Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A994B1C2FF4711F0B58857AADAE4EC9C.roa
File: A994B1C2FF4711F0B58857AADAE4EC9C.roa (raw, json)
Hash identifier: WElZ1/QioWq0VZHocsc/xNUU+HFNhexv1FEes0CZgvc=
Subject key identifier: 36:E5:B7:73:83:75:E6:35:E2:56:08:4E:F3:F5:78:02:5C:15:E7:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B7F6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A994B1C2FF4711F0B58857AADAE4EC9C.roa
Signing time: Sun 01 Feb 2026 08:26:10 +0000
ROA not before: Sun 01 Feb 2026 08:26:06 +0000
ROA not after: Sat 07 Mar 2026 08:26:06 +0000
asID: 54600
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112630 (0x1b7f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 1 08:26:06 2026 GMT
Not After : Mar 7 08:26:06 2026 GMT
Subject: CN=697f0e22-5fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f4:30:47:67:a5:48:02:28:be:91:d0:34:dc:
4f:74:5a:12:6b:61:6a:4e:34:ef:44:1d:ab:71:09:
af:be:83:26:61:c3:33:68:0f:36:77:c6:8c:03:05:
ed:fe:cc:ec:2d:6d:96:01:01:04:55:78:c1:42:0e:
a7:3f:c2:82:c6:f4:4f:38:75:d5:be:06:19:ec:b5:
f1:3f:d9:89:98:78:c5:18:c9:20:90:9c:ba:b8:e7:
c3:4d:a3:ec:c1:1d:04:b6:0c:aa:53:99:94:77:d4:
7e:38:22:dd:84:36:78:14:1f:73:62:9b:fd:dc:78:
e3:f5:c3:f3:48:85:65:ab:7c:cd:57:f1:3f:b4:e1:
42:4c:77:11:05:66:b7:3d:d5:88:2b:d4:ad:9d:9a:
49:69:83:84:a4:e4:11:e5:91:4b:72:c8:d1:5f:7a:
3b:d1:64:42:8b:51:40:d0:78:5d:eb:33:d6:79:ac:
e7:bc:aa:19:93:24:af:e6:3c:5d:60:00:31:66:4c:
d5:6b:d5:77:15:f0:f4:a7:d6:15:fa:62:0a:05:1d:
86:ed:b2:02:62:e0:98:8e:1c:b2:48:74:8d:a3:b2:
75:80:63:42:37:60:2a:9c:5f:b7:54:eb:da:e9:59:
cb:5c:63:9a:6c:76:09:66:e0:64:2e:1e:66:0f:15:
cd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E5:B7:73:83:75:E6:35:E2:56:08:4E:F3:F5:78:02:5C:15:E7:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A994B1C2FF4711F0B58857AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
6b:ec:a0:ed:bf:0b:05:a1:4f:43:f2:84:9f:89:23:7a:f9:cf:
f5:5b:42:4e:a5:04:e7:7a:c0:70:a3:89:5e:24:13:df:f2:49:
b6:47:dd:f5:72:e7:24:f4:54:cc:ed:c7:82:0a:63:3d:b4:f0:
8e:f4:8e:4a:4b:2a:28:ab:10:7d:07:56:c1:37:77:95:4f:28:
24:1b:83:ac:d7:bc:e0:28:62:b3:49:e9:b2:a7:14:25:56:0e:
3a:8e:b9:b3:b1:76:e5:b6:e8:d3:18:0d:42:86:5e:0e:b2:44:
04:c2:17:ac:36:25:91:0f:6a:e7:7e:b0:e5:6f:5a:62:0e:c3:
64:fd:b8:30:2b:53:d1:20:1a:cc:8b:c6:58:71:9f:42:24:b9:
47:8f:87:16:a4:64:69:cf:b8:17:40:a7:04:7f:8a:8a:a2:34:
87:ae:cf:fd:6a:38:54:ea:5f:7d:f5:0e:93:f0:ef:ad:22:20:
53:7f:37:5d:40:0d:a2:f8:d9:47:c8:cd:1c:68:ae:88:ab:31:
86:5b:b6:d1:5d:c2:8f:57:3e:3b:64:83:07:8f:59:45:bc:83:
8e:cb:05:92:cf:af:3b:73:eb:6c:ef:e1:f1:15:24:e7:43:a9:
b3:dc:ea:a2:a3:9f:11:a4:c4:2c:a7:a8:f7:87:b5:ba:5e:f4:
21:06:ba:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:08:27 2026 by rpki-client