Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83451F8E032A11F1819A428DDAE4EC9C.roa
File: 83451F8E032A11F1819A428DDAE4EC9C.roa (raw, json)
Hash identifier: AGPmk16dZdlcuhuPi2y5YYXQSE2d7jRrKIknGgJql3I=
Subject key identifier: 33:F2:6A:4F:2A:79:62:BC:20:4C:E5:21:8E:B2:81:73:FC:DA:6A:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B8AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83451F8E032A11F1819A428DDAE4EC9C.roa
Signing time: Fri 06 Feb 2026 07:07:35 +0000
ROA not before: Fri 06 Feb 2026 07:07:30 +0000
ROA not after: Wed 11 Mar 2026 07:07:30 +0000
asID: 61112
IP address blocks: 154.82.138.0/23 maxlen: 24
154.83.83.0/24 maxlen: 24
154.83.84.0/22 maxlen: 24
154.83.88.0/21 maxlen: 24
154.83.90.0/24 maxlen: 24
154.83.91.0/24 maxlen: 24
154.83.92.0/22 maxlen: 24
154.83.96.0/23 maxlen: 24
154.83.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112810 (0x1b8aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 6 07:07:30 2026 GMT
Not After : Mar 11 07:07:30 2026 GMT
Subject: CN=69859337-d931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:80:a3:ab:3c:c2:7e:03:67:4f:43:29:25:
a9:ee:43:f6:fb:1e:df:8e:9b:6b:8d:4d:13:92:23:
4b:ab:42:a2:1b:07:fe:59:fc:35:58:22:45:d2:79:
e0:da:3c:1d:2a:f0:4c:7a:a3:07:b8:43:00:ae:f5:
f4:67:be:50:07:57:b6:2e:7a:fb:a9:9e:8b:b8:5a:
95:ae:61:4b:77:ae:fa:fc:64:c5:5c:9a:cf:dc:fe:
00:da:ef:b5:40:83:bb:04:46:13:c3:5f:24:a1:41:
b4:66:28:21:05:9e:32:33:12:0a:7d:65:a6:f3:d2:
69:16:44:dc:9f:32:c6:6b:4e:36:18:e8:3f:a2:72:
03:a3:9b:39:6d:1c:bf:e6:bd:bc:ac:c0:39:24:91:
36:b3:93:71:64:73:4e:00:ce:c9:b1:55:c8:2d:dd:
c2:2c:cc:0c:d2:4c:d9:21:02:26:7c:d1:a5:b2:fb:
fa:4a:bd:2b:80:9c:96:7f:46:2e:5a:ee:65:90:41:
b7:a0:8e:cd:70:9c:f6:6e:1c:e7:5b:d1:5a:3b:ec:
81:e0:ce:a2:c7:5c:99:d7:e8:ac:b8:cd:b7:3c:3a:
f8:a9:bc:90:a7:b1:c3:b9:42:e3:d2:47:91:cb:8f:
ba:c8:d6:6b:88:76:8b:08:04:fa:e4:c4:70:27:5c:
a5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F2:6A:4F:2A:79:62:BC:20:4C:E5:21:8E:B2:81:73:FC:DA:6A:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83451F8E032A11F1819A428DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.138.0/23
154.83.83.0-154.83.98.255
Signature Algorithm: sha256WithRSAEncryption
93:59:e8:57:17:7a:60:e4:dc:36:51:35:0e:b9:ab:99:da:92:
6f:6c:3a:5a:19:d0:b2:c0:c1:8b:bd:72:e5:01:3c:6d:f4:6a:
a4:37:51:4d:d7:a5:68:b2:23:0d:df:b7:4a:08:6f:e9:1e:d0:
ab:e7:5a:e4:30:b7:c5:45:1e:40:71:94:6f:39:8d:fe:b3:f6:
e3:e6:e0:96:35:21:73:4d:7a:19:37:ec:af:a6:1c:91:bb:7f:
80:0d:f2:69:57:47:b2:20:f7:2d:ad:21:d8:e9:f0:bf:3b:66:
ea:d5:f3:9c:68:72:45:65:6b:fb:a1:4d:03:10:c3:c9:18:77:
e7:59:27:e2:2b:88:94:fb:a6:c5:86:c7:fe:07:44:82:28:e9:
a3:cd:5c:6d:ca:77:65:e5:d5:2a:bf:c3:73:96:6e:19:2f:dc:
9f:9b:98:ba:82:6f:5e:f5:fd:2d:ad:80:71:78:5e:d4:fc:dd:
04:a7:3c:c0:43:a4:3d:c6:80:7f:eb:fb:7b:2f:f6:07:4f:fb:
8d:20:da:3d:09:8e:93:90:ba:f2:22:ee:7f:e5:94:9b:cf:47:
17:4a:e2:a5:ff:64:dd:ec:db:cd:dd:17:e9:38:b8:ca:65:c1:
d9:4c:0a:1d:c5:fd:90:d2:8e:5c:07:e5:1f:67:07:3e:7b:e8:
3f:0f:60:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:16:43 2026 by rpki-client