Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9634E44071811F19DB318B5DAE4EC9C.roa
File: D9634E44071811F19DB318B5DAE4EC9C.roa (raw, json)
Hash identifier: 2cAL5zEZWUrfclzIOw9sIGXPOPqPGw2CUxpTrHXslUY=
Subject key identifier: 12:A5:21:48:74:0C:84:7C:BE:62:76:B7:3A:C1:09:97:96:BE:C0:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B920
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9634E44071811F19DB318B5DAE4EC9C.roa
Signing time: Wed 11 Feb 2026 07:11:15 +0000
ROA not before: Wed 11 Feb 2026 07:11:09 +0000
ROA not after: Thu 19 Mar 2026 07:11:09 +0000
asID: 209242
IP address blocks: 154.197.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112928 (0x1b920)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 11 07:11:09 2026 GMT
Not After : Mar 19 07:11:09 2026 GMT
Subject: CN=698c2b92-ca02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:12:d3:43:8a:29:b6:e4:a2:5a:ff:70:40:
21:88:5f:92:18:b7:8e:2d:30:c2:69:93:11:dd:af:
7e:1a:8e:dc:55:9f:a8:e7:72:81:37:f7:bf:01:87:
e1:d9:d7:14:3a:19:52:cc:66:69:e7:6a:f3:20:15:
f8:3d:3d:06:c3:db:79:8f:ee:ca:19:8e:2c:a9:2a:
88:5b:43:ad:c0:ae:52:e7:13:08:cf:92:6b:51:16:
5a:51:28:09:12:ab:24:21:46:28:c0:c9:18:94:21:
c5:28:98:95:23:05:9e:2f:a0:ca:e8:5f:52:1c:87:
73:18:54:b5:02:3c:0a:17:48:a3:30:cb:aa:a0:88:
2c:5f:b6:59:0c:d3:ae:3d:27:9a:9c:b5:8d:3f:6f:
0f:67:93:d5:1a:fe:f6:2c:bf:eb:d0:b7:23:6f:c3:
55:7d:ac:1b:94:67:cc:8d:4b:8b:30:fc:66:5a:e9:
a4:c4:b2:44:6b:fb:7b:d6:6e:fd:c2:15:12:eb:a3:
82:9c:04:90:ea:5f:77:ae:f4:00:5e:24:30:c5:21:
0d:b2:ef:1d:6e:d6:c3:c9:0b:6a:f6:2f:81:2b:bf:
5b:04:ab:10:c3:50:76:d6:7b:0b:fb:6b:88:b4:c0:
7b:84:24:5b:6e:1b:fb:c8:fd:fa:4d:fc:16:64:86:
83:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A5:21:48:74:0C:84:7C:BE:62:76:B7:3A:C1:09:97:96:BE:C0:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9634E44071811F19DB318B5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.75.0/24
Signature Algorithm: sha256WithRSAEncryption
25:e8:29:19:c4:4c:2d:c6:db:6e:bf:d0:f0:3c:ff:92:0d:67:
65:17:94:ed:39:39:9a:08:2f:d2:77:b1:e3:47:da:65:3b:d3:
a1:a8:17:8b:69:76:10:6a:f5:a8:ac:ee:d4:11:25:63:ac:35:
4e:83:d5:87:50:80:a0:58:2b:cb:4a:43:79:9b:87:d0:3d:a2:
a3:cd:93:08:a6:d6:82:2c:0c:88:8c:43:aa:fb:54:b2:89:89:
14:0a:5f:0e:d0:d5:d7:12:42:64:03:ed:6d:44:e4:62:e1:41:
2b:af:c0:a6:cd:f7:f3:cb:13:c3:58:15:5e:17:b9:f0:eb:6c:
18:9f:29:67:38:34:be:4b:75:cb:a2:7f:c8:f0:28:97:83:b2:
11:77:68:63:e8:d3:d0:2b:2d:4c:54:e4:fe:89:10:31:d2:69:
59:65:51:bf:09:83:e4:1a:36:65:e3:27:03:9e:57:3e:3e:f0:
32:bf:1f:40:93:3f:a8:1c:ea:57:15:41:b3:9e:43:35:9d:d8:
5e:03:54:45:73:a2:bc:e6:0f:35:9a:e4:af:ca:1b:2c:56:a2:
4a:52:a1:3c:f2:8c:4a:dc:02:be:c0:e1:bb:bb:33:66:00:99:
ed:ad:5f:a1:1b:7e:07:75:62:65:ba:95:03:4d:09:c8:14:51:
1f:f4:d9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:08:36 2026 by rpki-client