Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D9F8FD20F0011F1A6186CCDDAE4EC9C.roa
File: 3D9F8FD20F0011F1A6186CCDDAE4EC9C.roa (raw, json)
Hash identifier: w5aPKWQfWmBc23DhtEEJFoWHHYUm7MYUrinCG9FW0fk=
Subject key identifier: C9:76:62:8A:C8:4F:F2:7D:8F:B9:1D:F2:E2:A4:28:50:FB:40:BB:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BAD8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D9F8FD20F0011F1A6186CCDDAE4EC9C.roa
Signing time: Sat 21 Feb 2026 08:35:13 +0000
ROA not before: Sat 21 Feb 2026 08:35:10 +0000
ROA not after: Tue 24 Mar 2026 08:35:10 +0000
asID: 139923
IP address blocks: 154.217.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113368 (0x1bad8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 21 08:35:10 2026 GMT
Not After : Mar 24 08:35:10 2026 GMT
Subject: CN=69996e41-c301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a4:42:87:cc:d1:72:6e:f6:10:83:12:47:be:
1a:c8:44:ad:57:5c:f4:a7:35:5e:41:c4:2f:3d:4c:
3e:df:58:ba:9d:32:55:bc:3e:47:b6:b2:5e:87:2e:
f3:f9:4b:2d:04:d9:e7:a6:71:4e:7e:2f:e0:f5:93:
92:b4:b1:38:71:43:25:f4:56:0f:24:5e:3c:ca:14:
5c:7c:7c:aa:6c:97:93:24:7f:93:67:4b:4c:35:56:
86:e7:74:0e:05:92:b4:c0:31:05:ca:ba:bc:b8:0b:
3c:fa:ed:d8:30:46:c3:d1:82:af:e4:7d:1e:c1:8c:
d6:e6:88:61:8e:b2:16:00:d9:c3:03:1a:d4:25:08:
eb:d4:3a:dc:28:72:07:84:43:de:9f:1a:99:b5:97:
ae:a4:20:ee:b7:2e:f9:cd:7d:a6:21:37:27:2e:6a:
60:3c:ba:a7:9b:98:5b:af:7b:bf:9d:fa:4e:c3:14:
49:3c:76:e0:d0:88:28:c5:93:5f:75:b8:ef:63:f7:
ad:bb:f9:56:1e:77:9e:2a:44:ab:cc:89:ff:4f:82:
b5:6f:c1:b0:41:6b:f1:f4:5f:c8:78:5f:b9:bc:e3:
ab:7a:94:f6:9a:8e:5e:a2:c6:38:64:88:ac:77:b6:
dd:8e:4e:20:07:01:c0:c7:b5:8f:8e:ac:68:27:24:
76:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:76:62:8A:C8:4F:F2:7D:8F:B9:1D:F2:E2:A4:28:50:FB:40:BB:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D9F8FD20F0011F1A6186CCDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.240.0/21
Signature Algorithm: sha256WithRSAEncryption
11:f4:6d:79:b8:31:66:3d:11:af:4f:f4:9f:fe:d6:02:3a:1b:
90:2b:5d:b4:2f:cc:b1:74:54:7f:c7:04:98:e1:86:ce:9a:5b:
42:86:3a:e4:95:8c:8a:13:63:97:a0:a5:b8:f8:ed:5a:2c:4c:
bc:b9:46:b1:92:f5:81:7e:ea:43:1b:75:95:21:69:ad:94:0e:
03:43:8d:bb:0f:48:f8:26:30:ac:64:cc:75:98:61:ff:3c:78:
f2:e3:0f:0a:21:f6:9c:d9:83:e0:ca:df:61:f4:43:6c:92:85:
79:5f:ec:37:b6:2e:50:fe:f8:6d:8c:be:e0:2f:fd:69:14:13:
ee:eb:7b:36:24:15:cf:40:19:c0:56:4a:ad:f4:f5:e8:bc:31:
ba:33:f7:fd:47:55:0f:c3:6c:4a:4f:28:21:fb:57:d2:39:77:
2e:e5:06:6e:02:08:cd:c9:08:60:c5:09:2e:56:f0:ae:7d:05:
ae:72:14:c6:4c:76:6a:c2:23:8e:fc:a9:69:f8:aa:9d:c2:b9:
ed:4e:71:be:a7:b8:d3:98:b1:b1:c6:ed:ef:e6:d1:68:2f:9b:
b8:f6:e0:15:10:98:f4:6f:b9:6e:ec:e7:b9:24:4e:82:93:72:
a4:ed:8a:d9:96:04:2c:94:70:b6:29:ed:16:71:f1:f8:0d:60:
0b:65:02:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:11:15 2026 by rpki-client