Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F00399A108511F192BBBEA1DAE4EC9C.roa
File: 3F00399A108511F192BBBEA1DAE4EC9C.roa (raw, json)
Hash identifier: ZNxLxtuaGquvxG+dTWWdG9f66ysFOEcy9f792UMnZss=
Subject key identifier: E2:50:D1:B4:9A:05:82:20:78:1A:BF:EB:3D:49:FD:5D:61:56:5F:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB0F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F00399A108511F192BBBEA1DAE4EC9C.roa
Signing time: Mon 23 Feb 2026 06:59:50 +0000
ROA not before: Mon 23 Feb 2026 06:59:45 +0000
ROA not after: Sun 29 Mar 2026 06:59:45 +0000
asID: 134365
IP address blocks: 154.198.40.0/24 maxlen: 24
154.198.41.0/24 maxlen: 24
154.198.42.0/24 maxlen: 24
154.198.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113423 (0x1bb0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 23 06:59:45 2026 GMT
Not After : Mar 29 06:59:45 2026 GMT
Subject: CN=699bfae6-2f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9f:58:4b:6b:bb:13:0e:0f:0c:47:d8:3a:fb:
3b:fe:c5:e5:5b:26:ed:d8:8a:45:8e:9d:3a:06:59:
55:91:3e:3c:ff:3a:8b:53:ed:b9:0e:a8:f8:1b:fd:
5c:46:1f:42:ec:3b:13:ed:62:fb:a1:89:6b:9d:f2:
fe:4f:65:53:2c:d9:1d:de:05:23:7c:d0:15:af:e4:
90:0d:54:07:89:cd:a2:cf:00:a2:fb:cb:c8:40:5a:
39:49:6c:45:75:7e:87:de:c1:4e:f7:80:be:28:ec:
3f:e1:be:c2:83:d3:0b:5a:7e:72:ac:ff:6c:b4:82:
b6:0d:43:86:1e:ce:fe:9e:f2:31:6a:8d:01:57:ab:
e1:2b:1e:ea:82:ad:b2:a8:35:f3:48:47:16:80:e2:
85:1a:db:48:cf:5a:1d:c5:8e:26:6b:f9:e8:e5:83:
e8:04:77:ac:e4:60:bf:7e:68:cf:29:43:8d:43:38:
5e:b6:5a:d5:3c:69:b8:d5:10:b3:4b:9b:4f:8c:26:
a5:38:3e:89:0f:dc:4c:f4:ae:f4:3f:fd:8a:2d:50:
76:a3:fc:c0:4b:0e:3b:05:5a:ac:37:88:c3:52:e1:
34:1f:33:6f:0e:c8:b7:fe:c7:f8:b6:cd:e8:30:46:
86:2c:4c:26:f1:2f:c4:3c:15:c6:cf:87:31:ef:9e:
43:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:50:D1:B4:9A:05:82:20:78:1A:BF:EB:3D:49:FD:5D:61:56:5F:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F00399A108511F192BBBEA1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.40.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:0c:72:57:1a:3c:31:6e:d6:3f:7a:c5:5c:83:eb:50:86:ef:
07:b8:3e:cc:09:68:56:b5:64:5f:42:f8:5a:85:c8:aa:03:db:
e6:17:e3:d6:92:b0:ae:0d:5d:f7:d4:f5:5d:ff:bb:71:e6:7a:
f0:76:8a:ac:17:42:60:dd:ec:15:b4:17:cc:48:5d:c6:ac:8a:
8c:01:5b:de:0e:e8:de:ba:21:93:ad:87:93:72:29:0b:4f:63:
4a:5b:f8:14:85:5a:47:f1:06:86:be:d8:48:62:f5:47:3e:a1:
ef:20:d8:2d:43:3b:3a:73:ea:53:87:b6:7e:71:95:f2:0e:94:
03:bf:49:f9:8c:43:51:4a:98:88:d0:50:e8:d6:6b:33:57:6f:
52:6e:25:c6:4d:d9:ae:15:ba:ef:fc:32:0e:b6:4c:f9:30:59:
1c:7d:9d:8f:6e:1e:89:e6:df:94:64:9b:5c:2d:e1:1a:25:8b:
b6:e2:ad:5e:f5:32:1d:6d:36:f1:98:fc:66:38:6d:03:d5:8c:
ed:00:83:ba:7f:d7:d3:35:ae:eb:70:38:a4:61:60:5a:fd:7d:
b9:ae:46:e1:fd:9c:8a:bb:75:da:00:b2:02:e9:27:7d:7a:f8:
26:c0:19:d3:b4:78:54:24:59:a3:2d:8d:e7:0f:d3:a2:ca:96:
f4:54:01:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:19:47 2026 by rpki-client