Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C073FCF2158311F1AC9935BDDAE4EC9C.roa
File: C073FCF2158311F1AC9935BDDAE4EC9C.roa (raw, json)
Hash identifier: 9kiIWodMkVn5jN4GfecSLDt3CG5j8QUaF4BFaOwQzTQ=
Subject key identifier: E4:75:7C:ED:2F:BD:58:2C:4D:D3:32:8A:B0:92:B1:60:C1:41:5C:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC9A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C073FCF2158311F1AC9935BDDAE4EC9C.roa
Signing time: Sun 01 Mar 2026 15:31:44 +0000
ROA not before: Sun 01 Mar 2026 15:31:40 +0000
ROA not after: Sun 14 Jun 2026 15:31:40 +0000
asID: 21859
IP address blocks: 154.194.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113818 (0x1bc9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 15:31:40 2026 GMT
Not After : Jun 14 15:31:40 2026 GMT
Subject: CN=69a45be0-c9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5f:77:02:e3:ef:a1:fa:b9:46:4e:3f:1c:c4:
f1:99:db:4a:a0:e6:03:1b:c8:02:3d:e8:06:29:d7:
92:c0:b2:83:0b:3b:a0:6b:ad:b7:8d:03:d3:81:c6:
25:2b:99:b1:ee:e1:be:72:a7:a9:2a:ee:ae:09:f2:
a9:f9:8a:ae:a2:65:b6:2c:00:15:fd:f3:18:ad:09:
0f:1e:c7:a7:44:5e:dd:cf:71:06:44:95:3e:2c:9b:
b2:cb:c8:5c:8f:97:3b:bd:f1:90:04:03:97:a2:18:
96:0f:45:4b:a4:91:b5:89:5d:a1:ad:0c:ba:d2:e5:
e7:59:c7:6b:41:0a:b5:cf:d5:72:eb:a6:64:c7:2e:
bd:0d:dc:66:1e:07:4f:dc:1f:4f:fd:64:be:a1:8d:
ee:96:cc:6b:81:5c:24:76:16:b5:bf:3f:7c:39:82:
1d:6f:67:5f:f6:37:b3:23:73:81:4e:82:6a:e4:b5:
41:0d:5a:1a:a5:f1:3a:24:da:6a:de:c5:80:b5:ef:
34:d9:4e:c2:90:00:64:36:98:40:32:23:25:da:b2:
85:68:ff:be:3b:5c:23:4b:f5:e1:ea:88:78:a9:43:
40:08:b0:ab:b0:c7:f2:94:f2:34:69:91:b8:47:3d:
72:05:58:57:d6:73:ed:84:e1:f4:f8:bc:fe:97:aa:
ba:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:75:7C:ED:2F:BD:58:2C:4D:D3:32:8A:B0:92:B1:60:C1:41:5C:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C073FCF2158311F1AC9935BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.56.0/24
Signature Algorithm: sha256WithRSAEncryption
58:05:ce:9a:f5:d1:5f:55:80:cf:6d:e3:30:33:eb:13:61:4f:
0b:ae:b3:ec:8c:7e:b2:25:18:0a:19:b9:06:4a:53:2e:91:47:
39:ab:96:e7:de:6b:6a:1a:b2:03:39:10:5a:cc:d4:db:65:26:
72:e7:cf:93:67:2b:4d:f8:1b:97:45:f2:5d:e6:dc:86:1b:63:
db:a2:4e:6a:c6:b1:bb:ea:49:a2:13:7d:cd:c7:c0:f0:c6:d8:
31:82:84:b7:4a:2a:2b:8c:f2:63:77:43:c5:f6:97:64:66:be:
2a:a9:8e:32:f0:f8:4f:84:9c:33:8f:51:f7:8a:99:8c:0c:31:
bf:7d:17:63:2b:2c:0e:5f:5a:e2:b4:c4:72:4f:31:10:56:fc:
40:54:32:45:96:f2:12:0d:e1:29:dc:1b:05:cd:13:a1:ed:0f:
2f:10:d6:70:bf:57:d4:a4:cf:ff:43:8a:eb:37:6b:de:7a:39:
e2:bc:1f:b6:f3:10:b8:d6:03:87:c3:f7:82:ea:96:fe:80:d1:
88:cb:51:cb:bc:17:38:5e:21:3c:f0:cb:1e:02:48:f7:f2:06:
c1:c7:e3:3a:8c:54:cf:7b:5c:c9:e4:51:37:d2:27:25:b3:04:
c6:5f:bd:d1:53:3b:42:4c:9e:54:a6:e2:44:c8:11:d5:b6:e7:
0a:c4:69:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:18:58 2026 by rpki-client