Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4354396E0E4C11F1A6163E79DAE4EC9C.roa
File: 4354396E0E4C11F1A6163E79DAE4EC9C.roa (raw, json)
Hash identifier: HQzb8ptS95atns00nYOd7TU9OueK9urDur0tFFjuGTk=
Subject key identifier: FA:5A:CE:47:BD:DC:7B:6C:A8:D4:E8:14:EC:5F:27:12:75:32:A4:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA64
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4354396E0E4C11F1A6163E79DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 11:06:54 +0000
ROA not before: Fri 20 Feb 2026 11:06:48 +0000
ROA not after: Fri 27 Mar 2026 11:06:48 +0000
asID: 63139
IP address blocks: 154.203.169.0/24 maxlen: 24
154.203.170.0/24 maxlen: 24
154.203.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113252 (0x1ba64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 11:06:48 2026 GMT
Not After : Mar 27 11:06:48 2026 GMT
Subject: CN=6998404e-2165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:91:35:51:ac:bd:be:9a:37:7a:08:25:9c:
d1:33:35:71:14:33:3a:0e:14:5a:eb:90:5c:97:85:
92:62:c8:9e:37:ea:7b:84:04:68:a1:40:b5:d5:bb:
89:0a:a9:8b:db:9c:08:a4:da:c2:a8:93:0d:9c:6e:
a9:0d:b6:9e:f0:a2:61:f5:fd:bf:b8:07:95:68:d0:
64:f1:31:e2:1c:00:b0:eb:b1:08:19:28:f7:7e:19:
33:66:26:e2:c7:5b:4c:f9:10:11:84:ab:cf:30:4d:
9e:fc:96:d8:b2:c3:a9:e7:06:57:0b:ef:80:2b:a4:
fa:57:6e:f7:1a:f7:f9:88:af:1a:2f:cc:97:80:7a:
5b:b6:d9:ad:81:19:02:8f:4a:ff:65:d7:5b:28:75:
c8:47:ab:17:e7:a8:2e:cf:69:35:df:08:ad:0b:8a:
14:f3:3d:6f:0e:9d:b0:41:84:18:ee:55:05:66:bc:
a6:a0:1e:58:b5:7f:de:d7:21:f6:21:fe:86:a5:c8:
c9:43:07:f3:94:ba:bb:5e:bd:c7:ae:8c:0b:f9:cd:
f8:02:81:0f:65:df:02:1d:36:fe:09:5e:9f:63:68:
98:39:23:db:31:56:f4:84:42:c4:55:ba:a8:a1:fe:
7b:a7:ae:2e:f4:af:57:6e:91:66:f7:a2:a6:4c:c6:
ee:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5A:CE:47:BD:DC:7B:6C:A8:D4:E8:14:EC:5F:27:12:75:32:A4:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4354396E0E4C11F1A6163E79DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.169.0-154.203.171.255
Signature Algorithm: sha256WithRSAEncryption
57:a5:ba:0e:d1:1a:38:11:9d:62:a7:db:87:55:0e:6b:9d:51:
0b:c0:5d:4c:d6:ac:79:82:63:b4:f1:0d:5c:73:83:b7:b1:ed:
82:be:f6:b8:25:df:af:6d:e5:1f:b6:45:21:1c:6d:3f:c2:e1:
6c:50:a5:f0:31:8a:27:e8:2d:56:7d:53:a0:d6:c6:84:8c:99:
01:3a:fb:37:6e:80:b5:af:11:42:28:9a:7d:94:99:2b:69:b1:
47:4e:d3:05:a1:c1:6b:3a:4f:cd:07:69:ef:80:22:c6:db:53:
ab:f5:ea:b3:34:c0:d4:46:79:da:24:6f:34:2b:d3:83:eb:25:
73:08:3c:c6:dd:4a:8b:f1:86:c5:60:1b:dd:8e:f4:cb:da:2e:
bf:ce:9c:c6:94:ce:f2:c3:fa:b4:48:94:72:ae:22:27:0d:4b:
13:df:47:ef:76:11:4e:7f:eb:3c:de:3f:b2:10:69:b4:81:9f:
8e:db:38:e2:c1:14:49:a2:bb:85:15:df:b9:a2:03:55:ea:70:
59:40:94:05:f5:52:b0:dd:ca:bf:51:28:c0:4f:4c:4c:08:8e:
62:a3:69:14:52:99:48:bb:8d:5b:17:56:d9:b6:98:e0:92:5e:
96:d9:1b:13:ae:f7:b5:56:0c:5e:88:66:50:3e:d3:0e:15:17:
01:ec:9d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:55:14 2026 by rpki-client