Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6D3501213B011F18010E795DAE4EC9C.roa
File: D6D3501213B011F18010E795DAE4EC9C.roa (raw, json)
Hash identifier: WtbTlK9kWarlCI9lSsT8tXId/OBdw7mextGDRbZcetQ=
Subject key identifier: 74:FB:3D:DC:7D:75:23:F2:BD:61:A8:2B:01:D6:62:EA:0F:75:E4:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC28
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6D3501213B011F18010E795DAE4EC9C.roa
Signing time: Fri 27 Feb 2026 07:49:26 +0000
ROA not before: Fri 27 Feb 2026 07:49:22 +0000
ROA not after: Sun 17 May 2026 07:49:22 +0000
asID: 140925
IP address blocks: 154.89.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113704 (0x1bc28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 07:49:22 2026 GMT
Not After : May 17 07:49:22 2026 GMT
Subject: CN=69a14c86-3b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b7:c5:cf:57:dc:2b:81:03:cd:73:29:e3:17:
ce:af:69:9b:d1:29:ba:23:e1:ec:2a:35:ff:5e:c1:
29:b6:55:73:a7:a3:a3:3b:af:b4:6b:f5:5c:0c:c9:
cf:10:a2:8f:b4:0b:d4:0b:aa:1e:06:91:02:2d:70:
f8:9e:3d:18:7e:f4:8a:dd:5e:9c:bc:aa:9e:f1:c9:
34:fe:3e:03:90:e0:79:04:3f:7a:7b:7e:7e:c3:c8:
26:91:a2:f7:0d:91:bb:57:a4:31:eb:84:e0:92:c0:
51:7d:a5:c2:1a:d8:2c:1a:cb:e5:ea:63:68:62:0c:
2d:3c:01:63:77:92:4e:c2:21:3b:fc:bc:5c:a3:fd:
ac:eb:07:88:ab:10:7a:d4:ec:a9:bb:07:b6:1d:ca:
7f:34:60:0d:14:67:f9:39:40:ea:b2:ef:8a:55:aa:
7b:c8:41:48:34:a4:97:90:31:f2:73:a5:a3:b9:e3:
75:98:76:43:06:13:02:67:a1:11:b1:9a:2d:7e:51:
e4:2d:b7:70:39:fb:2e:4e:60:4e:e4:e4:37:20:a6:
d9:17:84:a2:82:69:d2:58:11:89:2c:21:df:2b:37:
39:9a:7c:a4:45:c5:1e:26:07:a6:1a:1f:9f:4d:d0:
dd:02:8d:47:42:79:80:28:91:e5:e3:ce:47:2f:16:
5a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FB:3D:DC:7D:75:23:F2:BD:61:A8:2B:01:D6:62:EA:0F:75:E4:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6D3501213B011F18010E795DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.4.0/24
Signature Algorithm: sha256WithRSAEncryption
60:99:6e:76:a6:6f:8d:56:db:be:74:77:be:a2:2e:86:d2:fe:
af:e2:1e:50:de:c7:8c:4d:26:d7:71:87:51:98:07:6f:2d:23:
f3:4f:9d:e0:a5:4b:74:82:3b:e0:7b:27:73:3d:d4:e4:2a:5b:
c0:a4:1d:dc:23:08:9f:a0:fa:60:f5:9c:e5:93:f0:d5:78:7b:
3a:e0:b6:49:cc:34:3d:ba:31:4e:6b:49:c3:d9:c0:01:df:0a:
da:11:14:85:0d:ab:42:9a:45:ad:15:b5:2f:1e:db:08:56:ec:
0a:5e:ec:44:aa:16:d8:76:11:dc:ba:e8:b3:75:11:0c:f6:f9:
7d:39:4e:d4:28:2d:50:cb:72:b0:f6:c1:65:1c:23:06:f9:df:
5d:4e:1d:25:67:b2:53:a9:55:64:ee:a9:33:c2:e5:0b:83:26:
5d:1e:71:ff:b8:e3:81:74:f5:5a:0f:55:70:b9:e4:4d:ae:04:
ad:d4:e6:42:0f:09:63:72:e8:44:45:bd:ee:a8:6f:b2:ca:26:
a0:38:f9:be:04:d6:89:48:c0:20:19:24:23:8e:81:ad:f0:84:
01:19:c1:2b:69:b7:7d:ce:09:0b:5f:df:7b:f0:eb:b9:e8:2a:
4b:90:c2:4e:b7:7b:2c:60:98:eb:4f:8f:ed:a7:b6:02:69:7e:
5c:47:0f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:45:55 2026 by rpki-client