Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4834D79C123711F1ADD1BE88DAE4EC9C.roa
File: 4834D79C123711F1ADD1BE88DAE4EC9C.roa (raw, json)
Hash identifier: DzvHxSopz9agr5MfaVql60O7YHZFtz8T527opo8nbh4=
Subject key identifier: 18:5C:B0:38:45:25:54:7F:22:02:48:D2:7D:B3:9A:F0:53:A8:8F:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BBB3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4834D79C123711F1ADD1BE88DAE4EC9C.roa
Signing time: Wed 25 Feb 2026 10:46:47 +0000
ROA not before: Wed 25 Feb 2026 10:46:43 +0000
ROA not after: Thu 16 Apr 2026 10:46:43 +0000
asID: 272854
IP address blocks: 154.194.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113587 (0x1bbb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 10:46:43 2026 GMT
Not After : Apr 16 10:46:43 2026 GMT
Subject: CN=699ed317-fc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:56:35:5d:13:f1:8c:ad:04:40:dd:29:cc:41:
aa:65:42:8d:0a:9a:79:cf:8d:29:4a:04:8e:b3:fb:
d2:bf:f5:63:97:4b:eb:b7:46:26:b8:5c:27:50:25:
52:17:58:91:18:a1:79:dc:1c:a9:ec:7d:f6:44:1a:
67:b8:97:dd:9e:8c:a5:90:ac:65:c8:fe:e9:f7:3c:
55:b9:4f:46:72:c2:c6:6d:bd:d7:06:40:34:8b:6e:
50:25:3f:3b:70:9f:e9:10:d5:a3:4c:60:01:5e:32:
4a:21:2e:29:c9:3c:ef:bf:c8:65:19:32:5f:44:90:
a3:e9:52:9c:68:75:ca:84:53:c5:85:44:6f:5d:28:
40:b7:15:74:f6:70:d2:38:eb:19:21:0c:b5:fe:d9:
85:c8:a5:11:17:b1:8d:a5:2d:92:6f:2e:d4:cf:ef:
07:8f:f2:15:49:16:e3:de:5c:3d:c4:7d:6e:a7:c9:
2c:c6:29:7c:74:d5:e6:70:ed:06:eb:bc:52:39:de:
cc:fd:2b:9e:f6:48:17:31:a7:a0:bb:b2:bc:04:36:
46:24:06:f0:7b:5f:0a:66:9b:90:fd:99:17:6b:5e:
50:ae:27:47:d1:04:a7:76:64:48:ce:c7:4c:60:98:
76:8b:de:b2:e2:fa:b0:c8:1c:40:fe:77:ef:02:7b:
fc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5C:B0:38:45:25:54:7F:22:02:48:D2:7D:B3:9A:F0:53:A8:8F:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4834D79C123711F1ADD1BE88DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.54.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:8c:f7:0b:c4:cc:35:d0:86:2f:a2:49:0c:14:42:40:77:cf:
9e:6f:7e:1b:6a:2b:c8:1c:76:f3:12:18:a5:da:5a:7c:21:a6:
91:c5:46:b6:74:30:42:ae:e9:84:fd:07:a0:6a:95:73:1d:9a:
ed:8b:56:5e:82:cd:0e:2e:e5:83:9b:1b:ec:e4:a6:ae:78:1f:
f2:d4:f5:59:e5:00:a5:d3:cc:6d:91:d9:88:38:e2:8f:b4:d3:
2e:2a:1a:2f:7f:31:76:9b:6c:ed:c0:4c:df:9b:36:dd:63:3d:
85:52:df:7b:78:a2:f0:f3:b9:b4:b7:6d:70:fa:74:96:45:ae:
66:89:33:7d:89:96:a9:b6:f8:7a:e2:c3:b8:28:a7:ad:89:27:
d8:a7:ad:f1:b5:34:a5:ce:0c:6b:3e:81:d9:38:1f:a2:61:fe:
e5:49:a9:92:2b:63:9f:0e:44:4d:76:93:6b:3e:10:b6:1a:c8:
f1:47:f3:df:6b:d4:91:1d:9e:b2:00:15:a6:d8:60:8e:c1:2d:
34:b6:a7:34:53:af:9a:6f:f1:c1:27:4d:36:0f:cd:fc:6b:4a:
ef:d2:40:76:93:16:c1:e6:bf:bd:a8:07:23:37:41:87:c5:c0:
0b:22:08:c0:29:fd:29:cb:5c:54:67:40:84:78:ae:db:81:3e:
2d:47:98:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:27 2026 by rpki-client