Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFDEB9DE040711F1A77E0CDBDAE4EC9C.roa
File: DFDEB9DE040711F1A77E0CDBDAE4EC9C.roa (raw, json)
Hash identifier: TDM2juCFXqds+mgrL+ekiSOFPEBSKyJA0oJxeyGYQ78=
Subject key identifier: A6:E1:5A:DE:F7:F3:0A:4F:A5:69:8D:B3:5D:9F:47:0B:FB:1D:81:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B8D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFDEB9DE040711F1A77E0CDBDAE4EC9C.roa
Signing time: Sat 07 Feb 2026 09:32:10 +0000
ROA not before: Sat 07 Feb 2026 09:32:05 +0000
ROA not after: Mon 16 Mar 2026 09:32:05 +0000
asID: 401701
IP address blocks: 154.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112854 (0x1b8d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 7 09:32:05 2026 GMT
Not After : Mar 16 09:32:05 2026 GMT
Subject: CN=69870699-459a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:10:dc:02:4d:24:c5:98:31:07:ad:70:ba:81:
73:22:24:de:de:b8:cf:d9:71:fc:d7:7d:13:0f:f5:
19:22:5e:46:74:e9:b7:04:2a:3e:21:83:35:e6:2e:
a6:cc:f1:5d:e3:f3:5a:53:9f:8c:01:d9:e9:d6:99:
b9:8b:51:49:5e:0c:aa:62:75:b5:b7:d4:73:1d:a7:
3c:bd:c2:f9:17:5e:33:1e:62:75:d7:45:39:33:e7:
e7:ed:4c:c5:a2:e2:e1:00:60:86:17:84:0c:ba:50:
a1:4d:9a:5b:e0:d3:11:a5:b1:23:bf:64:f5:66:81:
2e:62:0d:64:1d:c3:b7:f9:d6:5b:c2:8c:4e:62:19:
d4:69:45:e3:c8:15:f8:f8:02:f1:87:a8:87:e9:7d:
5c:ca:9d:cb:3c:98:3a:2e:72:cd:3f:b0:e1:84:72:
10:5d:ae:a2:64:f7:6d:32:e5:61:20:d6:26:a4:3c:
fe:10:ff:a5:bf:55:0a:36:2e:92:8b:bd:5a:18:90:
a3:20:07:a9:d2:66:d9:5b:44:0f:bd:1e:d1:af:54:
be:33:df:9e:ec:36:6f:58:83:2e:d4:8f:7b:ac:ce:
34:3c:ac:a2:df:3e:79:c3:75:b6:07:34:3e:93:c5:
36:dc:0d:24:f1:02:7b:ff:f0:4a:cd:0e:37:9d:82:
16:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E1:5A:DE:F7:F3:0A:4F:A5:69:8D:B3:5D:9F:47:0B:FB:1D:81:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFDEB9DE040711F1A77E0CDBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
c0:50:97:f8:bf:fb:b1:74:d2:fc:de:77:75:fe:0c:5c:db:08:
da:89:36:bf:fd:65:12:c2:42:8c:f5:f7:aa:f9:80:7a:ed:bc:
df:44:53:c7:c2:3e:4f:e4:92:fa:d6:2a:d4:21:19:0d:63:c0:
4d:ed:77:7b:13:db:80:b6:6e:3e:ac:ee:13:c2:2a:6c:4c:53:
4c:59:9e:aa:c3:9d:f3:79:ab:a9:bf:06:8d:6c:70:dd:c9:e2:
27:df:ce:ea:0a:64:48:36:66:0d:dc:24:62:d4:06:0a:4f:73:
bf:91:d2:d5:93:6e:5e:5e:16:41:8d:d6:98:fe:a5:8f:35:48:
11:1e:14:a2:02:f7:89:63:ac:1a:a3:4c:e1:e6:98:84:00:eb:
40:5e:07:ae:fe:e3:b0:4e:67:91:ab:20:07:e1:a7:af:ba:b5:
e7:8f:73:ce:3a:9c:19:fe:f3:47:61:82:25:cb:7f:4f:49:3a:
4e:a9:93:3b:e3:9e:14:8b:b2:94:91:0e:51:78:59:a2:75:4a:
6a:0f:dd:cd:49:2a:d8:10:51:cd:ed:14:a7:1b:c5:55:63:c2:
5b:41:0c:22:78:cd:f2:db:76:5f:4d:0d:0d:df:37:06:61:6a:
49:72:8d:d5:1e:93:84:45:57:7c:53:50:81:2e:66:d3:dc:b5:
52:81:4d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:43:02 2026 by rpki-client