Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D09A355CFC1E11F0A11EA5BEDAE4EC9C.roa
File: D09A355CFC1E11F0A11EA5BEDAE4EC9C.roa (raw, json)
Hash identifier: GkYwYQ7qSf78zUONsXTwbD9VdcZWrMD7dwR0aT/6nrQ=
Subject key identifier: E4:2F:CF:2E:F8:91:F2:34:98:47:5E:49:50:4F:5E:3C:3B:72:23:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B6FF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D09A355CFC1E11F0A11EA5BEDAE4EC9C.roa
Signing time: Wed 28 Jan 2026 07:56:13 +0000
ROA not before: Wed 28 Jan 2026 07:56:08 +0000
ROA not after: Mon 02 Mar 2026 07:56:08 +0000
asID: 401783
IP address blocks: 154.200.131.0/24 maxlen: 24
154.200.160.0/24 maxlen: 24
154.200.161.0/24 maxlen: 24
154.200.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 02 Mar 2026 07:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112383 (0x1b6ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 07:56:08 2026 GMT
Not After : Mar 2 07:56:08 2026 GMT
Subject: CN=6979c11d-c4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:76:bb:d3:3c:da:51:bc:9d:be:db:61:d1:b6:
b0:c8:81:c1:4b:4a:f3:f5:5c:50:d3:d9:bc:5f:c5:
4f:d1:ae:bc:a2:ac:fe:8c:7c:89:8c:37:68:ec:d2:
d8:25:e8:54:8c:e5:bd:d7:7b:fd:4d:40:01:07:7a:
26:cb:a4:a9:f8:82:7d:d2:27:be:0b:35:0e:0e:e9:
90:e3:be:7b:80:cd:a7:b8:40:7c:83:78:34:33:f8:
73:50:e9:58:40:21:f7:1e:ec:6e:5a:a6:ed:9f:9c:
94:0f:cc:0d:cd:f8:23:91:52:e2:23:23:49:c2:cc:
bb:53:f8:ea:e9:00:0b:5d:2f:b0:52:8e:2a:31:ba:
14:b6:77:12:79:cb:7b:30:2a:9e:86:14:cf:dc:c9:
c6:3e:71:bf:db:4f:c5:15:fc:8e:d2:b9:7d:31:7e:
cd:25:56:e3:8e:08:21:3b:fc:d7:00:2a:cb:ed:43:
91:47:83:03:d3:a1:d5:79:49:16:b9:6a:8d:cc:42:
2e:b5:f2:8d:f4:94:20:d0:5e:2a:bf:be:f5:09:74:
3b:af:23:17:f7:67:ac:ad:3d:82:9d:17:5e:3b:e1:
6b:11:18:a5:c1:0f:db:f0:01:27:be:bc:31:40:48:
78:64:f8:35:b2:7d:be:bc:48:44:b7:dc:bf:ec:0a:
9b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2F:CF:2E:F8:91:F2:34:98:47:5E:49:50:4F:5E:3C:3B:72:23:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D09A355CFC1E11F0A11EA5BEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.131.0/24
154.200.160.0-154.200.162.255
Signature Algorithm: sha256WithRSAEncryption
83:4e:98:8a:0b:65:dc:43:48:35:68:cb:67:6d:8d:0a:ce:b4:
78:20:64:46:b6:b3:6b:75:91:ce:e3:e7:42:9a:0d:b4:b6:f6:
23:5c:50:f9:3d:d5:74:3d:54:ab:ce:8b:41:5f:b8:01:5a:26:
ea:10:9e:75:b4:c8:24:a4:04:4f:f6:a9:5f:7f:ac:a4:90:50:
6f:d4:e3:c9:0e:df:e9:5d:08:7c:ac:36:79:cb:b6:a9:b3:d9:
8c:b9:01:b2:b4:d4:f2:d2:5e:f3:c7:3c:e1:a9:9f:25:66:7a:
21:9d:2e:60:da:c1:60:2d:f6:bb:10:45:b8:d8:73:b3:8c:87:
3f:16:39:27:40:d7:54:26:3b:86:d2:1d:05:01:9f:ae:c9:e0:
e5:23:86:b5:7c:2e:e2:27:ee:19:a0:0c:5f:6d:2f:15:72:63:
75:ce:16:67:d7:bb:d0:23:9c:3c:36:3e:94:c1:0e:d1:f0:67:
f0:2e:9f:5b:cb:09:e7:58:bd:16:fa:c0:28:a0:7b:3e:a7:ed:
73:ad:01:40:e2:ea:a9:48:f9:6a:19:0d:da:89:60:4d:48:d2:
1b:34:19:e6:54:35:57:2a:16:a7:5a:40:39:a9:4d:29:76:a1:
3d:f4:2d:08:c0:6f:65:14:03:29:78:5e:51:85:66:a7:35:a3:
55:8b:ab:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:08:27 2026 by rpki-client