Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80DE1D82098211F1B4D69684DAE4EC9C.roa
File: 80DE1D82098211F1B4D69684DAE4EC9C.roa (raw, json)
Hash identifier: AThrflOvg247nc8n5bIEliu1QuvDg0od4vNoAmzRYZk=
Subject key identifier: 75:32:45:B9:74:61:7B:AF:77:CC:04:A1:1F:E0:DA:D0:04:73:CE:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B959
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80DE1D82098211F1B4D69684DAE4EC9C.roa
Signing time: Sat 14 Feb 2026 08:52:34 +0000
ROA not before: Sat 14 Feb 2026 08:52:29 +0000
ROA not after: Wed 25 Mar 2026 08:52:29 +0000
asID: 61112
IP address blocks: 154.85.18.0/23 maxlen: 24
154.85.18.0/24 maxlen: 24
154.85.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112985 (0x1b959)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 14 08:52:29 2026 GMT
Not After : Mar 25 08:52:29 2026 GMT
Subject: CN=699037d2-25ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3a:77:1f:41:1f:af:6c:e0:cd:ea:6f:1d:2f:
c2:9c:12:9c:6a:31:20:29:18:03:22:6a:29:5f:b8:
10:16:ce:2b:11:a2:e3:e9:48:9c:f0:7a:75:4c:a8:
4b:b8:a9:a9:ad:5c:ed:55:64:c6:40:5d:98:f1:84:
e7:8a:f6:2f:6b:79:0e:55:29:34:7c:65:7b:77:fc:
1a:a7:6b:e4:4f:69:2e:fe:75:11:4d:c2:c3:32:8a:
b9:2d:22:bc:ba:53:5b:37:43:59:d5:5a:ca:fc:fe:
a4:65:1a:81:6f:e9:7e:f3:e5:73:44:d3:1c:e0:c5:
b0:f7:ce:54:fc:3c:fc:9b:6a:4f:75:86:e0:0d:89:
0b:22:16:b2:fc:3c:0c:eb:e8:cb:fc:f4:8d:32:5a:
1e:f9:03:93:f3:ca:30:2b:87:ea:2d:b2:63:93:ab:
11:1a:72:e8:10:d3:76:75:ae:ab:e8:ef:4e:5d:7b:
5f:70:2b:67:2a:83:bb:af:4a:0f:ad:5f:4a:b2:9d:
a5:ad:3e:f7:5f:a4:9c:a5:6d:35:d2:24:9a:64:92:
dc:35:08:30:a9:88:06:79:89:85:07:3d:a0:bd:27:
dc:f5:a6:02:37:76:95:58:3a:77:00:63:02:e8:bf:
90:b2:36:02:7b:5a:4e:7c:43:20:db:b4:20:18:29:
a8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:32:45:B9:74:61:7B:AF:77:CC:04:A1:1F:E0:DA:D0:04:73:CE:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80DE1D82098211F1B4D69684DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.18.0/23
Signature Algorithm: sha256WithRSAEncryption
31:bc:96:14:c2:d4:3e:b8:56:0f:89:7f:9e:98:c1:4f:ea:3b:
28:a4:9b:b5:98:70:b7:2f:90:c1:08:68:fa:a4:16:02:e2:8d:
77:d5:dc:d4:97:ea:34:03:90:a5:4c:01:3d:b9:33:58:24:5c:
ec:a6:2c:6b:3f:31:99:40:36:cc:6e:a9:5c:e7:7f:02:ba:83:
42:e0:0b:e0:3f:02:37:c9:59:f3:c2:1f:45:42:62:39:32:fc:
40:36:43:10:29:de:d9:9c:d1:07:21:9c:f5:cf:e1:da:c9:16:
35:69:5e:9b:4c:37:d1:96:ae:fe:a5:92:da:c6:7e:d9:21:1f:
b4:fe:72:7d:87:36:49:d1:f2:a2:47:71:46:8b:b8:ce:c1:14:
29:d3:f9:c2:6c:4a:4d:47:a2:6d:6b:39:fe:f8:a6:c1:1b:81:
79:13:ab:b7:00:00:c7:34:9a:2f:ea:ed:d5:24:e7:98:f7:01:
12:1b:75:9d:30:96:d2:7f:d2:6c:55:dd:ec:15:a5:8c:55:9c:
6e:66:17:67:7c:32:aa:7f:1b:2d:54:41:98:ce:48:4e:df:c0:
e9:97:53:ed:45:14:41:92:78:f8:79:5e:60:8f:fa:22:da:17:
18:78:e6:5f:b9:25:91:94:fb:59:15:0a:2d:93:9d:3d:8c:ea:
91:01:73:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:52:11 2026 by rpki-client