Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F36DE36124C11F190B72489DAE4EC9C.roa
File: 9F36DE36124C11F190B72489DAE4EC9C.roa (raw, json)
Hash identifier: Xg5zD8Rv3jfdLwcQrzMeScfiElOQv6Jkx7sf2LWSnt0=
Subject key identifier: 9C:BC:11:99:2B:BF:EA:4C:D4:7D:F2:B2:68:EE:DD:AD:9C:E1:55:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BBC1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F36DE36124C11F190B72489DAE4EC9C.roa
Signing time: Wed 25 Feb 2026 13:19:32 +0000
ROA not before: Wed 25 Feb 2026 13:19:28 +0000
ROA not after: Fri 06 Mar 2026 13:19:28 +0000
asID: 395886
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113601 (0x1bbc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 13:19:28 2026 GMT
Not After : Mar 6 13:19:28 2026 GMT
Subject: CN=699ef6e4-b626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6a:a1:a8:45:37:cf:d2:92:b9:43:d2:65:e8:
7f:be:ca:bf:98:f9:fb:d5:2f:b0:98:56:ae:d0:e8:
4c:ee:b6:4b:9a:24:26:19:95:a9:1a:17:a0:48:15:
23:50:1d:e1:6e:74:65:36:e2:91:2d:85:da:4d:57:
41:b9:f4:5f:e5:4a:26:bf:77:5d:83:76:97:18:37:
0d:e4:2e:09:7b:f0:e3:96:3b:9c:5d:dd:23:ed:2f:
c6:2d:a8:ad:74:05:e3:d9:a2:f8:27:a2:46:cb:a7:
01:f7:18:c5:89:af:de:5f:97:41:cd:20:80:ab:1f:
8a:a3:d8:0e:47:2a:9e:b3:a9:59:5b:c9:99:73:ee:
22:5b:25:3d:23:70:94:4f:90:4b:7c:65:6b:aa:b0:
71:c8:26:cb:e5:5d:d0:e1:12:46:fd:21:be:26:6d:
f4:af:c3:f6:18:e8:32:ae:db:90:bd:81:a1:4e:76:
d3:9b:d0:bf:9d:ea:6e:10:35:a2:01:6c:fa:11:1f:
d9:a5:3d:5b:71:10:dc:c2:3d:d9:f7:9d:27:5d:e8:
f8:5e:d8:dc:4b:1c:65:de:55:b7:59:18:05:bd:a4:
47:bd:de:cd:bc:e9:7b:cc:ba:be:9a:85:a5:6d:88:
b7:5a:3e:d9:2f:c7:ee:51:a5:a4:8f:de:de:ef:27:
1e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BC:11:99:2B:BF:EA:4C:D4:7D:F2:B2:68:EE:DD:AD:9C:E1:55:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F36DE36124C11F190B72489DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
0c:f0:b5:ff:8e:a7:a5:63:f1:73:50:23:7f:8d:d3:8b:c9:e4:
4a:9c:93:9a:27:81:9b:ab:ce:af:f8:f9:8b:7c:d8:79:0a:fe:
96:a6:62:ad:09:8a:85:eb:1b:c2:a1:e1:fc:27:67:7e:5e:4e:
0e:9a:bf:fe:c8:9c:26:74:c0:85:b8:cd:72:8d:a1:c9:36:88:
48:1b:5c:28:ec:a0:d0:75:72:65:4c:04:8e:47:52:b9:c6:a4:
b4:c7:3e:9f:10:d9:b9:bc:e0:e6:56:63:80:18:b3:79:00:53:
f9:36:0f:7c:63:4d:60:49:c6:d5:04:44:ab:e9:4f:11:fc:5c:
de:14:bf:d5:77:76:4d:c9:7f:3c:c0:c5:5b:46:bb:58:3b:20:
b3:32:90:b0:ce:4a:13:e1:2a:5b:95:50:8e:1f:e9:1f:52:e2:
37:16:71:1a:2f:82:4b:ba:6e:43:cb:9b:58:0a:95:fd:16:0c:
89:05:64:b7:41:1e:b6:e3:1b:52:3e:d5:97:f4:98:e9:34:9c:
dc:4a:fb:98:43:9a:ce:8f:d4:24:84:b5:55:f0:3a:0b:e2:92:
a9:2e:14:ac:b8:5a:df:36:6d:0f:8b:6f:b1:e3:07:98:12:be:
e5:43:98:5f:56:46:8f:96:65:4d:37:d3:bb:a9:ca:36:85:d2:
e0:06:d2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:56:25 2026 by rpki-client