Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3EFD4F0071611F1B69C97A8DAE4EC9C.roa
File: A3EFD4F0071611F1B69C97A8DAE4EC9C.roa (raw, json)
Hash identifier: 8MSdiuubklUgr9fZvoe9L9PTencc7XVkuXHJdHI/SoA=
Subject key identifier: 40:C0:BE:7D:78:52:33:96:43:3B:E8:40:03:0A:C5:35:B1:5B:98:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B91E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3EFD4F0071611F1B69C97A8DAE4EC9C.roa
Signing time: Wed 11 Feb 2026 06:55:25 +0000
ROA not before: Wed 11 Feb 2026 06:55:20 +0000
ROA not after: Fri 15 May 2026 06:55:20 +0000
asID: 9294
IP address blocks: 154.92.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112926 (0x1b91e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 11 06:55:20 2026 GMT
Not After : May 15 06:55:20 2026 GMT
Subject: CN=698c27dd-1e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:21:d5:7f:a1:37:3b:6a:24:cf:33:b5:f5:6c:
21:fe:98:1a:d2:05:63:74:69:ad:f3:88:4c:45:fd:
b5:b7:6a:3b:01:3c:59:ed:b9:8e:5a:39:b2:91:1f:
7e:ed:89:06:b7:91:99:7c:e7:8d:20:31:8a:f4:ed:
85:73:ed:b7:f8:ba:65:36:d8:97:17:41:7a:ca:d6:
80:dd:41:da:c7:d5:13:ce:8d:b0:cc:3d:4f:b1:9d:
d7:79:d6:58:49:41:f7:ad:99:fb:6f:b5:eb:ce:cc:
dd:71:e0:82:50:98:ce:e7:4e:57:fb:0d:65:62:68:
ed:64:74:65:c0:ba:f0:4b:c6:5c:9c:8c:f3:7d:d0:
99:2a:ec:d8:d0:8f:39:8e:25:09:86:4b:f1:f4:69:
cc:2d:93:58:a3:b4:33:06:54:a8:62:83:9a:d4:4f:
6c:5f:ed:10:6a:2d:36:52:ad:4b:59:f3:6e:17:b0:
34:3e:a9:6b:e0:1c:f6:12:7f:06:7b:8d:c9:c0:a3:
88:58:b6:33:98:3d:3c:fc:50:b4:73:f2:d5:cf:81:
89:94:66:5f:ec:cb:41:82:95:0c:b7:55:5d:22:6c:
35:6d:11:fa:8a:31:4c:38:dd:68:7f:e6:ae:4a:e2:
47:cc:74:eb:ea:90:2d:d3:a1:18:c7:88:63:84:ac:
53:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C0:BE:7D:78:52:33:96:43:3B:E8:40:03:0A:C5:35:B1:5B:98:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3EFD4F0071611F1B69C97A8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.224.0/19
Signature Algorithm: sha256WithRSAEncryption
40:d4:f3:70:e7:e4:52:36:69:ca:c7:14:36:49:cd:9f:2f:60:
ef:85:61:27:a3:80:da:b9:52:48:cf:16:cf:76:14:de:c7:99:
aa:88:dd:15:f4:31:1b:67:36:24:cb:ab:8b:82:83:30:f4:fe:
55:8f:b7:ed:52:05:50:e5:de:41:10:a1:a3:34:e3:d5:49:38:
24:13:99:6a:cd:12:24:e7:b0:95:29:b9:2c:3e:d9:f1:b8:fe:
e7:57:1a:67:cd:5e:bd:ab:a9:05:34:5c:f1:d0:81:30:e7:ee:
a6:63:f4:f4:bb:c2:9e:b0:d5:55:bc:e3:3b:90:31:e5:17:1f:
a2:9d:c2:c8:33:a7:3e:68:5e:58:97:bb:91:3c:22:3e:ae:f4:
20:cc:bb:40:e4:2f:a2:99:88:57:fd:49:5a:d0:2f:45:ca:94:
20:e7:e2:8d:76:d5:ca:16:6f:83:b3:9d:4b:32:f4:51:16:a6:
29:a5:80:2e:fe:75:09:63:d3:8c:29:68:9e:e1:7c:8f:24:58:
2a:82:82:37:b4:ab:42:6b:a6:c1:22:0e:bf:d3:54:92:5e:b0:
b0:34:e0:88:a9:12:7e:9d:98:43:bc:41:5c:df:f0:8a:ca:a9:
3f:81:51:01:8c:43:d4:28:61:af:87:24:9b:b9:d3:e8:6b:c1:
22:97:ae:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:16:54 2026 by rpki-client