Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55F2DB8612DC11F18733F37CDAE4EC9C.roa
File: 55F2DB8612DC11F18733F37CDAE4EC9C.roa (raw, json)
Hash identifier: TVz6H83YKR+Hhf5hSowBKdwtYG5WINa8cMp96BekXAk=
Subject key identifier: F7:6B:36:35:89:4A:8A:0B:F0:BB:F4:B3:32:77:F3:B2:B8:39:57:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BBD2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55F2DB8612DC11F18733F37CDAE4EC9C.roa
Signing time: Thu 26 Feb 2026 06:28:17 +0000
ROA not before: Thu 26 Feb 2026 06:28:12 +0000
ROA not after: Wed 01 Apr 2026 06:28:12 +0000
asID: 11427
IP address blocks: 154.194.16.0/21 maxlen: 24
154.194.216.0/21 maxlen: 24
154.198.128.0/19 maxlen: 24
154.202.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113618 (0x1bbd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 26 06:28:12 2026 GMT
Not After : Apr 1 06:28:12 2026 GMT
Subject: CN=699fe801-7c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0e:9b:25:40:fc:75:fc:07:7b:63:67:57:1e:
54:6e:55:8d:a8:bc:44:3a:ae:b5:47:11:31:4f:1b:
f6:10:01:35:9f:a5:98:df:01:db:f0:95:63:d8:a6:
a4:9d:31:af:34:0b:20:98:d6:ab:bd:35:5e:12:6b:
04:fc:cc:c0:23:a7:af:c1:a1:1e:50:0f:b7:23:ab:
0e:74:77:34:ca:f9:44:81:99:52:5f:41:55:48:f2:
86:c1:93:3b:79:34:7e:62:1d:06:50:95:ca:84:5a:
94:38:ee:00:64:b6:8c:a8:3a:43:8e:02:73:42:0f:
45:ca:52:8e:22:ce:a8:44:d4:d3:aa:5d:94:95:8a:
4d:c1:6a:e9:a4:ea:bc:19:a0:a1:c8:3b:10:79:8c:
ce:9f:aa:5e:59:0e:d2:4f:1b:b6:3b:88:b4:ec:8a:
91:aa:83:d9:82:4e:2b:d4:92:0d:80:ce:92:7a:84:
0e:30:c9:00:bf:86:06:9a:b6:5e:2b:77:20:13:a2:
4d:8f:64:91:b9:5d:c6:8d:67:9a:56:05:72:2b:e4:
35:cf:23:09:88:ef:1c:94:73:bd:64:e7:6b:db:a9:
13:ee:86:c7:a7:48:4c:53:32:f8:37:13:ca:be:07:
9d:15:79:bb:82:53:49:24:a8:58:b7:3e:f5:be:14:
ba:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6B:36:35:89:4A:8A:0B:F0:BB:F4:B3:32:77:F3:B2:B8:39:57:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55F2DB8612DC11F18733F37CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.16.0/21
154.194.216.0/21
154.198.128.0/19
154.202.144.0/20
Signature Algorithm: sha256WithRSAEncryption
b0:df:85:c8:03:af:4d:d4:16:1e:dc:c7:c2:61:d7:8c:50:8b:
c5:51:28:e8:6b:29:ae:77:06:17:f6:72:0e:c9:59:5d:96:f2:
22:6d:06:5d:66:ba:37:fd:bb:d6:44:24:46:aa:be:d7:a6:98:
26:53:43:f8:ca:fe:d9:ea:ac:f8:8c:be:06:2f:28:ab:c4:db:
29:2f:6f:4e:dc:b2:ad:1c:d1:93:bf:f8:73:7b:6e:12:51:a8:
62:5e:09:cf:5a:3b:d4:c0:ab:ce:ad:69:57:94:7c:7e:2a:f9:
6f:3e:a5:7f:5a:2a:57:fe:0c:a6:90:97:0f:ea:e3:dd:03:f4:
27:7e:7c:0f:7b:22:ac:6d:a6:0c:60:38:8b:3b:63:66:5e:f2:
b2:17:b0:5d:0a:af:04:e2:20:f8:25:b9:94:97:c4:ae:73:6e:
9c:62:fe:ae:7f:63:54:15:85:4f:62:5f:f5:08:0e:5e:d4:66:
fd:45:5c:0d:db:ac:d2:32:7d:70:67:0a:be:75:91:b8:82:f2:
bc:65:7d:67:80:13:9e:84:bd:94:4e:b6:5e:cd:b4:bd:35:7d:
ca:fc:98:6a:4a:04:f7:5b:66:9e:5a:95:c8:71:98:db:29:5f:
16:96:af:2a:4f:32:ea:41:43:2d:1e:1c:82:72:76:8b:b1:36:
4d:e7:92:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:05:32 2026 by rpki-client