Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D46A8FE148D11F18498E8DADAE4EC9C.roa
File: 7D46A8FE148D11F18498E8DADAE4EC9C.roa (raw, json)
Hash identifier: XDB2WMKmJp3qh+MVqup63wCQn8kmv6zgtt5joHzPvjg=
Subject key identifier: BE:89:74:4F:25:83:1B:C0:12:CD:8E:FD:48:62:DF:DE:D2:71:94:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC5D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D46A8FE148D11F18498E8DADAE4EC9C.roa
Signing time: Sat 28 Feb 2026 10:08:55 +0000
ROA not before: Sat 28 Feb 2026 10:08:51 +0000
ROA not after: Sun 07 Mar 2027 10:08:51 +0000
asID: 135600
IP address blocks: 154.211.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113757 (0x1bc5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 10:08:51 2026 GMT
Not After : Mar 7 10:08:51 2027 GMT
Subject: CN=69a2beb7-6107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:33:2c:02:96:cc:4b:39:d5:0b:d3:a1:58:bb:
3a:0d:f5:fd:ee:50:17:87:d3:e3:fa:bc:79:dd:13:
36:dd:fa:7b:01:8f:f9:82:2c:a0:2b:75:1f:12:70:
69:f4:4a:ed:6d:03:cf:77:87:d4:5f:f2:89:6f:db:
a1:5e:93:66:44:1c:d5:ae:3a:4b:54:6a:65:2e:6a:
bd:eb:c4:4a:fe:56:81:8c:e9:7b:d2:62:0a:84:2d:
cd:ad:4d:e2:fb:e4:cb:8f:c5:6e:00:93:7d:ad:3b:
37:a4:0b:09:c3:6b:7e:f7:59:f2:e2:96:80:a4:52:
79:72:74:39:59:82:88:a6:0f:40:94:d8:88:a0:8e:
a5:02:4c:db:4c:d9:31:06:36:f8:9e:6f:e3:45:31:
18:c4:df:a9:76:80:4b:2b:04:ed:cd:9c:8d:c0:95:
42:78:4e:d2:7c:09:d3:50:26:a6:7f:a1:7e:4b:81:
01:bd:ed:00:ad:8e:16:d0:82:9b:04:b3:05:79:3a:
c9:b2:9d:78:cd:ec:78:af:fd:96:00:1b:e2:fb:3e:
79:a1:d9:21:de:11:f5:17:a2:db:69:e3:df:27:31:
42:81:2b:e7:93:bd:aa:35:01:83:91:8c:89:de:67:
a6:a9:f8:68:ba:d0:a7:4b:26:48:a5:ee:b9:5f:06:
9d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:89:74:4F:25:83:1B:C0:12:CD:8E:FD:48:62:DF:DE:D2:71:94:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D46A8FE148D11F18498E8DADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.160.0/21
Signature Algorithm: sha256WithRSAEncryption
46:73:5e:64:86:95:55:a3:00:49:74:4f:28:ed:e0:08:e1:48:
25:65:e9:52:20:69:e4:43:92:f5:96:54:60:ed:8d:96:65:bc:
db:05:f4:9a:98:e9:df:e2:b3:53:c3:2d:3f:cd:48:c3:ed:07:
ce:bd:ef:4f:85:a6:73:80:9c:98:91:85:ac:07:be:d0:fa:fd:
13:49:3f:03:12:ac:0c:cc:11:d8:0c:07:e5:ff:53:8f:26:e4:
72:f3:e2:89:99:a4:91:ad:d0:e9:1b:16:f1:87:e9:00:ba:c7:
9d:a6:1e:bb:e6:b7:2a:04:f8:17:0c:b8:4a:8f:d1:db:a3:79:
f6:ed:ce:ac:41:7e:4b:29:28:18:f9:28:bf:5e:02:56:a3:eb:
55:8f:a8:7d:60:85:52:83:40:0b:12:2b:0e:0a:58:0a:23:a2:
5b:23:f0:ab:8d:c1:9a:a7:5c:d1:79:49:61:1a:cc:68:9e:2a:
4d:c8:6d:25:ec:30:34:e4:fa:67:79:ea:a6:1d:f9:7a:9b:55:
8f:35:56:a7:78:24:73:cb:ed:3f:ea:8f:a2:a7:e7:3a:01:df:
a1:0a:c7:3a:b4:22:ef:fd:d3:86:7d:2d:76:2f:f1:eb:08:19:
ef:6a:55:fd:44:61:8a:40:1e:0b:13:e1:69:ef:39:0b:15:46:
b1:e9:64:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:16:41 2026 by rpki-client