Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61E5555413A411F199EC26CCDAE4EC9C.roa
File: 61E5555413A411F199EC26CCDAE4EC9C.roa (raw, json)
Hash identifier: CrU7J72wLpIr+V968aC1K3oVtuiwTltxCyZ5nLtnSZM=
Subject key identifier: 01:9F:BB:56:E5:A6:0D:7F:1E:8E:BD:0F:A4:67:BD:1D:6D:DD:8B:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC24
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61E5555413A411F199EC26CCDAE4EC9C.roa
Signing time: Fri 27 Feb 2026 06:20:16 +0000
ROA not before: Fri 27 Feb 2026 06:20:12 +0000
ROA not after: Fri 03 Apr 2026 06:20:12 +0000
asID: 17497
IP address blocks: 154.193.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113700 (0x1bc24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 06:20:12 2026 GMT
Not After : Apr 3 06:20:12 2026 GMT
Subject: CN=69a137a0-25ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2f:92:f7:38:be:1f:44:55:0c:e1:fd:a9:cd:
17:74:99:1f:43:8d:bb:55:38:9f:c1:43:cd:e9:a2:
a5:46:87:0a:a9:bc:1f:e3:1f:1f:01:d1:26:c5:89:
7f:a4:37:ef:85:9b:a2:01:6a:e4:87:47:2b:ea:aa:
03:49:14:b2:77:8d:a6:f5:51:e0:76:6f:4f:fb:6d:
2b:87:41:ed:9a:b2:3a:31:6d:fe:34:99:6d:c4:70:
3e:d0:95:82:c5:d8:53:7f:c4:2e:ae:6a:39:a7:0a:
36:7f:2a:f5:cb:60:a2:30:61:50:6e:cd:e6:e2:ff:
93:2b:02:8d:b1:0e:03:e0:0f:aa:27:09:f0:9a:e3:
0f:f5:cb:0d:e6:a3:60:50:1f:23:e5:c3:67:d0:42:
ac:bc:ff:7f:c9:55:a7:c1:1f:66:f5:59:40:0d:b7:
f5:f7:92:20:1f:bc:82:1f:7f:68:38:11:1b:e5:48:
a8:c0:43:ee:b9:be:74:17:8f:d1:ec:8b:bb:b7:7a:
7d:69:7b:5f:ab:0e:98:dc:1a:fd:49:0c:f4:c5:d7:
80:a2:34:0d:32:c6:c4:ab:ee:bb:d0:f1:1c:64:19:
e8:b7:be:4e:c5:fe:8d:a7:8a:27:1b:f9:ce:0b:fb:
8b:a4:ae:c9:10:e0:25:d6:af:f3:f8:8b:1b:d6:7d:
d4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9F:BB:56:E5:A6:0D:7F:1E:8E:BD:0F:A4:67:BD:1D:6D:DD:8B:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61E5555413A411F199EC26CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.162.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:df:a9:fe:d9:da:2d:73:16:02:f2:bb:f5:e3:b8:27:2d:f4:
a0:0e:1e:1b:4a:e0:4c:5b:8f:b0:04:b2:9b:23:d3:49:a1:2f:
ab:4f:ee:c2:2f:b6:7c:a8:df:07:75:b1:90:30:5e:63:c0:01:
cc:87:4f:34:fa:6a:bf:af:b9:1c:8c:a6:ce:ca:58:3a:e0:3c:
ee:6e:cb:45:e5:25:ae:84:4d:19:9f:4c:30:f1:ee:5d:56:08:
35:68:48:07:e5:d7:66:df:e4:51:08:2a:84:fd:6e:18:3c:4a:
4c:b6:36:42:1e:88:38:a7:cf:b3:be:3c:65:6e:c3:84:ab:da:
49:00:65:78:a3:d0:3c:bc:78:c0:d9:33:4d:50:96:14:35:45:
49:62:e1:28:d4:42:63:f2:49:62:f6:b5:59:f7:12:74:0e:51:
1f:bd:2a:58:b9:4b:49:04:0d:d1:21:d0:36:20:60:f1:14:20:
13:e6:bc:5b:fd:56:71:ad:ce:2f:40:d1:ac:b4:8a:1e:ba:0b:
f6:1c:d4:42:16:1c:57:b7:18:1b:14:b7:c8:ef:d5:62:fe:5d:
a2:97:1a:d8:91:fe:35:e3:ee:bf:4d:58:88:29:92:15:32:9d:
92:23:27:a1:4d:9e:15:ba:65:39:6f:c6:ab:b4:fa:39:16:72:
a0:18:b8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:12 2026 by rpki-client