Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D966F930156011F1AF82DAEBDAE4EC9C.roa
File: D966F930156011F1AF82DAEBDAE4EC9C.roa (raw, json)
Hash identifier: IUKZNZaOoupri4TuMgnDhzUpoz2IIdXbZHMlOwnE8B4=
Subject key identifier: 6C:92:45:FB:6F:31:E8:8C:3C:EE:C4:11:97:97:EF:10:58:ED:4C:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC8C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D966F930156011F1AF82DAEBDAE4EC9C.roa
Signing time: Sun 01 Mar 2026 11:21:53 +0000
ROA not before: Sun 01 Mar 2026 11:21:49 +0000
ROA not after: Wed 08 Apr 2026 11:21:49 +0000
asID: 48031
IP address blocks: 154.210.239.0/24 maxlen: 24
154.219.94.0/24 maxlen: 24
154.219.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113804 (0x1bc8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 11:21:49 2026 GMT
Not After : Apr 8 11:21:49 2026 GMT
Subject: CN=69a42151-7920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:63:6a:f7:8a:37:6a:51:dc:66:e1:1d:1c:e1:
be:55:6a:81:57:43:da:19:63:df:07:8c:9a:84:04:
e0:be:83:b1:79:87:7b:05:db:bf:f5:67:f9:10:f3:
24:8c:06:b6:c3:38:14:61:39:81:82:4c:69:f4:ba:
d2:14:af:d8:a9:78:6a:56:b9:03:8e:bd:6f:ab:1e:
3e:13:0a:66:8b:cd:b9:45:78:2d:e0:43:23:4b:a1:
e5:b5:62:c5:5c:74:52:59:b2:ae:35:9a:7d:f0:ce:
18:bb:78:8e:2d:ed:38:c7:f8:2e:9f:df:71:67:d5:
10:b1:95:58:a3:77:6b:3b:3d:5f:91:26:d2:38:54:
a6:75:98:50:41:13:b4:0f:48:3a:f8:68:2a:32:6f:
3a:14:f8:d6:6b:2b:35:3a:72:6f:d0:6f:3a:38:79:
76:67:77:11:a4:28:fe:07:b7:38:b2:e3:be:e1:ce:
4d:93:f7:b3:b5:58:28:d2:52:38:37:8d:45:09:64:
f8:e0:8a:d6:66:d8:cf:2f:af:27:36:25:b5:7c:ac:
31:a7:a8:2b:dc:59:d0:5e:28:5d:2b:aa:f5:c6:99:
b9:79:9c:15:b8:87:1e:39:45:ba:cd:2c:50:f7:9e:
45:81:5f:2a:98:0b:01:49:4c:db:b5:5a:a3:28:f4:
65:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:92:45:FB:6F:31:E8:8C:3C:EE:C4:11:97:97:EF:10:58:ED:4C:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D966F930156011F1AF82DAEBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.239.0/24
154.219.94.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:13:39:78:68:b9:bb:7c:07:60:52:aa:24:3d:c2:4a:b6:60:
ac:14:6d:43:6a:82:52:82:97:02:2b:9e:d9:ed:c0:77:bc:9c:
de:6c:51:a7:78:32:16:79:2b:f7:af:79:69:2f:9f:3d:2e:fd:
4a:0c:ad:c1:d1:6c:20:d8:c5:dc:26:36:16:2f:05:c5:e7:11:
c0:b8:2c:36:d2:00:53:68:26:df:0c:ac:f9:ba:4d:6e:98:5b:
8b:df:18:70:bd:59:48:35:37:27:06:a0:0b:4b:c9:d4:cb:c4:
15:3d:12:50:5b:ca:8c:29:ee:23:97:f4:78:5e:5a:6c:e9:00:
1d:f9:b6:1c:75:d9:10:b0:e7:69:fc:62:4c:97:65:5b:bb:67:
54:7a:91:5b:b5:a6:57:df:ff:14:cc:c1:cd:af:26:50:0f:e1:
fd:93:94:e5:0d:f4:f0:9d:63:e2:f3:0b:82:b3:3c:41:15:21:
93:75:ca:6a:1a:6f:f9:9c:d5:a9:e4:47:a1:64:92:66:9f:20:
4e:3d:0b:1c:56:6f:c9:8a:f0:32:bd:d5:d7:54:17:ef:e9:f8:
5c:f9:78:6f:9f:a4:bc:6a:3c:6a:3d:b6:07:7d:d0:59:2c:fe:
07:20:85:c2:10:af:e0:b5:af:e2:68:26:79:ec:2f:0a:25:38:
88:b0:3f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:09 2026 by rpki-client