Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C83C80CE122E11F1B9D165D5DAE4EC9C.roa
File: C83C80CE122E11F1B9D165D5DAE4EC9C.roa (raw, json)
Hash identifier: 0ooinHg6xLZwLhQNf6U45/jxBAXqyPMOF3x3rUDZqho=
Subject key identifier: 6D:FF:90:18:74:B4:34:FF:AB:DC:57:91:ED:D7:84:AB:9A:94:52:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BBA5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C83C80CE122E11F1B9D165D5DAE4EC9C.roa
Signing time: Wed 25 Feb 2026 09:45:56 +0000
ROA not before: Wed 25 Feb 2026 09:45:52 +0000
ROA not after: Wed 01 Apr 2026 09:45:52 +0000
asID: 49505
IP address blocks: 154.223.204.0/24 maxlen: 24
154.223.205.0/24 maxlen: 24
154.223.206.0/24 maxlen: 24
154.223.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113573 (0x1bba5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 09:45:52 2026 GMT
Not After : Apr 1 09:45:52 2026 GMT
Subject: CN=699ec4d4-dc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:79:b5:6b:62:04:fa:6b:d8:3f:29:9d:91:6e:
e3:c2:61:fe:1b:a4:6a:37:a6:bd:d1:ac:76:89:b6:
8e:a2:1c:e7:43:87:f5:35:9e:47:e6:94:ac:44:ca:
06:da:5b:67:15:a3:97:80:45:92:d4:70:94:e3:7b:
8e:e6:16:e9:de:33:9d:a8:c4:9f:74:db:00:35:6e:
cd:d4:b3:8e:6d:82:2e:f7:82:19:81:1a:93:95:a8:
af:6c:36:77:bb:53:76:77:3b:3b:78:34:95:8c:39:
e6:c0:74:b6:0e:fa:4b:50:50:ef:b4:1e:cf:d7:b3:
e0:99:bb:f9:cd:8e:ae:36:47:b4:f9:4f:3c:49:37:
5c:05:03:b9:69:e6:fe:d1:f9:40:94:84:65:eb:15:
2b:c4:a9:2a:e5:88:44:fe:f6:3b:2a:86:9c:e6:7b:
d9:ef:39:37:75:8b:36:f4:da:80:fc:19:58:cd:40:
76:ad:d4:83:38:17:48:25:42:4e:38:d5:db:c4:ee:
11:ca:d3:72:e1:71:7c:94:fc:ec:c0:b1:d2:f5:b9:
0a:f9:e1:3f:a2:a1:b4:2e:8e:d6:d0:db:f9:c4:83:
50:82:56:ea:16:f7:24:86:6b:3b:ad:a3:1f:55:bb:
76:3a:52:47:34:62:ec:a5:96:08:a9:14:38:f7:47:
bd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FF:90:18:74:B4:34:FF:AB:DC:57:91:ED:D7:84:AB:9A:94:52:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C83C80CE122E11F1B9D165D5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.204.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:5a:96:aa:dd:ad:be:58:6b:60:35:78:7f:a0:d3:0a:b8:50:
fb:6a:f5:79:7f:06:f2:9a:ac:a8:98:08:a7:f9:6f:d7:22:94:
99:1b:8a:19:92:1b:6f:22:e7:ba:d5:e0:ed:10:ed:6e:51:97:
91:d6:cd:f8:82:5e:d3:a2:ee:2b:9e:9b:7d:ca:00:8d:fb:62:
a1:95:ed:68:cd:2c:c4:72:74:7a:7c:34:39:d1:df:8e:7f:4d:
5f:e3:7b:74:ff:b9:01:13:af:bd:11:ac:11:e5:a8:23:bb:31:
8f:e4:ff:2d:f7:13:8a:b0:27:e8:d3:29:f7:9f:5b:f4:6f:dc:
e0:70:09:d5:65:eb:be:f8:af:be:89:bc:9a:4f:d1:0c:03:f3:
6f:d5:38:cf:aa:36:b4:35:8b:5b:67:c2:9d:7d:3b:77:2b:76:
e2:50:61:63:af:7f:b5:b5:86:f4:81:0d:2c:d9:4a:29:f1:40:
e9:79:07:b4:f4:55:16:3e:e4:28:a2:02:0e:c1:2b:91:f2:01:
18:e5:76:ff:c2:8a:89:4f:9c:a8:46:95:3a:52:22:14:80:86:
0b:20:56:ec:ed:0b:b9:5c:5a:fe:a6:c5:28:2f:c7:15:15:ae:
d2:4c:33:2b:26:bb:b2:28:be:29:42:24:ab:09:10:99:e1:3b:
4e:17:27:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:59:38 2026 by rpki-client