Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B191BB42123211F1964B40EADAE4EC9C.roa
File: B191BB42123211F1964B40EADAE4EC9C.roa (raw, json)
Hash identifier: 7vAqyAmWS7CrWtEbe6ztpE6gqq7cBrjFZBfhsh2oLK8=
Subject key identifier: E7:71:AD:75:10:EB:03:80:22:34:55:77:51:61:C6:C6:D6:92:D0:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BBA9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B191BB42123211F1964B40EADAE4EC9C.roa
Signing time: Wed 25 Feb 2026 10:13:56 +0000
ROA not before: Wed 25 Feb 2026 10:13:52 +0000
ROA not after: Sat 18 Apr 2026 10:13:52 +0000
asID: 20326
IP address blocks: 154.193.130.0/24 maxlen: 24
154.193.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113577 (0x1bba9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 10:13:52 2026 GMT
Not After : Apr 18 10:13:52 2026 GMT
Subject: CN=699ecb64-78a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:38:ae:a4:51:53:e3:af:d2:0e:8d:9e:a5:3b:
ef:62:7a:8f:82:79:8f:4a:4c:fd:10:23:c3:5d:87:
22:9b:cb:6a:f1:f9:5b:cb:be:41:e2:dd:d7:03:0a:
ea:c1:65:a9:bc:00:5e:d2:e8:ca:9f:61:53:8b:3f:
94:ec:74:d4:ae:4b:2c:25:0d:cd:fb:7d:7f:cb:94:
5c:f0:61:aa:97:52:5d:63:e2:b8:b2:46:94:00:00:
54:49:6f:66:f6:9b:a9:10:3a:4f:78:17:71:57:de:
03:f9:68:46:0d:be:67:12:0c:d7:26:31:1a:25:71:
0c:b5:55:db:20:b3:b5:9c:f7:a3:f7:9c:c7:98:67:
7c:5d:1c:c8:b1:0b:df:49:9d:18:e2:0b:01:58:cb:
28:f3:74:cf:48:08:17:c6:ba:0e:ae:dc:ee:44:f3:
4a:ff:a0:e6:0c:e5:88:5e:b4:64:31:2a:02:ea:78:
10:82:26:9a:a0:22:9a:0e:77:f3:6a:72:fa:83:8f:
92:d5:00:be:60:f7:c8:96:fb:50:95:95:b7:57:d1:
33:76:98:6e:3b:29:ee:85:4f:57:55:20:46:18:18:
e6:8c:97:c8:2d:fb:83:df:2a:e4:58:78:99:31:61:
bc:8b:96:ab:73:96:61:b4:a4:31:09:4b:a4:0d:6a:
b3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:71:AD:75:10:EB:03:80:22:34:55:77:51:61:C6:C6:D6:92:D0:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B191BB42123211F1964B40EADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.130.0/24
154.193.163.0/24
Signature Algorithm: sha256WithRSAEncryption
81:b7:90:6d:fb:f7:b8:85:67:16:98:14:18:71:6f:ec:5d:2c:
f4:15:cd:8b:be:7e:14:7c:13:6c:96:a1:08:4f:21:2e:a7:2d:
c5:a9:45:c7:1b:bd:fc:1c:60:2f:5c:2d:d2:5a:1f:57:00:13:
ce:66:be:52:5d:58:93:14:9f:03:2e:ae:59:40:8e:1b:2c:fd:
e0:09:cb:f3:b7:db:cf:1c:34:b6:52:ae:9f:77:f0:d7:7b:9f:
34:4e:66:fe:ad:5e:b2:32:14:ab:a4:ed:03:59:8c:30:59:a0:
fc:1e:a3:4e:58:24:df:ac:92:87:fe:58:4d:d1:18:c8:d4:64:
47:59:61:91:b9:5e:6d:17:2f:cc:1f:22:84:2f:e6:f4:dd:b4:
d9:dc:23:a8:ae:60:28:e8:78:95:f0:9c:bc:23:ea:e2:af:3c:
4b:d3:6e:81:bd:8c:5d:33:11:c2:90:f3:b2:5f:15:39:41:2e:
67:f5:4c:b1:f4:d6:0b:cf:04:55:ee:b2:5c:e4:92:5c:a8:b2:
f8:14:e7:e2:6d:d1:a0:bb:d5:6d:b4:cb:52:3b:b6:ee:d9:a9:
c4:36:67:0c:90:52:44:de:8a:17:04:94:f1:46:bd:e1:28:28:
7e:2a:f1:94:e6:dc:81:a7:63:46:03:5b:81:24:fd:c1:51:14:
0f:2a:cd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:25:54 2026 by rpki-client