Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65EDA27E15E211F180395787DAE4EC9C.roa
File: 65EDA27E15E211F180395787DAE4EC9C.roa (raw, json)
Hash identifier: oPrFvwsWmb5HDdD5aib4cMuy4YynMbihBgZp9Jr7vus=
Subject key identifier: A1:38:78:61:5A:66:C2:CA:F4:F5:BD:04:E7:EC:E8:D9:D4:2C:32:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BCA9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65EDA27E15E211F180395787DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 02:49:14 +0000
ROA not before: Mon 02 Mar 2026 02:49:09 +0000
ROA not after: Mon 09 Mar 2026 02:49:09 +0000
asID: 138990
IP address blocks: 154.206.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113833 (0x1bca9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 2 02:49:09 2026 GMT
Not After : Mar 9 02:49:09 2026 GMT
Subject: CN=69a4faaa-d3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:98:74:0d:80:be:ac:07:98:d1:75:0e:58:d9:
91:1a:76:ef:6a:dc:d6:d6:50:17:f9:6c:24:5c:83:
45:9f:f4:db:0c:cb:7b:e8:f8:4c:c8:ca:75:0f:ab:
a2:13:b7:b2:cf:dc:60:28:78:bf:b5:6b:59:2c:23:
d1:29:60:1a:9d:bc:e9:ab:ef:af:83:f0:81:b9:17:
63:a7:bb:7c:29:9c:d3:a1:32:8f:7a:d1:7d:db:88:
ab:ba:87:4e:00:fa:9a:11:05:ca:3f:79:2d:81:d8:
f5:5f:36:97:2c:9d:de:75:97:a0:ee:45:67:2a:fb:
26:f8:74:da:0c:3b:18:67:8c:e4:da:fa:88:00:b0:
76:ed:5b:55:d7:b7:05:fd:01:3b:97:c5:5a:7a:e0:
19:35:4e:f2:66:8e:b5:e0:dd:15:a6:af:18:66:e0:
4e:e3:f3:a9:c7:58:6c:7f:67:c3:5c:8c:51:89:20:
1f:38:98:77:a6:69:03:61:98:c0:a5:cd:74:18:00:
f4:21:df:f9:9b:f7:56:81:20:a3:0e:9f:15:2a:b6:
02:10:4e:0f:21:36:10:7a:73:35:e3:d3:5a:53:de:
2a:31:b5:f3:40:2a:10:5e:e4:4b:e4:74:10:dd:97:
91:51:81:32:10:c0:90:29:4b:9c:d1:94:27:21:f8:
c1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:38:78:61:5A:66:C2:CA:F4:F5:BD:04:E7:EC:E8:D9:D4:2C:32:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65EDA27E15E211F180395787DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.128.0/18
Signature Algorithm: sha256WithRSAEncryption
55:56:39:d7:2f:b7:53:11:0f:b9:b8:3f:87:88:ea:32:a6:3d:
d3:4c:7d:3d:5b:0b:23:f1:6a:d1:ce:4e:89:c9:7d:fd:68:f2:
72:47:00:a5:8a:51:a0:a0:3b:8b:c8:ec:a5:72:f9:dd:c7:03:
ae:f9:25:25:2e:94:e6:8b:eb:b6:42:07:2a:8e:26:ae:d0:0f:
84:30:2d:df:8c:59:c9:fe:fa:96:8c:13:4f:b5:30:45:5d:fc:
ff:bb:48:91:24:f1:56:ab:ef:0f:7a:a8:f3:02:f5:02:92:e6:
71:b9:9b:73:e5:20:9b:8e:a1:d2:aa:2b:5b:42:5d:fd:f2:53:
b7:00:72:21:b2:b5:f1:15:f7:8a:29:47:99:a8:32:ef:c5:0a:
58:47:e9:39:d3:91:6f:99:86:33:7b:ed:0f:da:4a:32:b6:d7:
62:2e:81:34:25:6d:4b:aa:57:f6:ec:d5:91:f3:ce:db:2f:6d:
2d:ff:1f:88:6c:57:5b:6a:46:fd:5c:d7:c7:8d:bf:aa:b0:00:
01:66:9f:d4:e0:6e:1a:b7:10:90:9e:aa:e2:f1:2f:60:f0:16:
f4:dc:de:e4:72:df:61:a5:89:b5:77:7e:c4:f5:84:d2:4a:aa:
f1:f7:39:27:5b:f0:09:d1:b3:e6:31:d7:29:32:01:df:43:fd:
44:e1:d7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:41:02 2026 by rpki-client