Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD9F971612F711F18B54BEA3DAE4EC9C.roa
File: DD9F971612F711F18B54BEA3DAE4EC9C.roa (raw, json)
Hash identifier: Rdvio0JOVmBk9oYN6qR84ZDJhlTCRXOMVqcvcL1Yo+0=
Subject key identifier: 3D:87:DF:40:60:F2:E2:3C:4D:00:0A:A3:72:0B:CE:63:37:7A:60:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC05
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD9F971612F711F18B54BEA3DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 09:45:21 +0000
ROA not before: Thu 26 Feb 2026 09:45:17 +0000
ROA not after: Thu 05 Mar 2026 09:45:17 +0000
asID: 58470
IP address blocks: 154.80.0.0/17 maxlen: 24
154.81.224.0/19 maxlen: 24
154.91.160.0/22 maxlen: 24
154.91.164.0/23 maxlen: 24
154.198.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113669 (0x1bc05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 26 09:45:17 2026 GMT
Not After : Mar 5 09:45:17 2026 GMT
Subject: CN=69a01631-60da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:6b:88:6c:09:27:f7:4f:65:a8:9f:98:bf:
20:39:b7:7d:7e:20:c4:36:cd:9f:6d:30:ae:d0:e3:
41:67:36:ca:4b:ef:d5:40:9c:41:d7:7a:46:a0:13:
c1:8d:27:3e:39:7e:b6:dd:6d:ea:7e:88:77:a2:ba:
c4:c5:41:80:73:fe:3b:31:7c:b7:6c:c9:6a:f7:6c:
16:ba:20:38:18:e3:f6:92:89:dd:a8:41:3e:3c:16:
dd:20:5c:9c:a2:06:e9:44:ec:44:34:cc:e9:f3:ee:
05:e9:8c:ae:29:bc:e1:5f:d1:51:f6:53:d2:0c:1f:
52:a7:4f:75:6e:95:0d:6f:69:7e:06:89:c3:1b:88:
54:9a:4c:51:49:24:04:06:ff:69:cb:fa:b8:a8:aa:
25:a8:2d:b8:a3:d0:d1:76:e3:c5:59:59:21:cc:13:
a9:8c:86:e2:45:39:f8:f9:6c:14:e8:7f:29:17:9a:
91:a2:1b:14:d1:90:cd:83:b0:ea:34:34:29:ba:5c:
f6:ef:cb:31:ae:b4:44:40:93:58:b5:c2:04:ef:7c:
b1:86:9e:71:b8:55:3f:27:ee:49:17:be:75:84:a6:
b8:e2:a1:a6:40:b9:c6:20:cf:cc:06:5e:c3:a6:81:
f2:c4:0f:50:aa:18:bd:0f:7c:08:7e:ec:10:b5:3e:
a7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:87:DF:40:60:F2:E2:3C:4D:00:0A:A3:72:0B:CE:63:37:7A:60:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD9F971612F711F18B54BEA3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.0.0/17
154.81.224.0/19
154.91.160.0-154.91.165.255
154.198.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b5:2c:ac:b1:71:8b:f3:19:ba:5e:66:58:a5:84:d0:0b:66:9c:
be:77:6c:bc:97:f4:ca:12:bb:25:38:62:7a:41:0d:61:46:50:
e8:48:44:27:00:af:ed:b7:8d:92:b7:49:0f:79:40:6c:4f:f1:
ec:80:3c:c7:5c:36:1a:fa:9e:ff:75:c8:51:1d:d3:9d:48:06:
26:68:7a:0e:9c:b2:49:85:8b:ce:cc:54:a9:c5:a5:ca:9c:75:
60:91:62:42:25:d6:20:79:a9:23:78:20:f7:b6:6f:4e:38:79:
25:45:80:92:31:bd:86:41:b2:9a:92:81:c2:08:06:7b:05:bd:
2a:7f:34:c5:7b:6b:ae:21:da:68:d0:a2:ea:9b:bb:13:06:52:
10:fc:28:b8:f9:37:ac:70:b6:5a:ba:08:e6:b8:80:8d:76:0c:
76:3c:1c:c1:a8:88:e0:91:c6:fb:57:9d:ed:49:83:ab:ce:14:
4e:6f:69:20:50:1d:97:de:b4:d2:28:32:c3:4d:b9:7f:6c:22:
f8:30:28:19:1a:74:e2:9e:1f:38:3b:ec:ed:32:90:c6:3c:e0:
d0:5a:40:a4:51:e9:6d:d0:56:06:20:07:83:42:d9:10:4a:16:
82:65:e3:35:6c:d9:88:5b:ae:21:67:b6:ad:8c:2a:f8:99:4c:
1a:a6:06:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:06 2026 by rpki-client