Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56E03E4007E111F1AB3CD686DAE4EC9C.roa
File: 56E03E4007E111F1AB3CD686DAE4EC9C.roa (raw, json)
Hash identifier: xoZNdR8qiXKhyTJOTL25tMbzRNb4ZpZE1jEkukqd008=
Subject key identifier: 1B:18:77:44:D6:99:18:C7:EA:F3:B0:4E:0E:37:28:33:D9:C8:64:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B92F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56E03E4007E111F1AB3CD686DAE4EC9C.roa
Signing time: Thu 12 Feb 2026 07:06:24 +0000
ROA not before: Thu 12 Feb 2026 07:06:17 +0000
ROA not after: Fri 14 Aug 2026 07:06:17 +0000
asID: 63199
IP address blocks: 154.208.131.0/24 maxlen: 24
154.209.72.0/21 maxlen: 24
154.209.88.0/22 maxlen: 24
154.223.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112943 (0x1b92f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 12 07:06:17 2026 GMT
Not After : Aug 14 07:06:17 2026 GMT
Subject: CN=698d7bef-e678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6d:d4:e1:30:31:4d:5f:da:78:5f:1a:89:75:
21:63:c2:bd:cb:fc:6b:67:d0:41:06:ee:66:7a:84:
20:84:88:ee:b0:c8:31:af:73:4c:79:18:44:24:36:
72:7b:a1:ff:58:b2:13:56:48:7b:4f:b3:11:23:82:
d4:bb:ff:7b:3d:9c:dd:e4:6b:f5:5d:14:c1:b3:54:
35:88:76:4c:9a:fa:a3:fc:90:cc:74:df:0d:6f:a6:
be:47:fe:41:79:b0:b1:28:82:9c:48:de:9d:95:65:
da:12:3c:7e:27:76:21:69:34:7f:d9:b7:29:c7:58:
ce:86:3e:bb:ee:0b:6b:08:36:79:0d:99:4e:d7:1f:
45:10:e4:18:fd:49:fd:32:92:a0:65:27:59:b3:09:
9d:7b:db:21:96:a9:50:a2:ba:58:3b:1f:59:87:d5:
08:db:96:1c:67:3a:55:6f:fb:fc:0a:38:96:c3:45:
31:1b:5e:d9:89:20:87:5c:d2:28:86:61:7e:bc:30:
6c:7e:39:a3:0a:f4:ce:26:67:bc:f4:d6:ce:64:ec:
ed:2d:f1:eb:41:a6:83:5c:2b:b6:37:b3:24:ac:0c:
de:1a:41:df:01:87:14:2f:8c:2c:8d:7d:ae:bc:fe:
ba:d0:11:16:7d:5c:45:09:e8:bf:81:a4:01:5b:f3:
bf:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:18:77:44:D6:99:18:C7:EA:F3:B0:4E:0E:37:28:33:D9:C8:64:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56E03E4007E111F1AB3CD686DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.131.0/24
154.209.72.0/21
154.209.88.0/22
154.223.164.0/22
Signature Algorithm: sha256WithRSAEncryption
48:b9:fa:f7:73:81:f1:f0:b5:e0:b8:b1:e4:c4:97:45:bb:c7:
b9:38:a2:e2:34:cc:91:f3:f8:b7:2b:0f:8f:47:70:40:44:3f:
7c:b7:61:0e:7f:89:95:c3:cc:c4:11:e6:5a:91:84:51:8e:78:
79:f4:74:e0:8f:a1:d7:f1:52:d7:ff:2d:7d:19:c6:4a:81:69:
58:51:6b:3c:fd:7a:24:e7:99:39:0f:5a:e7:42:fd:89:21:d2:
99:3f:1e:67:b0:f8:5e:3c:27:42:f9:cb:d8:1f:2b:30:13:63:
8e:3d:ae:b9:6b:ea:d4:01:98:46:18:98:a0:89:e6:84:62:94:
e2:f5:88:8a:8e:ba:4f:65:e4:0b:8e:37:8c:5c:53:45:d8:42:
bf:bc:47:e9:cf:d8:6b:f7:c0:64:eb:19:65:38:48:60:8f:b4:
d6:7a:f6:10:b8:af:fe:23:72:5d:09:67:0b:48:c2:49:e2:f9:
45:ee:d7:f4:6d:46:a1:44:2b:e9:3b:34:d6:2b:60:77:c2:a3:
48:3e:e5:f6:56:b1:d8:b5:07:81:16:4a:61:ee:15:4c:dc:86:
67:a8:1f:57:68:65:39:83:a3:7e:d3:a7:47:1b:64:48:7f:65:
cf:bb:66:dc:d4:93:7e:de:44:dc:ef:61:5c:65:ef:94:32:38:
5b:9b:68:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:13 2026 by rpki-client