Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3BA02560A5A11F19B742CB4DAE4EC9C.roa
File: B3BA02560A5A11F19B742CB4DAE4EC9C.roa (raw, json)
Hash identifier: yP2/KTg9G1Dcq5AoZi/o4Csz8DVRhqaLnMLeEpEpp8g=
Subject key identifier: 58:4C:76:AB:C3:2F:EC:B7:BC:66:C0:E6:88:F3:A2:5F:A7:08:5E:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B974
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3BA02560A5A11F19B742CB4DAE4EC9C.roa
Signing time: Sun 15 Feb 2026 10:40:11 +0000
ROA not before: Sun 15 Feb 2026 10:40:05 +0000
ROA not after: Thu 26 Mar 2026 10:40:05 +0000
asID: 20326
IP address blocks: 154.202.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113012 (0x1b974)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 15 10:40:05 2026 GMT
Not After : Mar 26 10:40:05 2026 GMT
Subject: CN=6991a28b-570b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e9:96:9b:35:74:88:79:a7:fd:2f:61:77:ee:
2d:ad:23:78:f8:0e:ec:17:87:0a:ea:5d:23:36:cc:
ea:9a:ae:f5:d3:4b:fc:64:4f:05:32:9b:45:1e:07:
56:83:81:c8:63:a3:73:f9:7b:4e:3c:e5:5c:33:5b:
35:e8:84:30:31:56:dc:31:14:7a:3c:75:bb:48:d3:
a3:b0:a6:21:e5:26:46:dd:cd:f5:d9:f7:46:a1:fb:
cb:dc:5b:81:59:68:2b:93:bd:29:7b:b8:80:b1:5d:
80:d0:b3:0d:e8:48:7d:97:b8:e0:26:f6:2a:ef:a9:
10:3f:19:34:25:6e:74:88:b0:a7:68:36:2c:53:57:
b6:3b:c8:4c:62:5c:7c:3a:89:5c:b9:65:94:1c:78:
55:c8:e7:2d:dd:3d:ec:8d:df:43:00:91:3c:5e:01:
c2:e1:08:59:a3:34:39:a7:b6:ba:aa:d4:b2:bb:45:
51:1b:0c:cc:a9:fc:03:54:06:d7:1a:a9:b2:50:ca:
73:54:9b:3e:77:6a:19:3c:29:b1:c0:a1:71:21:6f:
ad:0b:b0:9f:6b:b9:51:2d:d6:4e:db:83:56:15:05:
8d:4b:26:34:83:1f:e3:76:94:81:74:31:75:07:49:
16:d1:61:47:fa:b1:8a:75:cd:8c:15:e5:7d:a0:77:
bc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4C:76:AB:C3:2F:EC:B7:BC:66:C0:E6:88:F3:A2:5F:A7:08:5E:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3BA02560A5A11F19B742CB4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.160.0/19
Signature Algorithm: sha256WithRSAEncryption
85:46:7a:b0:c3:43:4b:cf:c6:58:8f:58:eb:f4:6d:19:25:54:
d6:82:9e:3c:59:c3:79:d8:94:1b:61:6d:3b:d4:f4:70:88:59:
5e:cf:e1:18:04:cd:33:63:c5:ff:d8:46:9a:38:42:89:33:b8:
e8:5d:39:75:32:f0:f0:1d:f7:0c:83:c8:dd:7e:84:bf:f1:62:
dd:a1:fd:95:cd:2a:14:1e:41:30:55:37:e7:f4:f3:11:92:29:
00:a2:15:c2:98:10:e9:c6:60:74:57:1e:34:b9:33:b1:88:a5:
16:a7:cb:ec:32:0d:3c:c8:30:cd:09:b9:23:8d:08:60:89:39:
fc:63:0c:b1:4d:e9:bc:28:3b:a7:63:c6:1f:30:c0:ec:f4:59:
f7:ce:9e:98:29:74:b2:af:92:69:0b:c0:8b:20:91:d4:a5:35:
ce:80:44:c5:08:6c:72:6d:cc:32:a6:7d:4c:88:b6:e2:96:16:
76:52:6a:45:f1:ac:eb:7c:d9:10:cb:1a:27:0d:ae:c9:68:29:
fa:c7:a0:d2:c7:b4:94:a5:c5:08:a8:b8:78:88:30:49:bb:58:
f5:b4:80:da:a3:1b:ad:26:76:0c:05:e6:0d:f8:ce:49:b7:8f:
57:5c:e6:0b:fc:52:ee:a3:67:82:84:1c:45:83:7e:79:f9:04:
6c:a3:23:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:44:11 2026 by rpki-client