Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55E49B7A158E11F1B355717DDAE4EC9C.roa
File: 55E49B7A158E11F1B355717DDAE4EC9C.roa (raw, json)
Hash identifier: gio0zdk1iQCXzmotFQKn+0OfSpyW4YX3Zo2/q4eGx/Y=
Subject key identifier: 45:FA:15:34:87:8B:28:80:83:74:B8:2F:A1:F7:05:45:16:FF:C6:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC9E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55E49B7A158E11F1B355717DDAE4EC9C.roa
Signing time: Sun 01 Mar 2026 16:47:30 +0000
ROA not before: Sun 01 Mar 2026 16:47:25 +0000
ROA not after: Wed 08 Apr 2026 16:47:25 +0000
asID: 44559
IP address blocks: 154.210.237.0/24 maxlen: 24
154.210.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113822 (0x1bc9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 16:47:25 2026 GMT
Not After : Apr 8 16:47:25 2026 GMT
Subject: CN=69a46da2-7004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f3:23:95:00:4c:27:fb:0a:fc:76:37:d9:73:
2f:97:3e:42:5f:70:fb:f9:eb:51:ed:f3:6d:b4:a6:
6b:20:aa:1a:60:73:f1:8a:5e:e9:d9:18:11:91:14:
cc:61:2e:f5:5d:a7:27:bc:ad:2a:4c:ab:08:a9:fd:
40:f9:31:13:56:ff:f4:4a:e0:8b:e4:b3:37:f8:b9:
1e:07:57:6d:32:86:0f:a6:7d:68:0e:ea:dc:3e:10:
ad:95:52:9a:9c:8a:26:c9:88:f5:5f:99:71:8c:c6:
b2:6a:86:37:db:32:bf:d3:94:48:f5:34:38:d2:cb:
68:0f:e4:61:3b:cf:5f:4f:0c:91:c7:95:1f:ef:29:
0c:97:0b:fb:f1:c2:5b:ce:51:46:f4:f1:4e:20:20:
a7:97:50:6d:e1:26:41:64:1e:a1:b7:1f:83:db:85:
39:03:56:5a:04:13:c1:c6:c9:c4:2f:0d:fe:d7:88:
6a:02:18:fc:d3:29:14:81:b9:5f:f2:fd:52:3b:9c:
f2:90:48:b8:2a:fa:3d:1e:ac:32:ac:5b:0f:16:63:
b0:76:4b:d4:f0:d4:78:29:5c:be:0b:e9:07:4f:c0:
f4:a2:07:c9:53:fd:ce:18:fc:5b:80:d9:b1:3d:b2:
a8:e3:b8:68:e7:f8:e8:ff:fc:8c:c1:ed:ed:82:f1:
60:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FA:15:34:87:8B:28:80:83:74:B8:2F:A1:F7:05:45:16:FF:C6:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55E49B7A158E11F1B355717DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.237.0-154.210.238.255
Signature Algorithm: sha256WithRSAEncryption
24:ed:9e:b5:b2:36:b5:3c:40:6a:c3:80:0e:79:1a:4d:99:15:
83:aa:33:c4:52:04:8d:04:d8:05:4f:a5:8b:bd:b3:09:0f:74:
a2:8b:ef:08:8f:97:e6:b9:66:78:44:15:09:f2:4a:17:dc:b7:
24:2d:ee:27:9a:2e:66:f1:a0:17:cb:15:65:e1:c7:03:63:48:
0c:e3:a4:ea:89:20:da:76:87:8c:30:32:05:47:29:be:04:aa:
ea:2c:15:e6:17:03:49:93:ed:a6:3e:06:1c:3e:41:b9:c7:84:
b5:70:28:8f:21:c5:e3:b9:73:b3:4a:0e:87:a9:6f:3b:05:6d:
08:aa:6d:f0:85:d1:0e:02:fe:97:df:72:1d:fa:71:df:be:36:
61:54:db:be:8a:cf:4c:c4:8d:5a:b0:b6:63:1a:8d:8c:c8:c8:
35:76:58:36:70:3d:e1:6f:ec:22:78:57:af:d8:3a:e2:b2:ba:
75:7a:10:b0:d3:30:df:c7:5f:42:53:39:5a:29:26:92:93:71:
2f:1b:0f:ac:8e:2d:8a:e5:7c:c7:6e:44:67:f3:15:ff:f3:46:
14:a4:aa:e3:b8:4c:00:8a:0e:d0:a3:81:5c:e0:e2:46:91:a8:
4f:2c:37:8a:df:76:ce:ce:f1:23:89:3f:f2:04:73:b6:d4:c9:
75:a0:73:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:33:59 2026 by rpki-client