Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDCCA54011FC11F1A101DBA6DAE4EC9C.roa
File: DDCCA54011FC11F1A101DBA6DAE4EC9C.roa (raw, json)
Hash identifier: 83G1824cSdpZ5YkXpk5iM22eeRN1zJaG0XDtEbndaKk=
Subject key identifier: 3F:4A:BB:2B:FD:42:36:22:AF:94:B6:BA:83:F5:2D:55:34:67:AC:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB7F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDCCA54011FC11F1A101DBA6DAE4EC9C.roa
Signing time: Wed 25 Feb 2026 03:48:38 +0000
ROA not before: Wed 25 Feb 2026 03:48:34 +0000
ROA not after: Thu 05 Mar 2026 03:48:34 +0000
asID: 395793
IP address blocks: 154.83.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113535 (0x1bb7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 03:48:34 2026 GMT
Not After : Mar 5 03:48:34 2026 GMT
Subject: CN=699e7115-44b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9e:13:f2:2b:90:73:bf:85:10:3c:86:b6:bc:
8e:54:c3:a1:a1:6e:7d:18:ad:ba:62:a9:73:90:4a:
67:6c:de:ee:13:df:50:cb:29:f4:bc:a1:04:22:34:
0e:5f:55:33:11:8f:43:1b:61:97:ca:4b:f1:61:28:
48:1f:3c:6a:6b:06:5c:d3:91:d9:a4:a8:5c:15:31:
87:45:8f:08:65:ab:c1:d9:b6:0d:34:c2:d3:cd:61:
85:4e:80:d4:b1:40:f9:ba:7a:67:94:e7:8a:9f:95:
9d:97:08:87:b9:7f:8a:58:0c:03:e7:ee:90:12:39:
d4:7e:53:cb:eb:59:75:ea:7c:69:f5:75:bc:d8:c7:
ab:c3:6b:40:e9:da:d2:79:7f:b4:19:dc:06:78:38:
76:7c:f4:67:31:e9:01:e6:a1:bc:51:9a:fc:11:f8:
1b:59:dc:01:40:2b:99:7d:2d:fd:b7:ad:05:ba:7d:
75:10:7f:b3:eb:ad:f0:1d:57:74:27:f4:22:fc:4e:
44:2c:31:e6:0c:10:ec:fe:20:36:12:71:f9:3c:51:
0e:f9:54:e9:6c:3d:42:42:10:7e:eb:40:aa:96:6d:
bb:d0:f8:08:23:f6:b9:8b:f4:c2:a8:e8:de:c4:7e:
10:f3:e2:f7:0c:e5:7a:fb:e2:92:d3:c3:9e:13:af:
cc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4A:BB:2B:FD:42:36:22:AF:94:B6:BA:83:F5:2D:55:34:67:AC:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDCCA54011FC11F1A101DBA6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.104.0/21
Signature Algorithm: sha256WithRSAEncryption
c1:a5:da:d3:d9:c7:91:81:c7:b9:f8:3c:8d:97:60:67:aa:64:
27:ae:ad:c7:75:2e:de:9b:1f:ac:84:8f:99:07:59:ff:03:ed:
2d:ac:0f:bb:94:b5:63:18:c7:a1:5d:28:db:16:c3:2b:79:a7:
a0:d2:f2:17:8b:f0:7f:1e:f7:6a:0d:7d:da:28:b2:e8:52:e2:
12:2a:72:15:f7:b2:87:84:63:da:c3:92:6a:c6:7e:c4:a3:ce:
7c:de:b3:b0:8d:0e:a8:8b:f0:ec:0e:f5:d8:32:93:b5:61:97:
27:2a:40:b0:60:91:33:5f:5c:06:12:26:1d:9c:29:68:b3:bc:
5f:4c:03:fa:8f:f9:d4:de:30:8f:48:c4:31:52:1a:4f:18:d3:
a0:e5:38:08:01:33:7e:58:7f:ce:3e:58:b7:88:93:99:b0:7b:
22:52:2f:79:4f:89:08:f7:4c:7b:2d:d1:36:f8:37:44:78:fc:
8a:97:ec:ae:d0:47:f3:4d:6d:3e:75:19:c0:bf:91:a7:61:b5:
a9:0c:09:74:a1:bd:cc:ea:dc:16:f9:09:6a:22:7b:a5:48:03:
ed:7d:fb:41:d2:db:7e:eb:13:33:68:4e:91:6c:b5:05:89:37:
ae:87:33:6c:90:86:5b:2f:51:85:db:61:6e:fa:a4:cf:37:8c:
47:d0:b0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:25 2026 by rpki-client