Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C215EA36033411F1A6E5C7CBDAE4EC9C.roa
File: C215EA36033411F1A6E5C7CBDAE4EC9C.roa (raw, json)
Hash identifier: XH9uPiwX71G0hjyV7Q36tOGEY4txvEuyLDvtKk95GTs=
Subject key identifier: 9F:62:21:94:5A:DF:7E:CE:2A:47:ED:A4:A3:D1:25:30:98:7B:6A:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B8B6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C215EA36033411F1A6E5C7CBDAE4EC9C.roa
Signing time: Fri 06 Feb 2026 08:20:56 +0000
ROA not before: Fri 06 Feb 2026 08:20:51 +0000
ROA not after: Thu 12 Mar 2026 08:20:51 +0000
asID: 20326
IP address blocks: 154.84.168.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112822 (0x1b8b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 6 08:20:51 2026 GMT
Not After : Mar 12 08:20:51 2026 GMT
Subject: CN=6985a468-6426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:6f:0f:02:8e:aa:31:6f:8d:0a:45:22:ef:
3c:3b:50:27:1c:f1:cd:39:2a:25:d8:ab:64:aa:71:
9a:e2:e6:95:bf:be:1c:e7:46:f6:0b:5f:37:c9:d8:
89:79:a3:8d:d7:51:4f:e2:e2:33:c1:58:63:f6:76:
3f:2a:9e:4b:82:f1:9d:2a:57:b7:4b:f0:df:af:39:
82:28:24:fa:1f:b0:9d:f7:e1:a3:f3:7b:62:e7:8a:
70:35:95:a0:2a:34:59:61:3b:14:64:ed:79:aa:17:
66:1c:73:3c:e7:5c:8b:11:6b:24:5d:49:8e:a0:b9:
85:f2:85:e8:bb:05:c1:42:bc:18:24:44:c1:2f:89:
a7:5a:5e:ed:f8:6d:5a:ba:3e:e8:0f:ad:d3:7d:40:
3f:e1:5d:32:c6:34:3c:54:62:37:f3:f3:59:a0:94:
49:7b:9b:08:52:63:92:cc:42:4e:df:e1:49:d3:32:
f7:8e:38:53:33:0d:b1:81:b2:3f:67:12:0f:f2:5d:
d4:e4:86:73:34:30:51:43:36:a8:91:86:9d:30:4f:
cf:0c:ef:2f:95:3f:8a:67:92:84:b4:9f:b4:d1:71:
f6:cb:e9:20:24:0b:da:82:ba:6b:47:1a:dd:b7:59:
3d:48:e0:98:d0:47:aa:dd:a1:14:1f:ed:71:78:e4:
78:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:62:21:94:5A:DF:7E:CE:2A:47:ED:A4:A3:D1:25:30:98:7B:6A:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C215EA36033411F1A6E5C7CBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.168.0/21
Signature Algorithm: sha256WithRSAEncryption
1c:7e:fd:8d:fd:9b:4d:eb:8e:1e:44:25:ee:14:87:46:57:e9:
09:de:80:b4:71:e7:e1:bf:a9:97:6d:03:77:69:69:f2:9c:36:
48:f5:78:50:7c:d9:a5:f8:2d:a9:63:de:9a:48:af:d4:92:a1:
ec:83:b7:82:ba:9e:19:27:67:dd:34:44:5d:c0:5d:cd:6f:30:
54:9f:1e:13:f2:d3:dd:92:e1:3e:69:83:23:a4:a1:74:ef:9a:
39:10:e5:e6:d7:69:83:a6:7e:74:7b:a1:7d:db:63:98:ef:7f:
0e:da:b7:2d:1e:84:1f:60:66:ab:5d:ce:59:38:08:aa:98:fc:
1e:81:30:01:1e:38:f4:2b:d0:9f:3a:fa:d5:d1:ec:f3:0b:fa:
8b:b7:40:11:88:5c:e2:79:5c:a0:2f:cb:e5:59:3d:cc:db:e5:
62:55:4f:24:9d:51:33:96:de:e4:7d:62:83:34:c6:12:8a:54:
3f:93:5a:ff:96:3d:69:37:5f:60:91:6c:54:d6:0e:f4:04:93:
23:37:be:73:f6:ae:6a:08:9a:0c:d9:80:41:1a:e4:64:09:6e:
6e:a8:15:71:2a:ff:08:2a:9f:d6:03:7d:de:d6:4e:34:3c:9f:
97:94:a4:ca:32:d5:d8:b1:5b:1d:3e:4b:66:1d:8f:0c:28:fd:
85:2c:25:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:24:46 2026 by rpki-client