Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D11BAC68FC3C11F0B31C49F3DAE4EC9C.roa
File: D11BAC68FC3C11F0B31C49F3DAE4EC9C.roa (raw, json)
Hash identifier: UqEWf+Nl0iD0jl2rSVdgvhPVhIHrdCuVxobTjqGeUxs=
Subject key identifier: F9:0D:29:FB:A5:E8:9F:A4:B7:61:7D:2C:5E:03:30:32:25:4A:DE:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B71D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D11BAC68FC3C11F0B31C49F3DAE4EC9C.roa
Signing time: Wed 28 Jan 2026 11:30:59 +0000
ROA not before: Wed 28 Jan 2026 11:30:53 +0000
ROA not after: Sun 08 Mar 2026 11:30:53 +0000
asID: 15221
IP address blocks: 154.198.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112413 (0x1b71d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 11:30:53 2026 GMT
Not After : Mar 8 11:30:53 2026 GMT
Subject: CN=6979f373-3f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:93:04:e2:25:28:29:d2:92:e8:f9:0a:2a:da:
66:cd:4c:a4:3e:30:c3:f5:45:b2:4a:16:c1:f5:59:
e9:e5:bb:bb:ec:58:68:67:e2:92:f7:1c:40:38:ce:
2a:a4:f6:63:7f:90:c9:77:d8:e9:73:9d:2a:0b:e6:
4a:42:c1:ca:d1:e0:2d:ab:3c:b0:ba:97:0c:2e:7f:
b4:71:68:91:1a:b1:44:d4:ce:50:be:91:09:06:7e:
d7:e6:1f:8f:01:50:ff:13:13:6b:75:57:23:4e:84:
2e:ce:d0:76:c8:20:e2:ac:ce:79:2c:18:bb:fd:fd:
76:fd:13:6c:b7:ff:8b:ba:30:ae:94:cd:88:96:79:
99:fe:1a:58:2e:32:2d:25:ff:86:e7:de:02:ea:9b:
ef:bc:0a:ef:5a:48:0e:eb:46:b5:e7:b5:e1:06:cb:
15:a0:59:0a:7f:2c:21:b7:97:50:73:c2:2b:2a:db:
4b:da:f5:25:e4:36:ef:eb:e3:25:19:bc:34:49:dd:
4f:24:59:9a:6d:a9:ad:e7:66:fd:11:72:ab:25:09:
89:ec:71:b4:67:f8:02:9d:a0:3d:73:53:a4:54:99:
85:0f:8f:b3:b9:1d:c8:e1:92:c0:f6:91:33:83:97:
20:2c:2f:9d:ae:f7:d2:0f:4b:df:22:34:39:18:06:
f7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0D:29:FB:A5:E8:9F:A4:B7:61:7D:2C:5E:03:30:32:25:4A:DE:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D11BAC68FC3C11F0B31C49F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.32.0/22
Signature Algorithm: sha256WithRSAEncryption
44:bf:82:4f:36:38:73:3a:43:d3:f3:68:3d:eb:11:e6:16:83:
4b:32:60:61:16:70:c0:ea:36:9c:63:0b:c2:db:15:6d:cb:07:
2a:a6:fa:28:6e:b1:12:e0:bf:59:bf:35:1d:51:6c:c7:ea:72:
98:9e:ba:c9:ad:ad:d2:17:c1:17:82:a1:82:a0:3c:e5:b7:da:
25:73:12:68:61:cd:9c:65:b7:e3:fb:dd:84:c9:aa:89:71:f6:
ff:dd:d2:1e:11:36:3a:85:c2:15:12:bb:be:0c:65:99:71:0c:
87:dd:63:09:0a:1a:f4:ae:44:bf:ec:70:b3:ab:48:e3:d0:30:
0c:55:42:e1:c3:ba:4a:3c:46:ea:3a:b2:b7:f0:0b:26:b1:de:
15:03:81:44:4f:33:b1:3f:94:b7:ec:27:af:00:77:48:3a:39:
39:a3:8f:77:e9:5c:45:c8:c1:31:8d:92:23:cd:92:b1:d3:75:
6d:3f:d8:fd:e0:23:9d:c0:49:24:8c:b5:e4:de:60:80:9a:4e:
40:42:8f:ee:82:51:ff:01:45:67:d1:e3:9f:16:c3:b8:3a:eb:
c0:42:4d:9e:06:52:c0:3d:70:47:7c:bf:27:d1:5e:29:cc:35:
50:29:93:a1:00:ed:1e:6a:d9:96:56:20:6c:39:19:aa:68:26:
a4:14:7a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:41:49 2026 by rpki-client