Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46597AB8115B11F187EEAAC0DAE4EC9C.roa
File: 46597AB8115B11F187EEAAC0DAE4EC9C.roa (raw, json)
Hash identifier: aEmNT9x/3pexNavMvUzplMZalOzOm7R6vH3dRhK55B0=
Subject key identifier: 29:61:0A:9C:FF:52:24:B4:A1:EC:06:3F:8D:B8:28:44:CF:98:3A:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB30
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46597AB8115B11F187EEAAC0DAE4EC9C.roa
Signing time: Tue 24 Feb 2026 08:31:54 +0000
ROA not before: Tue 24 Feb 2026 08:31:51 +0000
ROA not after: Mon 30 Mar 2026 08:31:51 +0000
asID: 55933
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113456 (0x1bb30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 08:31:51 2026 GMT
Not After : Mar 30 08:31:51 2026 GMT
Subject: CN=699d61fa-b76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1a:0b:64:38:72:f6:24:15:84:b0:ea:a1:f8:
bd:8f:a8:7a:b4:bd:d6:5c:9e:44:fb:09:19:e5:87:
97:e2:1d:d7:55:23:77:c0:f6:4b:d8:40:46:ea:f7:
50:17:d8:d9:a9:2e:35:e6:59:11:60:0c:32:68:17:
b8:6d:8a:8b:df:66:e8:7b:64:13:0f:a5:6b:24:da:
45:a4:27:9c:d3:88:94:cb:51:fd:c5:6d:12:83:bc:
5f:e4:61:cc:71:73:45:56:8b:75:fd:ca:3d:5b:6f:
29:c1:4c:b4:39:87:a0:7c:83:5a:c5:b1:83:cb:fc:
79:36:b2:bb:31:90:de:e3:b1:7d:bc:84:d6:33:f5:
c8:a5:71:5b:2a:54:09:fb:62:6b:d5:62:cc:99:ac:
4c:93:5c:10:32:24:15:77:70:ae:56:7a:9d:0b:c4:
59:50:af:f0:d5:d8:2d:5b:85:33:54:11:9c:31:ed:
94:33:2c:f9:25:3a:46:d6:79:b1:38:bd:0f:ce:b6:
61:4e:b2:6a:e7:48:c5:d2:3b:31:d2:d4:29:dd:ec:
82:fa:4f:be:f3:7f:ef:80:04:05:21:1b:dd:3e:a9:
18:0a:61:d0:84:0d:63:7a:a4:8d:9a:d4:3d:d2:72:
c7:74:68:ed:e3:76:19:dd:ea:b7:8e:9e:d5:31:66:
72:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:61:0A:9C:FF:52:24:B4:A1:EC:06:3F:8D:B8:28:44:CF:98:3A:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46597AB8115B11F187EEAAC0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
5f:2d:25:99:61:b7:39:bb:91:69:f0:1b:55:94:d8:62:17:e8:
93:d1:c6:a5:b8:dc:74:3e:c9:6c:96:ad:f7:6a:af:2a:2a:76:
87:75:dd:55:4e:23:fb:f3:a9:ab:7d:bd:b7:54:83:0f:12:93:
fc:40:3e:04:45:c7:f4:39:a9:e9:ad:2c:c5:fe:4b:25:75:89:
58:1a:74:ed:ba:6b:f1:2e:12:39:cd:ec:83:45:73:22:8c:64:
d5:62:4b:c2:6a:f4:bb:cf:47:db:30:bf:96:98:24:2d:7c:c5:
9a:5c:0c:cc:ac:b0:de:ff:6b:37:2b:bf:08:98:81:74:7b:d0:
6a:4f:e3:81:a0:5c:a8:04:c6:45:f3:6b:ed:40:7f:e9:1c:31:
9a:d2:79:39:f7:dd:dd:6f:6f:48:0c:7f:70:c0:6b:b2:4a:56:
19:5a:fb:db:b2:b3:02:9f:f6:93:f2:2f:9a:71:02:5d:d7:42:
83:ba:02:f0:ca:9b:b2:48:87:de:08:99:44:fb:63:9c:ab:3d:
99:a6:58:3d:e5:1d:f2:fd:8a:bb:ec:fc:22:5d:23:9e:00:0d:
bc:21:02:21:68:d9:61:ef:58:c1:9e:aa:24:57:c1:f0:08:5b:
fc:c8:5b:42:32:73:e1:0b:54:f0:29:ec:16:e4:d9:f2:76:19:
77:b6:8f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:16:45 2026 by rpki-client