Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74BA3B62072011F18A3248E2DAE4EC9C.roa
File: 74BA3B62072011F18A3248E2DAE4EC9C.roa (raw, json)
Hash identifier: F7fqGZaYuWZFSCcAwpmd5fTYP+P6eUdENBroIINR65A=
Subject key identifier: F5:1F:1D:23:BE:D6:C8:9C:3B:7C:CF:BB:4D:22:B1:FC:D1:02:CC:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B922
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74BA3B62072011F18A3248E2DAE4EC9C.roa
Signing time: Wed 11 Feb 2026 08:05:41 +0000
ROA not before: Wed 11 Feb 2026 08:05:33 +0000
ROA not after: Wed 18 Mar 2026 08:05:33 +0000
asID: 8796
IP address blocks: 154.200.128.0/24 maxlen: 24
154.200.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112930 (0x1b922)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 11 08:05:33 2026 GMT
Not After : Mar 18 08:05:33 2026 GMT
Subject: CN=698c3855-3972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1a:48:f2:ae:a6:f7:db:f7:c1:31:cf:77:d7:
8a:e5:b9:22:63:a4:ee:64:f0:65:12:7b:7f:51:38:
ee:26:a6:f9:60:11:a7:48:fd:e9:f6:c8:0a:80:ab:
96:a5:ef:39:e7:24:18:c5:1d:86:f6:52:36:e4:cf:
53:3b:a3:c8:06:7f:21:ed:02:55:9c:55:7a:dd:19:
08:c5:5d:9e:3b:4f:89:1b:37:b1:b5:9d:52:0f:44:
42:2d:51:37:4a:d0:3e:e9:b7:27:7f:f5:0f:86:f0:
00:55:f5:3e:6a:d7:ad:a4:1d:4a:42:b7:67:66:f3:
d2:14:da:10:7d:be:6d:6a:f7:2c:ea:90:07:7e:ff:
98:ce:b1:0b:68:03:a5:23:7d:3a:ec:2e:cb:7b:b8:
1b:4e:8a:24:01:fc:67:d4:0f:6d:a8:81:0e:a1:04:
c8:f4:72:5d:27:57:2c:c9:b5:29:c6:4e:ef:37:4b:
63:ab:0b:d7:7e:cd:39:2a:93:4a:ce:60:ea:18:20:
75:14:a2:64:05:69:0e:b5:39:9c:9b:3c:8d:3a:0b:
37:eb:ea:2f:a6:60:45:c2:c7:80:eb:af:41:06:cf:
f5:69:60:07:de:42:34:7f:34:48:3b:20:0a:f9:f9:
9f:1f:57:a6:29:98:72:56:38:0e:fd:2a:7d:9e:53:
8c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1F:1D:23:BE:D6:C8:9C:3B:7C:CF:BB:4D:22:B1:FC:D1:02:CC:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74BA3B62072011F18A3248E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.128.0/24
154.200.132.0/24
Signature Algorithm: sha256WithRSAEncryption
82:c9:7c:22:5e:da:fc:a6:a2:cc:62:30:6a:06:2c:23:21:02:
33:3a:d0:d7:2f:15:08:60:fa:f3:e4:44:58:39:60:fb:6b:f2:
54:42:15:93:9c:da:75:07:8d:f2:d9:4e:f1:81:d6:e2:42:ca:
60:e0:e3:84:62:16:f1:ff:b1:20:85:71:39:90:a5:8f:d8:70:
59:92:e5:40:71:6e:04:61:ed:0a:b1:3d:93:3f:26:ce:5e:3d:
42:f5:0e:d5:24:a9:ed:e7:4f:59:f3:1e:ba:e6:6e:96:ac:43:
b4:e5:dc:80:4f:dc:62:4d:0b:e3:6f:0a:b9:29:e9:91:42:28:
f9:72:3d:48:70:c9:e2:ef:08:4b:0f:1d:85:82:bb:57:8a:96:
1c:97:e4:85:7d:96:cb:fb:9f:f9:b8:60:96:d8:3f:fe:b4:54:
cb:73:68:46:40:3a:56:71:08:20:d4:04:f3:99:09:c9:9b:61:
68:c2:a0:27:b2:f6:db:2c:47:47:1a:4b:56:da:1e:70:33:b5:
54:33:a6:e4:66:0d:fb:ed:b1:ec:78:ea:7a:25:77:c2:db:50:
f5:d2:74:7d:f7:d2:e2:3d:b3:bd:b9:27:18:7a:b8:3d:c5:b7:
4a:eb:26:08:25:c1:05:fa:5d:17:a3:21:13:78:3a:b9:f6:91:
0c:f8:82:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:11:21 2026 by rpki-client