Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A56F1E6161911F1A09C18DDDAE4EC9C.roa
File: 9A56F1E6161911F1A09C18DDDAE4EC9C.roa (raw, json)
Hash identifier: v6Z9TzwBCfl/PhUnWJ0PqCJo3LWvAr/ZiDHSNz292N0=
Subject key identifier: 1B:E8:FB:82:A9:52:A1:B1:BA:22:2F:C6:1B:0D:5E:C2:54:21:59:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BCE3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A56F1E6161911F1A09C18DDDAE4EC9C.roa
Signing time: Mon 02 Mar 2026 09:24:25 +0000
ROA not before: Mon 02 Mar 2026 09:24:20 +0000
ROA not after: Fri 10 Apr 2026 09:24:20 +0000
asID: 51896
IP address blocks: 154.194.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113891 (0x1bce3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 2 09:24:20 2026 GMT
Not After : Apr 10 09:24:20 2026 GMT
Subject: CN=69a55748-084b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:39:dc:01:fa:71:09:89:e5:b7:41:62:a4:ef:
f1:75:b6:9a:ea:ce:ed:67:b7:82:3c:5b:c0:58:d1:
0c:96:cf:ed:22:88:42:4f:b7:b6:3a:9e:dd:33:15:
c3:a6:02:33:6d:37:5d:21:dc:e8:f5:57:04:15:30:
8e:36:4c:ec:8c:e0:32:4c:eb:4c:59:8a:95:49:7d:
48:2f:7c:32:22:5b:8d:ba:c3:3e:60:dd:1c:cf:5b:
04:61:cd:05:c1:be:e4:17:ce:19:95:7b:1e:20:3b:
1b:27:14:b9:a2:ab:41:0a:98:ea:9d:20:96:23:80:
2f:6f:f8:65:c3:7e:9f:56:57:7e:aa:e7:7d:e1:9e:
24:3d:4c:d4:2c:66:64:61:9b:0f:20:e3:21:71:c6:
77:74:23:ef:00:c4:e2:9f:fa:66:33:e9:d4:7b:15:
b8:a3:81:bb:6c:9c:c1:f7:9a:7c:84:b4:3e:91:c6:
72:bb:e0:b6:55:02:83:c5:63:d9:b2:90:cc:7b:35:
60:95:1b:d0:24:39:ae:7f:70:6e:45:90:15:91:d2:
cb:e9:91:23:a9:ea:3e:8f:23:f3:2d:1e:f9:54:48:
0d:53:75:ba:67:03:65:5d:1d:7e:c6:a8:02:0a:1e:
66:42:aa:b1:a7:14:87:c0:50:33:a3:65:04:84:fd:
37:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E8:FB:82:A9:52:A1:B1:BA:22:2F:C6:1B:0D:5E:C2:54:21:59:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A56F1E6161911F1A09C18DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.43.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:89:24:53:6a:8d:1c:e0:cb:48:1d:e1:d9:ce:a4:e5:0e:67:
89:55:31:a9:42:77:f4:87:b4:7c:ad:a9:84:29:e2:43:97:c6:
cb:e2:32:ee:5e:79:10:89:e7:78:6d:71:67:1f:a5:95:45:43:
bf:a1:22:4b:cb:3d:b3:40:d3:7f:09:0b:cb:96:4a:c9:33:5f:
10:7a:41:5c:ec:f5:c9:d8:24:c1:57:ee:4b:84:d6:2b:6d:24:
49:23:e2:a9:29:c0:c1:c3:ca:5a:10:8e:5a:19:2b:ae:ea:60:
a9:c0:fb:66:88:e8:a0:b9:6d:e7:ac:5c:7d:06:b0:8d:70:1b:
90:64:60:09:6a:86:9d:9f:1d:dc:8c:1c:ea:f8:f4:63:58:ab:
8b:7f:ee:5c:84:06:ef:a7:65:d5:40:bc:18:28:54:a9:7a:a3:
51:5b:4f:1e:4b:89:19:d4:05:ca:00:40:e3:c8:aa:32:c0:99:
34:0f:d0:6f:40:af:9c:7e:5e:1f:d2:b1:99:62:75:30:c1:1a:
81:60:a7:04:14:d2:2c:2a:7c:16:a1:ae:cd:f4:97:19:aa:ca:
04:15:95:32:1a:42:0b:69:2f:2c:07:d0:e8:db:f0:4a:ce:3f:
4e:91:c5:c2:c9:64:9d:ba:4c:21:6f:84:b5:c8:ae:ce:38:25:
91:06:9f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:06:05 2026 by rpki-client