Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F84B1D6026311F1B45345C6DAE4EC9C.roa
File: 9F84B1D6026311F1B45345C6DAE4EC9C.roa (raw, json)
Hash identifier: USNgXEMXjIrSOVsisxfrqUvwwf1nAxx6hIQjetcNHNc=
Subject key identifier: 84:DC:45:5D:51:44:33:1D:15:12:B0:2E:25:75:84:80:B1:47:A5:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B8A0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F84B1D6026311F1B45345C6DAE4EC9C.roa
Signing time: Thu 05 Feb 2026 07:23:53 +0000
ROA not before: Thu 05 Feb 2026 07:23:48 +0000
ROA not after: Wed 11 Mar 2026 07:23:48 +0000
asID: 20326
IP address blocks: 154.83.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112800 (0x1b8a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 5 07:23:48 2026 GMT
Not After : Mar 11 07:23:48 2026 GMT
Subject: CN=69844589-8907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:aa:cb:40:d0:8a:cd:55:74:7a:9d:87:56:62:
6b:53:15:00:cc:81:28:20:6d:0c:a7:94:17:02:45:
e2:29:5f:78:21:4c:63:1d:69:d8:54:f7:c6:b8:70:
e4:e4:81:38:38:64:88:f1:2e:0e:30:5f:62:7e:63:
75:2f:a3:b1:34:cf:f1:26:a1:fa:b7:a1:2b:7d:01:
b2:11:dd:e6:09:75:76:31:50:ee:86:2e:42:02:24:
be:3b:be:2d:e2:01:9a:55:fe:42:7d:49:92:e3:37:
fb:93:54:74:27:78:bc:3c:bc:87:d6:fe:5a:6f:f6:
52:28:75:0b:8a:3a:c5:04:86:c8:a2:70:1c:13:00:
06:e8:2a:b7:6f:ad:bb:ad:26:c6:f0:be:82:01:5c:
ca:dd:cf:37:2d:78:06:0d:6d:7a:36:20:9e:64:a6:
8b:92:a8:a0:e3:90:85:1a:92:94:7e:c6:14:67:26:
89:a9:d1:bd:25:1f:44:7d:01:64:d7:ea:be:ab:b9:
17:d2:cb:37:58:02:fb:85:ff:3e:f1:67:89:da:9d:
1d:c7:20:43:4c:38:64:0e:42:6f:4f:77:67:ac:44:
fa:3e:43:eb:fd:25:37:85:4d:79:f7:87:d5:80:e5:
7f:24:6b:64:76:ea:f7:c2:2e:d8:9e:45:af:68:7b:
07:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DC:45:5D:51:44:33:1D:15:12:B0:2E:25:75:84:80:B1:47:A5:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F84B1D6026311F1B45345C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.148.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:98:cd:38:81:88:22:6e:eb:58:f5:d2:c5:52:c5:67:7c:b7:
ff:55:cd:98:cf:8d:67:cf:8b:3e:7c:08:2b:a4:32:a4:24:2b:
b9:52:ca:19:3a:a5:f5:59:a8:04:8f:70:9a:72:6a:9f:13:e2:
ab:18:f9:10:5b:b8:17:74:de:55:b8:40:25:2b:e4:94:f2:66:
5f:d7:8e:5e:0e:22:1c:5e:3b:32:47:c2:c4:27:db:8a:bb:6e:
d0:e0:49:19:3f:84:18:92:4a:ed:3a:92:1b:00:70:b4:b9:27:
70:06:1e:0c:79:44:56:64:2b:ae:69:01:d9:8f:37:c8:3a:bb:
2f:3a:98:3d:2c:b3:a7:50:bb:84:a0:dd:f9:cd:23:d5:07:46:
6f:d1:90:96:a4:27:d3:e7:02:69:95:d0:2f:d9:08:78:08:05:
ba:39:72:0d:90:f7:33:e1:af:a6:b4:f3:24:cf:5b:1b:3e:e5:
05:e0:7a:60:13:30:29:30:9c:cf:d6:6d:81:3c:d1:5a:4a:b3:
39:eb:9d:1d:5c:45:89:ee:a1:32:3f:f2:02:5d:ad:62:89:cf:
8d:79:8d:ba:be:35:c3:88:fc:a5:2c:db:4a:e8:4b:7d:b9:53:
81:31:e3:ed:aa:6d:5a:25:47:95:8d:48:05:33:d3:3c:e5:b1:
f3:9c:42:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:10:02 2026 by rpki-client