Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C50B61E0CA211F1B16CC8B9DAE4EC9C.roa
File: 5C50B61E0CA211F1B16CC8B9DAE4EC9C.roa (raw, json)
Hash identifier: OJHIJ9Q+ZwuHc8aGLvC9Ns+0Op7E1Zeuf8B8GYF5Hxo=
Subject key identifier: 59:B8:F4:DC:7C:13:61:BB:0F:58:3D:E8:AF:5F:1A:A3:E0:41:C9:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA1A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C50B61E0CA211F1B16CC8B9DAE4EC9C.roa
Signing time: Wed 18 Feb 2026 08:18:10 +0000
ROA not before: Wed 18 Feb 2026 08:18:04 +0000
ROA not after: Tue 24 Mar 2026 08:18:04 +0000
asID: 214413
IP address blocks: 154.82.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113178 (0x1ba1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 18 08:18:04 2026 GMT
Not After : Mar 24 08:18:04 2026 GMT
Subject: CN=699575c2-fb8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c7:07:20:a9:27:b3:a3:c7:39:fe:2b:cb:1d:
db:6c:58:7c:65:4e:f3:02:1b:25:9d:96:d7:b1:b3:
56:93:65:67:30:cf:f8:7a:3e:1b:ff:11:a3:45:e1:
02:28:03:60:1f:82:b1:22:13:2b:b3:7f:f0:a6:44:
23:9e:9f:a3:08:24:74:4a:a8:79:82:4c:0e:9a:8c:
3a:73:a9:5f:90:90:ec:22:f0:1a:22:04:4d:60:d4:
35:74:50:a4:39:dc:ec:e9:f2:fc:fb:4f:2f:06:48:
a8:5b:23:66:de:f8:72:8d:97:b3:0b:19:8a:31:91:
56:ae:64:fc:3e:ed:38:11:13:ef:b3:42:c3:6f:11:
6f:5f:83:8f:4b:bf:21:43:aa:8d:28:19:07:f9:8a:
8d:27:f5:2a:82:3b:29:fe:92:80:33:1b:00:7f:07:
f0:5b:d5:cb:3f:21:28:83:fa:10:9e:bf:25:53:04:
3b:dc:0c:70:52:87:fe:72:9d:5a:e1:2c:6d:a1:f6:
cc:e0:c8:b1:b0:e7:a9:0a:c5:6b:b4:1b:fc:6d:df:
80:0e:2f:8f:ed:90:0f:65:cd:26:63:5e:fb:0e:f6:
f8:76:48:07:a3:7e:16:8b:84:08:8d:59:be:7a:d8:
03:0f:c9:dd:61:f6:e5:9e:ae:9c:dc:1d:ac:d9:da:
11:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B8:F4:DC:7C:13:61:BB:0F:58:3D:E8:AF:5F:1A:A3:E0:41:C9:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C50B61E0CA211F1B16CC8B9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.0.0/23
Signature Algorithm: sha256WithRSAEncryption
cb:d2:03:b9:ea:d4:56:3d:54:b9:af:e2:98:a3:d9:74:99:10:
a5:d2:fc:e7:6c:63:01:1b:5b:d7:e2:b0:13:9a:20:24:70:d0:
f0:e4:d9:71:5a:9c:ba:16:d2:83:19:bb:50:b0:48:e7:06:be:
5a:be:c4:9c:ff:18:45:89:de:58:19:d1:02:c4:d5:65:ae:d9:
25:d0:83:b0:cb:d5:ed:40:49:38:f0:f6:af:c4:af:a8:16:8e:
76:78:5a:55:54:fb:7e:a7:9c:2e:78:9b:8c:b4:f2:5d:bd:99:
e7:6c:1b:44:9f:e4:f5:b6:ce:9d:71:d8:61:f8:a4:77:f4:5b:
2e:a7:38:1f:0b:74:d1:ed:eb:14:1f:15:9a:40:c9:be:d4:df:
06:0d:1c:9d:9f:82:a4:f2:d9:b0:ed:91:97:a6:a8:c3:a6:cf:
0b:ec:a3:1b:80:77:f2:dd:a2:87:47:f2:96:5e:bc:87:d2:c0:
e2:6f:b6:6b:f8:81:62:08:90:28:ec:6d:e7:ef:16:87:dc:e5:
55:36:45:98:e6:2b:68:44:c5:26:32:c3:23:da:28:3b:f8:3b:
79:54:67:a5:17:ae:8f:7a:16:68:a6:87:5e:68:8e:4d:43:b7:
6a:09:05:7a:b8:93:cd:6a:aa:66:f6:2b:f8:a0:28:8f:7d:2b:
a2:ba:7e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:31:15 2026 by rpki-client