Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FF8A8FE0BDB11F1A0E2B4F1DAE4EC9C.roa
File: 3FF8A8FE0BDB11F1A0E2B4F1DAE4EC9C.roa (raw, json)
Hash identifier: 0gqWPJrh95uZwDGWkEBGyoXmorYA5nU1QbDHyt6uHF4=
Subject key identifier: D7:99:E0:53:94:A6:DB:72:10:40:B4:3C:C3:89:A3:FF:8B:37:42:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B9FB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FF8A8FE0BDB11F1A0E2B4F1DAE4EC9C.roa
Signing time: Tue 17 Feb 2026 08:32:53 +0000
ROA not before: Tue 17 Feb 2026 08:32:47 +0000
ROA not after: Tue 24 Mar 2026 08:32:47 +0000
asID: 153706
IP address blocks: 154.89.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113147 (0x1b9fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 17 08:32:47 2026 GMT
Not After : Mar 24 08:32:47 2026 GMT
Subject: CN=699427b5-afa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:15:dd:67:ff:d6:64:89:8c:ab:68:62:3c:de:
83:43:35:70:e3:17:13:26:a0:3b:27:f6:f6:71:c3:
99:f1:17:fa:c4:ab:b8:9d:6c:73:1e:f3:58:42:76:
0c:7a:fd:c6:6d:ee:4b:8f:f2:8a:b1:e2:f4:c9:85:
59:ad:d3:8e:5e:13:ff:77:31:1b:85:cb:2d:d5:a2:
7c:f0:d2:f9:5c:24:8b:b9:d6:75:b5:66:f4:d1:54:
f2:c3:ae:83:dd:0b:43:ff:10:37:ea:d0:7a:3c:2d:
9e:0a:c2:8d:12:82:dc:2f:d9:01:4c:2f:a8:80:f4:
c8:49:5a:dc:29:32:0a:a1:e5:72:08:d8:74:65:79:
36:61:3d:f2:9e:ba:28:e1:c0:d9:1f:fd:43:dd:06:
7b:37:23:4f:2b:fb:fc:c7:45:73:fe:e7:fe:62:6d:
b4:d9:f3:39:47:85:98:27:07:4b:4d:5e:28:a5:c4:
0a:9e:78:f2:4b:3a:cf:f6:6f:7a:8a:04:21:df:ad:
c6:47:95:24:18:28:1a:cc:f8:81:ac:61:85:79:67:
8a:64:af:26:5c:4c:d9:eb:35:99:95:3f:84:c9:3a:
b4:cb:62:fd:18:fa:38:34:af:0a:b8:e9:ab:6b:d5:
69:15:8d:1e:39:61:a4:87:7a:88:ab:b4:e5:fe:73:
34:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:99:E0:53:94:A6:DB:72:10:40:B4:3C:C3:89:A3:FF:8B:37:42:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FF8A8FE0BDB11F1A0E2B4F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.194.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:4a:69:a6:d4:1a:d2:e3:7a:78:d7:49:a9:dd:3d:6f:f6:9d:
cf:47:f1:49:9a:50:9b:02:06:58:d2:ae:84:5c:4d:73:99:0a:
c8:3f:85:ac:07:de:f4:15:f0:d2:ba:d0:ac:2a:da:c2:a4:e8:
fa:ab:8c:01:a4:00:48:68:9e:8e:40:53:c4:fd:58:aa:ca:83:
d6:08:6a:3d:ed:6a:9a:02:aa:d8:38:55:5c:28:fd:47:83:09:
fe:25:38:f8:6f:b5:69:82:2e:98:e9:2a:bf:20:a9:32:05:6e:
9d:c5:1f:ed:e3:08:1a:b2:2f:56:26:7e:29:ef:e7:ac:e7:4d:
92:98:19:af:b0:32:e2:7a:ab:9b:78:92:23:6d:81:0c:53:08:
36:ef:88:d0:91:f9:45:a2:5c:fd:06:01:c7:9b:2c:b9:4e:55:
ec:70:01:6b:3e:d5:04:97:a0:ca:06:8e:27:eb:de:ba:09:3b:
15:6d:2f:93:ee:15:f9:f9:7c:d5:10:6f:f3:c9:d2:d5:ef:ae:
be:c9:74:44:8f:9f:57:17:a8:98:67:6e:a2:33:38:0f:ed:bc:
2e:6b:ed:76:88:b8:6c:0d:8a:31:56:af:e7:e9:4c:c1:02:1f:
bf:dc:f5:0a:ac:38:eb:5d:9e:04:0f:83:e7:16:40:af:00:91:
b0:c0:1c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:57 2026 by rpki-client