Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DA958B40AA511F1A6E8A7F0DAE4EC9C.roa
File: 3DA958B40AA511F1A6E8A7F0DAE4EC9C.roa (raw, json)
Hash identifier: yHOgfcA5Pr5omlRkKnnyQ7U0laQ/JV8XBYsJv9TlyeA=
Subject key identifier: 2B:DE:22:95:5B:3B:79:C4:BD:F7:F8:C7:52:6A:28:2A:1F:0E:F8:F4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B9A6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DA958B40AA511F1A6E8A7F0DAE4EC9C.roa
Signing time: Sun 15 Feb 2026 19:33:45 +0000
ROA not before: Sun 15 Feb 2026 19:33:40 +0000
ROA not after: Sun 01 Mar 2026 19:33:40 +0000
asID: 401783
IP address blocks: 154.92.210.0/24 maxlen: 24
154.92.211.0/24 maxlen: 24
154.92.212.0/24 maxlen: 24
154.92.213.0/24 maxlen: 24
154.92.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 01 Mar 2026 19:33:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113062 (0x1b9a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 15 19:33:40 2026 GMT
Not After : Mar 1 19:33:40 2026 GMT
Subject: CN=69921f99-de18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ce:55:88:c1:0f:bf:85:cd:3a:b8:fd:62:81:
b8:b8:04:aa:00:0a:bc:eb:32:ee:e4:1c:28:00:59:
72:f7:d9:1f:c8:d8:04:0e:df:2a:9c:53:af:34:ba:
a9:75:61:77:22:7b:34:7c:b1:e7:ef:74:5c:a8:fb:
19:5f:fe:59:1b:fb:2d:ff:e8:68:05:42:6e:53:31:
b2:d0:67:10:2b:1e:bc:4e:22:38:42:49:83:22:f4:
fc:ed:67:a7:f5:a8:75:f0:f8:60:17:22:cc:3e:3d:
db:8d:6a:d5:a0:90:22:7e:5f:ac:30:c6:0a:cb:b7:
8a:6a:ad:51:3c:22:d7:cf:51:0b:85:e6:ef:84:15:
45:df:bf:14:3b:69:62:06:88:7d:8a:1e:87:6c:74:
7b:fe:84:3f:db:66:62:c2:b1:25:12:21:9b:5b:d9:
5e:02:87:31:1a:94:a0:59:ee:d6:00:f0:4a:45:46:
02:37:7f:0e:79:c4:55:ce:89:f7:39:ff:47:68:7f:
4c:4b:be:79:8b:24:d8:93:41:da:3f:78:13:d7:07:
6b:34:51:1a:c1:aa:35:e1:d6:30:81:6e:58:6c:3b:
19:f8:24:6d:26:34:55:65:53:8e:33:bb:60:28:2d:
2b:c5:55:f4:72:0b:9e:5a:86:cd:31:0d:f5:5e:0d:
97:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DE:22:95:5B:3B:79:C4:BD:F7:F8:C7:52:6A:28:2A:1F:0E:F8:F4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DA958B40AA511F1A6E8A7F0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.210.0-154.92.214.255
Signature Algorithm: sha256WithRSAEncryption
24:38:36:2c:60:b9:d9:f4:b3:09:25:c8:d4:08:48:6a:1f:bb:
a6:57:f2:4d:6f:4e:b3:9b:f5:22:d5:a3:45:87:3d:21:f0:dc:
f3:c0:66:d2:72:a1:46:f0:ff:44:bc:b9:79:f3:8c:2f:a1:59:
af:8a:b1:48:1a:57:09:76:a0:16:d9:28:ee:50:ac:7e:c5:79:
e5:f6:ee:6c:3d:0d:db:b1:a8:b9:a8:88:e4:57:0e:1f:a8:7c:
ec:54:a6:f4:f8:26:51:05:8d:35:6b:61:ff:35:c0:e6:5a:bf:
e8:bc:1b:f3:64:90:b5:f2:bb:22:5e:71:32:2f:0c:3f:fd:54:
d2:53:94:f5:20:19:4a:11:6f:e3:83:3b:c7:f6:67:b2:a0:28:
13:2d:66:bc:bc:c0:ec:6a:f1:c3:3f:15:2e:10:a7:15:63:07:
18:06:91:ce:52:1b:da:c9:cd:b7:14:ac:0d:cf:44:ca:f3:ad:
e4:a9:c5:a7:4d:5c:36:0e:94:cc:e7:a9:a2:62:30:2d:11:67:
b9:f1:7b:ba:d7:65:05:7b:fb:71:0e:08:33:ae:66:40:84:6b:
4b:a4:58:19:7f:ac:c9:01:67:f6:06:bf:09:e9:e5:bb:fa:e1:
94:d1:8e:ec:60:19:d9:c3:2b:d7:94:65:70:92:b1:cc:b6:41:
08:26:a6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:18 2026 by rpki-client