Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/595CF014066011F18FD9E0C4DAE4EC9C.roa
File: 595CF014066011F18FD9E0C4DAE4EC9C.roa (raw, json)
Hash identifier: 6/gYB94Qm9JUvDMlijY+DN+Yo9xqWMrWtjf7gn20aJY=
Subject key identifier: C8:04:67:20:5F:7B:A9:AA:15:70:AF:9A:7C:81:7B:CA:27:28:29:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B905
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/595CF014066011F18FD9E0C4DAE4EC9C.roa
Signing time: Tue 10 Feb 2026 09:10:31 +0000
ROA not before: Tue 10 Feb 2026 09:10:26 +0000
ROA not after: Sat 20 Feb 2027 09:10:26 +0000
asID: 262191
IP address blocks: 154.197.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112901 (0x1b905)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 10 09:10:26 2026 GMT
Not After : Feb 20 09:10:26 2027 GMT
Subject: CN=698af607-3a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:da:b1:ef:59:77:b2:91:30:a5:e1:0c:cd:76:
e2:0d:d4:ac:25:b0:50:52:18:50:25:52:10:e9:93:
ec:19:4d:9e:9c:b0:d6:8d:d3:31:e3:27:5d:e2:7d:
04:d1:fe:7d:48:46:2b:e6:7b:5b:94:e4:b8:45:2c:
69:a5:0f:d9:d2:e7:b8:f6:67:29:5e:b9:0f:ce:01:
68:71:4b:16:67:96:da:7b:59:aa:56:94:91:e8:6c:
0b:a9:f2:24:31:de:06:b4:50:95:c6:91:14:15:2f:
c3:0c:18:e1:c5:3c:68:60:76:67:3e:fe:a7:b1:a1:
89:b7:b3:75:aa:bb:63:e2:59:c7:6c:3c:01:1d:59:
5c:84:91:1a:5d:7e:98:88:b3:59:3f:c7:61:b2:a1:
ce:92:a0:38:0c:19:2a:13:99:3f:ea:1e:4c:75:5c:
54:3f:36:56:09:54:ea:61:93:37:b8:2e:f4:53:a6:
a6:a0:9a:0b:ad:76:58:4e:c6:3a:e5:9e:68:36:7c:
7e:d6:91:ef:64:41:1e:d2:fc:59:66:06:ac:ba:36:
5d:12:ec:b6:ac:d0:16:ee:99:03:e9:ca:6b:71:e8:
b0:e1:27:10:0a:34:86:06:25:33:82:ad:99:29:e3:
20:bb:3f:61:91:62:81:35:2b:7d:2b:d0:98:a1:0a:
b9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:04:67:20:5F:7B:A9:AA:15:70:AF:9A:7C:81:7B:CA:27:28:29:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/595CF014066011F18FD9E0C4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.34.0/23
Signature Algorithm: sha256WithRSAEncryption
d0:90:ea:ac:db:b9:f0:bb:5e:70:98:ef:ba:71:b0:02:0e:f3:
8f:8c:b6:92:13:98:6d:4f:66:66:bd:31:b7:b4:fb:38:c0:f3:
aa:32:54:9f:f8:92:a7:ef:69:cd:e9:f8:1e:96:93:3d:ad:95:
78:5e:fa:ab:c2:24:0b:d6:92:ee:14:cb:1c:7b:24:7e:f2:58:
dd:45:b9:69:c6:5c:55:68:4e:8e:52:ba:0d:97:3e:0d:40:51:
9d:96:c2:23:38:62:49:83:05:3b:f4:c8:df:66:ed:ab:12:ae:
38:ba:a5:d8:ee:89:df:6c:60:54:84:85:b2:69:b0:67:9a:ce:
27:38:9c:87:07:79:02:6a:89:53:43:94:a7:0f:db:81:b2:42:
fe:7a:e2:fe:ff:00:87:0f:22:bf:b7:87:52:96:4b:fa:e7:45:
97:59:85:75:a8:22:7a:7e:6e:e4:bd:e9:76:09:08:61:87:23:
e1:83:20:05:46:26:c8:4b:c5:7a:4b:ce:2d:89:01:d4:d7:33:
0d:bf:95:2e:64:80:15:49:e3:69:74:34:bf:6f:07:25:fd:0f:
41:3f:f2:43:06:97:a3:6e:41:d8:20:6e:5f:14:b9:a2:67:c7:
bd:8b:1f:7b:af:e0:b8:8c:6a:a8:53:e0:5c:fd:52:a9:5e:f8:
8f:dc:0b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:54:14 2026 by rpki-client