Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A38444D2115811F1917A62AFDAE4EC9C.roa
File: A38444D2115811F1917A62AFDAE4EC9C.roa (raw, json)
Hash identifier: gQDUOO2SbZh1p1M6rU8vzYMvqJYXt1xlWbzFPE6iGik=
Subject key identifier: AD:28:F7:E8:F7:DA:B9:2B:0D:A0:82:C3:45:16:AF:5F:94:1B:6F:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB2C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A38444D2115811F1917A62AFDAE4EC9C.roa
Signing time: Tue 24 Feb 2026 08:13:02 +0000
ROA not before: Tue 24 Feb 2026 08:12:58 +0000
ROA not after: Mon 30 Mar 2026 08:12:58 +0000
asID: 8796
IP address blocks: 154.201.72.0/21 maxlen: 24
154.201.88.0/22 maxlen: 24
154.201.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113452 (0x1bb2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 08:12:58 2026 GMT
Not After : Mar 30 08:12:58 2026 GMT
Subject: CN=699d5d8e-b8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c7:7f:1a:6f:a9:4f:b7:9a:c4:fc:56:8d:e4:
4b:b9:ed:cb:68:78:4e:de:a9:5d:ff:95:45:70:38:
ea:bb:0c:13:af:2e:54:6b:7e:1f:2a:31:57:80:81:
dd:9d:e2:95:b4:38:4d:21:54:83:92:4d:bd:c5:95:
be:94:14:e6:4d:2b:4c:27:bd:6b:46:8a:34:a6:64:
4a:99:32:c4:f2:8c:66:81:5d:2e:6f:ed:36:c6:fa:
8c:a6:62:25:65:e7:81:8a:56:6b:79:bd:02:09:4a:
51:c1:90:a7:00:09:ae:82:29:99:62:32:72:81:8c:
84:7f:60:8a:1c:74:ff:13:d2:ee:a9:7f:f1:79:11:
1e:78:f9:e7:26:90:e8:3f:ab:da:07:1a:36:9c:e4:
bd:a1:00:f1:58:a2:4c:15:2e:08:e4:13:31:73:c1:
bf:e8:7c:f5:eb:68:9b:8a:e4:c4:dc:59:1e:db:70:
62:fa:02:9c:4d:ed:13:a0:b0:c1:dc:ab:fd:c7:61:
c9:7e:54:27:24:4e:70:30:3d:39:ad:30:46:e4:78:
2b:ce:1c:5c:15:98:c2:39:c5:cf:74:33:9f:1e:a2:
53:61:be:c5:3d:7b:0b:59:70:c1:27:29:f6:3a:43:
d4:7e:5c:d1:98:24:e5:9c:fc:27:27:48:0e:63:e1:
e5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:28:F7:E8:F7:DA:B9:2B:0D:A0:82:C3:45:16:AF:5F:94:1B:6F:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A38444D2115811F1917A62AFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.72.0/21
154.201.88.0-154.201.93.255
Signature Algorithm: sha256WithRSAEncryption
70:18:8f:e5:79:73:68:69:90:75:64:53:b1:a2:b2:01:6f:b4:
09:61:a8:e3:73:d3:95:b4:d2:9b:ce:45:e2:a1:1e:65:3a:ba:
63:fb:f6:88:21:64:04:47:c1:8d:42:aa:44:fb:04:d8:e0:1c:
f8:c1:ef:10:af:f4:d8:7b:3d:bb:61:73:b4:47:42:87:92:c9:
ed:d3:ed:25:ce:46:65:06:71:16:2e:6c:d5:1b:b4:24:91:24:
ab:89:ca:42:3a:c0:de:c0:52:22:40:bf:27:e8:28:7a:57:79:
44:ec:90:be:a7:71:b5:e7:83:26:c3:e3:c5:c2:21:31:88:0b:
fe:a4:ca:26:a0:74:15:36:e1:70:f9:b5:a7:21:14:ad:79:77:
78:38:46:dc:d8:7b:b0:4e:df:e4:a7:a2:7e:80:7a:ca:ce:9c:
33:ba:95:d9:e0:d6:3c:cb:bc:8c:47:a1:b3:f4:03:10:86:ba:
7f:a8:c8:57:bd:f2:7a:4a:e2:75:bb:52:1a:5a:52:72:67:04:
1a:cb:11:b2:98:73:70:16:b3:47:42:2b:a5:02:26:3d:68:c4:
bc:af:1d:ea:72:78:28:55:d4:9d:aa:ff:84:ec:03:dc:ac:a7:
b0:2b:c7:a4:47:c1:26:8a:73:e4:d4:29:9b:18:1d:b5:45:49:
d1:1a:71:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:45 2026 by rpki-client