Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E498446072611F192A88F86DAE4EC9C.roa
File: 4E498446072611F192A88F86DAE4EC9C.roa (raw, json)
Hash identifier: oNEGWFC57+AtfgIjmqWPPgmCv56DkGMDK9hhXbwrz4M=
Subject key identifier: 6F:58:64:07:9F:E5:BF:DE:AC:B5:18:FC:D7:EF:74:B3:5F:34:38:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B928
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E498446072611F192A88F86DAE4EC9C.roa
Signing time: Wed 11 Feb 2026 08:47:33 +0000
ROA not before: Wed 11 Feb 2026 08:47:27 +0000
ROA not after: Fri 20 Mar 2026 08:47:27 +0000
asID: 214413
IP address blocks: 154.205.253.0/24 maxlen: 24
154.205.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112936 (0x1b928)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 11 08:47:27 2026 GMT
Not After : Mar 20 08:47:27 2026 GMT
Subject: CN=698c4225-1d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:60:47:81:3b:74:26:fc:a8:43:5a:41:0c:31:
b5:ca:03:ed:50:79:df:40:46:2f:13:53:07:31:4b:
4f:aa:06:01:3c:46:69:f6:55:85:e9:ea:3b:db:66:
18:37:b1:2b:1e:e8:68:cd:b4:8a:ef:7f:ee:b2:de:
c5:c8:39:d4:f7:7c:9e:2d:b2:88:11:b0:87:fd:52:
5b:d9:cc:8c:0f:49:49:8c:18:a2:28:60:64:60:e3:
be:3c:57:0c:5c:86:09:4d:4f:b5:61:cf:a4:b5:cc:
81:13:5b:2e:aa:35:5d:97:8b:4e:58:f1:ed:4c:66:
fd:d2:86:52:e3:47:48:2a:4f:c9:9c:6e:18:00:96:
87:40:3b:9b:14:46:a6:28:e7:f5:d1:9d:03:e6:bc:
07:f4:3e:1c:f4:e2:43:ab:2b:93:aa:fe:d3:c3:7b:
58:e5:e9:bc:45:66:a9:3a:2e:d3:90:dd:0f:6b:3d:
7e:af:87:f4:b2:8b:b6:c2:20:07:8d:ab:55:e7:46:
14:84:6d:7b:d6:6d:a0:b8:e5:ee:19:dd:df:e2:5e:
bf:3c:73:59:ff:c9:d0:22:7c:6a:ea:8b:1e:13:2d:
1a:5e:a2:84:72:9c:32:4c:d8:2f:49:73:29:ad:b5:
ca:72:a2:cf:de:cf:88:69:a1:fe:e1:7a:26:98:cd:
d0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:58:64:07:9F:E5:BF:DE:AC:B5:18:FC:D7:EF:74:B3:5F:34:38:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E498446072611F192A88F86DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.253.0-154.205.254.255
Signature Algorithm: sha256WithRSAEncryption
02:24:22:d9:be:86:12:dc:28:36:cf:eb:6f:39:3f:c5:1b:b2:
04:b3:f2:5c:48:3e:68:19:eb:d4:e5:c3:d6:48:f8:04:84:58:
fd:12:7b:0a:12:ac:66:8f:09:2e:82:78:a7:5e:9b:62:4c:ed:
33:ae:65:49:2f:f7:69:8f:fb:4d:78:b8:d7:cd:c2:43:48:39:
30:0d:89:ab:00:a8:d1:f3:94:63:2b:15:12:84:f8:a9:ca:7d:
aa:ee:3e:8e:29:33:2c:6e:43:cc:ae:8c:c4:c9:27:eb:92:79:
e2:2e:2c:e1:db:49:a5:cb:d2:63:54:1b:30:e8:67:03:92:c5:
0f:83:ab:2d:21:71:84:4c:81:03:05:d5:1b:6f:b3:94:a3:f3:
4c:c2:61:f0:90:a4:c7:3a:5e:b4:f4:d5:3b:fc:d0:5f:09:d6:
37:27:67:5a:a8:b6:22:80:a9:57:50:f8:2b:62:1c:94:50:e2:
9f:33:63:e4:18:31:43:59:d0:60:bc:32:f6:72:10:68:de:25:
8e:9b:94:38:86:b2:df:46:9f:d3:e6:63:79:9f:41:67:8c:1b:
cc:1d:a5:44:0b:07:4f:a8:fd:10:18:e5:20:bf:1d:25:97:be:
64:51:11:63:c0:13:d2:d4:5a:fe:a1:db:83:d5:75:60:be:b5:
97:7b:2e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:59:21 2026 by rpki-client