Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C3F165E122E11F187526BD1DAE4EC9C.roa
File: 3C3F165E122E11F187526BD1DAE4EC9C.roa (raw, json)
Hash identifier: be/tYXih74MAAr3eSZi3oKADWSG4UzLnFXXnqAP1EvQ=
Subject key identifier: 73:02:EE:1F:A5:AF:DE:D2:C3:1A:E3:38:89:83:57:16:D6:D1:F3:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BBA3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C3F165E122E11F187526BD1DAE4EC9C.roa
Signing time: Wed 25 Feb 2026 09:42:01 +0000
ROA not before: Wed 25 Feb 2026 09:41:57 +0000
ROA not after: Wed 01 Apr 2026 09:41:57 +0000
asID: 49505
IP address blocks: 154.205.244.0/24 maxlen: 24
154.205.245.0/24 maxlen: 24
154.205.246.0/24 maxlen: 24
154.205.247.0/24 maxlen: 24
154.223.198.0/24 maxlen: 24
154.223.199.0/24 maxlen: 24
154.223.200.0/24 maxlen: 24
154.223.201.0/24 maxlen: 24
154.223.202.0/24 maxlen: 24
154.223.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113571 (0x1bba3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 09:41:57 2026 GMT
Not After : Apr 1 09:41:57 2026 GMT
Subject: CN=699ec3e9-4336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:35:52:e2:94:3c:97:08:8c:5a:8a:f5:ac:4f:
ca:51:7d:9a:c8:ed:2c:58:26:b2:c0:35:c0:4c:42:
c7:4b:f2:f6:cb:ee:38:c0:78:56:01:be:fe:f0:f0:
73:8c:4b:e8:64:d8:2e:9f:f0:fe:64:2d:aa:b7:ab:
82:67:c2:49:a4:52:80:1f:f3:b3:6d:d6:11:e2:a9:
ee:29:e5:ca:e5:18:0e:f0:e3:83:af:74:df:b5:1f:
c2:f3:18:4e:3e:e0:95:a9:19:bc:b2:a3:14:bc:31:
2a:6c:24:fb:e2:3c:24:72:4e:d9:42:cb:4c:35:b3:
23:44:15:ea:d6:be:d3:23:b7:4b:48:b2:c4:78:a0:
9f:73:54:9c:ab:27:24:65:74:76:1e:e2:d5:2e:35:
ef:58:76:7f:e9:42:2e:46:96:a2:d4:c3:45:d4:43:
a6:8c:63:b9:bd:15:ef:7c:3a:0f:6e:b6:bd:fe:b4:
af:74:cf:00:60:ea:55:c9:b6:ec:e1:68:c4:2b:a0:
c6:e5:84:0e:f8:04:1a:a1:b2:3f:eb:c8:f0:21:a2:
84:4c:53:e6:25:ff:64:bd:02:de:5d:f6:bd:8b:54:
54:a9:26:c3:bf:3b:4c:ff:05:49:d7:ba:33:89:69:
68:07:d9:b0:a0:44:d9:9e:2d:be:0f:bf:95:3b:0b:
43:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:02:EE:1F:A5:AF:DE:D2:C3:1A:E3:38:89:83:57:16:D6:D1:F3:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C3F165E122E11F187526BD1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.244.0/22
154.223.198.0-154.223.203.255
Signature Algorithm: sha256WithRSAEncryption
c8:fe:74:92:dd:43:2c:59:b9:05:f3:e4:70:5b:43:3e:10:2d:
b5:37:2d:01:3e:dc:a8:da:a4:a3:96:58:28:6f:bd:cd:08:c0:
49:07:ea:67:64:90:ea:3d:9f:4e:e3:ba:f4:9b:c1:f7:14:64:
cc:69:60:36:e1:eb:c9:4c:c5:92:ef:e1:db:5f:f5:23:fa:16:
0e:0a:0b:ab:75:0f:3c:d5:a4:53:d0:cd:80:2a:94:8a:19:0f:
65:51:e0:4a:00:c8:ae:d1:80:cb:e5:ee:d1:e4:40:69:eb:2c:
e5:d2:25:4f:71:e0:81:dd:e9:d8:b4:f4:b5:be:e5:29:1c:f5:
e1:83:01:95:1d:da:51:2a:4e:52:26:19:eb:61:aa:18:23:0a:
38:2d:20:c2:3c:4f:a8:97:ec:32:55:18:8f:2c:ca:a0:2f:98:
e4:8d:4e:dc:dd:87:14:7c:ae:74:5a:c0:45:ba:36:9c:84:f1:
47:b2:85:c6:fb:e5:f2:61:55:33:66:9d:0e:63:45:79:a4:b7:
82:4b:b9:53:3b:27:3e:02:87:60:0e:49:a0:67:4b:f9:b6:13:
14:c6:bb:e4:17:5c:95:1e:33:f4:fa:45:1b:55:8d:3d:07:4a:
74:7e:54:88:13:6a:04:c6:ae:62:b7:1b:ae:14:86:01:2a:61:
39:79:42:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:20:38 2026 by rpki-client