Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE2D3492114D11F1BFEDD7EFDAE4EC9C.roa
File: CE2D3492114D11F1BFEDD7EFDAE4EC9C.roa (raw, json)
Hash identifier: 5FfRYltY9AYJ5xTzwWeUszPCVeZiPQYJuyf84LDQGJ4=
Subject key identifier: 2A:44:4F:40:5D:F0:57:00:67:38:A3:80:C4:F5:C1:FE:3A:3F:79:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB1E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE2D3492114D11F1BFEDD7EFDAE4EC9C.roa
Signing time: Tue 24 Feb 2026 06:55:29 +0000
ROA not before: Tue 24 Feb 2026 06:55:24 +0000
ROA not after: Sat 28 Mar 2026 06:55:24 +0000
asID: 52263
IP address blocks: 154.194.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113438 (0x1bb1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 06:55:24 2026 GMT
Not After : Mar 28 06:55:24 2026 GMT
Subject: CN=699d4b61-952b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:26:9b:80:43:ce:37:39:6c:77:5d:96:28:35:
1d:c8:43:b1:00:bf:b3:4e:fb:62:ed:12:bf:1c:79:
03:3d:86:36:d3:4a:70:7f:28:fb:54:ee:b1:59:a4:
29:a1:90:d5:db:8f:01:d3:b9:7f:94:52:a5:58:1b:
ad:ef:95:25:3e:9e:67:01:26:f5:75:ca:a1:dc:c0:
80:8c:29:e7:0e:d1:b6:c0:fe:be:e9:de:f0:e2:a9:
b5:8a:41:3f:02:e6:20:13:22:44:e5:ef:44:b9:6f:
f8:c8:8f:17:52:be:7e:cd:c9:a4:6c:bf:56:2c:59:
5d:0f:1a:9c:c3:08:d2:6b:31:35:e1:95:c3:73:10:
ed:49:86:bf:a1:30:7e:b6:db:cb:0d:b5:09:20:33:
96:a8:d7:0a:28:6e:4a:c6:18:d7:22:81:b9:48:83:
10:a5:9c:a8:5f:95:9a:68:30:b8:e9:3a:45:6e:57:
0a:d2:fd:a1:5f:6f:76:52:46:74:6e:f3:93:8f:f9:
7c:90:7e:74:6f:9c:25:27:0a:9d:a5:38:df:34:c8:
fe:f2:96:7d:86:4f:fe:b0:f9:f5:55:89:b1:cc:b9:
d4:17:98:aa:dd:1c:37:d0:14:2e:7b:53:81:ec:24:
87:4d:4e:f6:89:39:2b:a2:5a:8d:75:17:48:a9:54:
9f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:44:4F:40:5D:F0:57:00:67:38:A3:80:C4:F5:C1:FE:3A:3F:79:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE2D3492114D11F1BFEDD7EFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.69.0/24
Signature Algorithm: sha256WithRSAEncryption
be:92:69:d6:ef:a8:3e:22:c8:2e:80:53:73:16:a2:9d:a5:05:
be:05:2c:f8:f7:91:b1:dc:97:55:96:7d:fc:6f:d7:48:fa:26:
db:df:d4:58:8a:16:05:89:09:c3:5f:96:51:de:8c:7a:c3:48:
98:a5:07:c2:32:20:bc:c9:fd:cb:7c:62:93:e0:23:54:91:90:
e3:fc:72:5f:18:1d:07:99:bd:59:c6:26:0e:eb:1b:1e:8c:3e:
e4:50:64:c8:6e:59:27:85:a9:98:32:a9:8a:9b:c4:65:64:f9:
2e:e1:20:03:5a:27:5e:af:28:15:dc:d2:36:60:2c:fb:10:28:
6d:53:af:4f:42:d1:f9:f9:af:92:72:bc:73:1e:7e:d9:cb:1d:
4e:ae:85:4f:bf:1f:9c:57:bb:49:00:24:c6:32:ea:04:77:aa:
3a:b0:7f:2e:d4:24:70:f5:c0:20:1e:40:8e:de:72:da:de:fe:
dc:d8:0a:0b:e4:72:67:e4:a4:99:20:80:a8:23:e6:53:d7:8e:
4e:36:60:12:b7:f8:3b:ed:b9:05:11:a6:ce:3d:84:aa:92:30:
e4:2c:49:e1:f3:11:1e:d1:c9:1d:af:b3:d5:85:9d:d0:cc:ba:
1d:5a:0d:73:96:aa:5c:5d:c0:02:26:25:b1:1d:24:73:59:4a:
1f:71:2c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:06 2026 by rpki-client