Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C82E20160D7811F1B01E62DDDAE4EC9C.roa
File: C82E20160D7811F1B01E62DDDAE4EC9C.roa (raw, json)
Hash identifier: N6vUA8S8UfgQ/yxbZ3oJMeRz//82mOTLEzlgQEoFnX0=
Subject key identifier: 55:88:FB:DA:17:17:EC:3B:2F:FF:39:BD:2E:31:63:CF:35:52:B3:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA2B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C82E20160D7811F1B01E62DDDAE4EC9C.roa
Signing time: Thu 19 Feb 2026 09:53:04 +0000
ROA not before: Thu 19 Feb 2026 09:52:58 +0000
ROA not after: Fri 27 Mar 2026 09:52:58 +0000
asID: 147176
IP address blocks: 154.83.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113195 (0x1ba2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 19 09:52:58 2026 GMT
Not After : Mar 27 09:52:58 2026 GMT
Subject: CN=6996dd7f-5ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:aa:91:90:98:d1:dd:47:4f:34:b7:0e:fb:9f:
93:18:63:bb:a7:e4:7f:25:31:25:a1:ad:e8:26:63:
07:22:b2:ef:e7:46:db:0d:19:e1:70:cb:1f:70:bb:
59:c4:9b:8e:2e:a6:21:01:f2:13:ef:e5:2a:b0:e8:
73:fa:c2:36:8f:22:1c:94:00:b4:b1:ac:c4:73:91:
90:dd:ec:f3:8b:c1:ef:e2:76:f3:ae:d6:2e:05:7c:
db:72:d9:b8:cd:11:70:7d:e8:18:90:80:05:fb:07:
a6:8c:eb:da:83:44:f1:27:7b:27:ef:70:fb:c2:47:
ff:21:2b:9d:e4:2a:3a:39:88:37:c0:69:22:ea:06:
cf:72:7f:40:6c:3f:9c:92:ed:ac:26:c4:b6:04:41:
51:d8:c6:77:74:22:85:c5:76:a6:03:07:5a:ea:ba:
bd:50:0d:f0:8c:c8:b6:51:aa:c5:5d:76:72:87:04:
0c:dc:fa:50:43:62:e4:bf:f7:30:79:a0:0f:5d:8e:
43:2e:eb:67:b0:ba:24:f4:7a:72:4b:15:7e:ba:fe:
18:44:58:fa:5d:e5:15:67:a5:45:01:96:53:79:4c:
31:8b:e3:b3:db:41:a0:99:54:71:fb:70:5c:c5:05:
60:86:35:4e:6c:ea:22:53:3c:41:f1:96:0d:4a:34:
5e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:88:FB:DA:17:17:EC:3B:2F:FF:39:BD:2E:31:63:CF:35:52:B3:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C82E20160D7811F1B01E62DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.25.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:bf:ed:4c:1a:fc:66:55:00:41:b8:98:05:74:aa:2e:35:c2:
8f:bd:9b:32:57:79:1e:b9:12:83:9e:fa:89:43:c9:e7:d1:43:
87:48:f1:64:33:05:35:1b:f8:28:6a:93:56:0b:e4:47:dc:12:
d7:0c:4a:9d:6a:e1:ab:6e:a5:57:e7:f6:cd:7c:aa:b0:16:38:
42:be:64:70:e1:30:64:81:b9:0e:6a:45:76:9d:04:6d:2a:07:
1a:fa:18:50:20:4a:0b:82:b6:7b:b0:fc:55:0e:35:27:6d:e9:
c3:67:e2:a9:76:57:9e:c5:28:07:0c:b0:21:d1:05:85:7c:07:
b1:fb:59:4a:ae:57:08:35:04:b7:57:f5:ca:33:35:e5:60:28:
af:c0:ea:5c:9d:68:6c:1c:bf:b1:9f:40:f3:3d:7e:4d:70:82:
40:f2:ae:d9:30:b0:ba:91:1d:67:6f:5a:e5:c2:2a:b2:a8:e1:
b7:61:ec:86:e0:74:ec:5a:d4:a4:1f:51:fc:b0:ac:dc:47:f8:
74:c2:a5:65:0e:8a:ff:72:3c:4b:f9:87:19:29:2b:42:1b:0d:
77:99:a4:c9:93:bf:2c:b7:e6:a1:3c:22:cf:89:d7:06:ab:fa:
c1:ae:0d:76:50:e1:29:98:e1:78:db:97:5b:cd:a0:7a:96:cb:
e3:fe:1e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:59:04 2026 by rpki-client