:e5:52:10:a9:91:1c:6e:a9:ae:e2:ea:ed:0d:a9:
ce:08:87:f0:1f:52:d9:f7:fd:60:e4:21:6f:44:58:99:1b:ce:
8a:ea:48:fb:ed:36:4f:1d:f9:f1:cf:11:00:b8:90:1f:37:1e:
bf:c0:a7:76:d3:8c:12:9a:15:d8:95:5c:a4:61:56:35:42:40:
1c:cc:2c:72:ed:c2:0a:7d:7e:cd:e0:f9:e8:c5:e3:39:89:0f:
1a:a9:27:fc:bb:9c:af:94:be:74:cc:80:ef:89:24:a7:c4:73:
7f:43:6b:11:85:ee:c6:4c:81:f7:7f:3f:95:5a:eb:03:3b:fa:
70:06:7f:80:5d:04:f9:fd:98:37:be:47:05:57:c2:a0:32:0d:
5e:81:55:e5:0f:f9:8e:00:41:54:b3:b0:5c:09:85:0b:d0:9b:
04:77:3c:d1:bb:8c:f4:2b:4e:72:8d:56:e7:1c:5a:fe:58:68:
1d:a5:64:3e:c2:d2:fa:4e:f9:09:2a:2d:ca:2d:eb:e0:d0:0d:
50:fb:e3:4e:1b:1b:56:f8:99:57:23:07:72:9f:27:fc:3d:3e:
dd:7c:8f:98:94:84:b8:55:99:0a:2b:26:d2:e0:35:a5:23:7c:
b8:c8:f9:74:43:66:b4:39:70:a0:d2:e3:99:4f:d4:71:ec:f5:
30:bf:41:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:17:17 2026 by rpki-client