Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41114C70FCE311F0BF7BECF3DAE4EC9C.roa
File: 41114C70FCE311F0BF7BECF3DAE4EC9C.roa (raw, json)
Hash identifier: IIE/90POsALR9U9c8z9JPx6Mgre1J2VXy55KC4iYbVY=
Subject key identifier: 14:65:17:9C:04:22:32:53:42:B9:B4:23:6B:24:C0:8A:59:C0:30:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B73A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41114C70FCE311F0BF7BECF3DAE4EC9C.roa
Signing time: Thu 29 Jan 2026 07:22:23 +0000
ROA not before: Thu 29 Jan 2026 07:22:18 +0000
ROA not after: Mon 02 Mar 2026 07:22:18 +0000
asID: 55933
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 02 Mar 2026 07:22:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112442 (0x1b73a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 29 07:22:18 2026 GMT
Not After : Mar 2 07:22:18 2026 GMT
Subject: CN=697b0aaf-97a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8b:76:ef:e6:ce:25:7e:0e:c7:2d:0e:9f:91:
dd:5d:0a:0c:37:e6:30:f1:c4:82:72:09:d0:a8:f0:
fa:99:99:8c:0a:da:ce:2e:60:59:58:b2:34:bf:45:
01:4e:04:4d:52:b7:dd:83:9e:08:06:c2:66:11:00:
15:bf:1c:5b:f1:a7:8a:6e:16:34:e7:e7:f3:2f:de:
2a:dc:06:20:db:f0:c8:72:d1:20:15:fa:6e:38:91:
b4:2c:e1:02:d3:b4:15:fd:03:9e:32:59:cb:a4:d5:
51:52:e1:f3:a9:f3:2c:f9:46:0f:54:4c:9b:46:a2:
fe:d5:53:a3:5d:24:31:e8:30:46:ec:fa:dd:72:12:
6b:18:2c:6e:f4:06:50:56:6f:d0:20:b0:8b:4c:01:
16:79:13:93:d6:ba:c0:59:25:39:cb:bd:d9:44:12:
66:e8:10:f7:05:42:70:32:dd:de:ab:60:d6:52:59:
0a:20:53:77:06:30:7b:29:46:27:ce:92:c3:9b:a1:
af:1f:15:9f:2d:ab:0e:7d:41:cb:80:b0:a1:74:5f:
49:4f:1c:b2:25:bc:d7:46:45:f4:77:3b:10:dd:c3:
12:cd:33:35:9c:a4:92:a3:d4:b9:b1:61:b6:eb:b9:
55:38:a2:81:d8:b9:fd:5b:d7:6a:4e:0e:c0:e0:cf:
cd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:65:17:9C:04:22:32:53:42:B9:B4:23:6B:24:C0:8A:59:C0:30:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41114C70FCE311F0BF7BECF3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
53:d4:8a:14:30:ea:70:b6:71:f9:5f:82:bf:f8:be:84:0e:49:
b6:40:3a:44:2a:47:08:bd:5e:ff:d3:11:46:54:9d:f1:e9:ea:
af:7f:ba:00:39:67:c4:37:f3:db:5c:29:5c:b9:bd:d5:dc:b1:
68:40:41:d3:7c:a8:8a:d7:de:20:b6:ab:01:e9:c1:90:03:49:
35:d7:8a:82:ef:24:37:97:bc:7b:21:f2:b5:22:87:77:13:f2:
0d:f6:6e:49:a4:9e:60:62:de:8f:91:f5:9f:e8:ba:67:f2:ff:
e1:d9:7e:21:54:80:c5:26:23:e3:e9:65:e9:f8:44:04:96:80:
ff:f3:67:fa:87:17:e2:0e:b7:3b:fd:2e:9e:9d:01:59:f3:02:
66:7b:2f:3f:42:a0:f2:c6:00:b3:c4:16:d9:ae:e8:b2:7a:27:
44:61:b6:04:2f:29:59:ed:3d:a1:ee:8c:2d:e9:86:bf:7d:a1:
d4:9f:99:c4:d1:18:bc:42:c4:59:74:71:b7:a8:d1:27:18:73:
bb:d4:15:fe:3d:86:76:b0:07:91:7e:97:a8:91:f8:4e:df:14:
b2:21:f8:c3:b0:ea:62:c7:fb:da:29:8a:e2:4a:4b:7a:5e:7f:
f3:e2:12:3f:76:f0:74:72:fb:ea:a7:0a:dd:0e:8a:63:4b:6f:
6c:cd:7f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:46 2026 by rpki-client