Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/615B5774FB5C11F09309B393DAE4EC9C.roa
File: 615B5774FB5C11F09309B393DAE4EC9C.roa (raw, json)
Hash identifier: rRq8wZxFs6f1WPXin/mby3Jw+Wh3qTWgUl4pdEQW+UQ=
Subject key identifier: C5:CF:AB:B7:C9:4D:24:4D:99:01:1F:00:47:25:4A:70:35:BD:0F:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B6EE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/615B5774FB5C11F09309B393DAE4EC9C.roa
Signing time: Tue 27 Jan 2026 08:44:24 +0000
ROA not before: Tue 27 Jan 2026 08:44:19 +0000
ROA not after: Thu 05 Mar 2026 08:44:19 +0000
asID: 48678
IP address blocks: 154.194.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112366 (0x1b6ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 08:44:19 2026 GMT
Not After : Mar 5 08:44:19 2026 GMT
Subject: CN=69787ae8-1b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:eb:e8:5d:d4:45:d8:24:06:bb:b9:91:f2:2e:
13:c9:cc:b2:a7:43:11:a9:7a:7f:c1:68:c1:30:87:
25:45:b8:dc:cc:be:00:53:a4:e5:1e:62:2d:23:a8:
7c:e0:ac:9e:4a:c8:f3:fc:23:10:61:c5:aa:48:ff:
8b:5b:e5:75:c5:b9:a2:77:d2:29:24:69:35:ca:bd:
23:fa:83:eb:6a:bf:bc:7b:ed:a0:74:ae:0e:c3:0d:
d7:a0:7a:63:1a:ba:08:4c:5c:27:e5:ce:c7:c0:4c:
3c:fa:4b:c3:92:71:e4:fb:f5:8e:e4:9e:af:38:09:
b7:41:42:9e:df:db:8c:ba:f3:85:c6:32:ed:9e:f0:
1f:67:fb:f9:d6:a6:99:bc:03:10:31:91:e7:7f:24:
f9:3e:18:d6:22:a7:ce:16:3c:69:d2:37:13:fe:eb:
50:c7:35:a5:de:74:5d:0c:3a:30:ad:dc:4a:61:7f:
16:31:49:be:80:39:79:04:26:4f:fe:20:90:87:b6:
99:f7:77:20:f5:bd:8b:54:d3:0f:aa:1a:dd:44:9f:
b2:32:3b:47:e1:cf:ff:b0:6d:8f:8d:80:5f:28:98:
46:8c:85:b7:87:0f:ac:60:04:30:6c:d7:11:ea:75:
fe:06:c0:7a:6a:48:ca:1c:f4:cb:66:7c:ec:c7:92:
a7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CF:AB:B7:C9:4D:24:4D:99:01:1F:00:47:25:4A:70:35:BD:0F:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/615B5774FB5C11F09309B393DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.2.0/24
Signature Algorithm: sha256WithRSAEncryption
91:23:05:57:1e:d0:b3:9b:99:78:53:e1:19:c1:fb:b5:f6:44:
95:a5:07:8e:99:a2:33:12:cf:da:a4:3c:1e:e6:bd:32:4c:a2:
ab:83:59:ce:6d:79:65:21:a5:89:da:7e:62:8b:f1:69:fb:cf:
10:2b:78:19:04:0a:1e:33:f5:4b:11:7a:29:0c:44:b2:b1:49:
57:5e:8d:8e:e9:b9:50:8c:bf:d0:c7:35:14:01:b4:96:18:f4:
41:34:5f:1b:40:6e:c6:66:33:f0:fa:c7:40:cd:b3:d0:a5:50:
0a:45:04:a9:ed:37:f7:79:3d:d1:ef:b8:83:28:79:1d:09:fc:
86:6b:67:c8:84:7a:bf:0a:b7:8a:af:de:4f:2f:34:f4:c6:e0:
73:f2:25:e9:a8:38:5c:2b:ae:c7:b1:2e:84:3d:e6:98:c3:b6:
7a:b0:59:7c:30:9c:ea:5d:22:55:15:93:48:32:a0:db:ee:d0:
bb:45:b0:61:ec:96:be:18:b2:ef:c1:ca:0c:c8:a8:c3:9f:c1:
a7:bd:a9:e5:b9:cd:2f:ee:ed:d2:ae:b6:5e:31:fc:ec:9e:7f:
c0:37:8b:7a:1d:2a:e2:c2:4a:ca:10:2e:56:ea:22:3e:38:de:
63:b0:6e:c5:bf:81:80:1b:b9:20:f1:f6:2d:34:5d:d6:b3:5d:
36:0f:ee:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:24:52 2026 by rpki-client