Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E604B2700BDF11F19B725E90DAE4EC9C.roa
File: E604B2700BDF11F19B725E90DAE4EC9C.roa (raw, json)
Hash identifier: w7jsR7FwVKwW9WD4bVPDD8YLTlK0nM4yFvBPV2AOMyQ=
Subject key identifier: C7:1E:A1:E8:1F:0C:F7:A1:C7:F9:80:6B:8D:C5:2F:03:72:86:10:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA05
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E604B2700BDF11F19B725E90DAE4EC9C.roa
Signing time: Tue 17 Feb 2026 09:06:09 +0000
ROA not before: Tue 17 Feb 2026 09:06:04 +0000
ROA not after: Thu 02 Apr 2026 09:06:04 +0000
asID: 48678
IP address blocks: 154.194.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113157 (0x1ba05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 17 09:06:04 2026 GMT
Not After : Apr 2 09:06:04 2026 GMT
Subject: CN=69942f81-8da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a7:9d:da:13:6a:7e:c0:b7:b9:81:6f:0c:50:
ad:33:a1:bf:41:90:0f:8e:49:40:c1:4b:6d:84:c3:
64:db:f4:66:6b:88:b4:ff:08:1c:33:d5:8e:4b:d3:
f8:39:33:8d:32:32:d9:e9:81:1a:d9:8f:78:b5:09:
8e:57:4f:80:be:8b:28:ea:fe:ad:a0:4a:a7:b5:cd:
1d:e8:04:05:f6:28:8d:b6:45:49:8c:7e:d7:b4:9d:
25:16:9d:fe:c1:f4:21:c3:a1:54:27:8a:c0:3b:73:
a5:69:9b:26:84:e5:62:e8:3f:3f:d0:83:38:d9:bb:
cb:e2:30:b0:97:59:6e:86:3d:52:e8:2b:e9:8a:57:
1e:17:0c:99:9f:ac:79:bc:f6:51:00:bd:74:b5:e2:
68:e6:54:0a:69:67:83:91:69:eb:20:57:11:07:ac:
81:49:99:58:22:2c:8e:2a:fc:49:4f:49:cf:56:46:
dd:87:02:20:1d:c8:61:cc:7b:60:11:90:3e:71:ca:
6f:22:3a:2c:04:2a:1e:87:8c:09:cb:2b:2f:91:33:
f0:07:d3:d6:39:79:8d:ce:c1:8f:44:6c:1a:64:6f:
9a:91:fc:5a:39:41:ac:84:79:b9:80:3c:98:a9:7a:
16:2f:c7:6d:dc:8b:d8:a5:97:10:ae:a4:1c:73:c5:
44:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1E:A1:E8:1F:0C:F7:A1:C7:F9:80:6B:8D:C5:2F:03:72:86:10:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E604B2700BDF11F19B725E90DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.2.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:23:80:c0:e6:81:1d:10:47:4c:70:7b:29:8c:9f:d7:97:e8:
6b:b2:87:d0:19:07:22:15:a7:23:af:7e:7a:35:ac:ac:45:1f:
71:4b:ef:30:55:9f:6c:37:81:dc:56:7d:d0:01:bf:06:58:6e:
4d:ca:23:23:61:1c:ce:ae:32:32:3a:eb:b6:b1:1e:6f:ef:37:
93:89:77:fb:02:5f:98:a6:5a:44:18:72:90:59:7a:78:a6:44:
0f:44:1e:92:3c:93:19:64:54:3c:1e:d9:f7:6a:22:f7:d3:ca:
5d:52:02:42:01:28:f8:74:a3:28:c0:22:61:e7:d2:5f:9a:76:
12:c4:65:11:d2:8e:b1:8e:5e:16:c9:46:f3:71:2b:ac:3d:9d:
a5:3c:51:5b:d0:91:d1:bd:8d:00:df:64:72:a1:51:78:5b:91:
93:fe:c7:44:a4:ad:1e:16:f4:30:f6:4f:0b:ce:d3:8a:8d:b7:
9c:7d:7a:7b:e5:6b:76:f6:bf:ed:36:97:59:c9:08:8a:4e:05:
27:25:66:59:30:84:11:37:e5:e8:5c:e3:53:a7:50:fe:33:86:
a3:f8:fe:cf:b8:0d:b4:68:45:be:a3:ec:76:1b:86:0e:b0:89:
aa:80:98:b0:71:88:25:1c:0f:fd:d0:3f:a9:13:21:30:e8:03:
7f:0a:7b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:08:23 2026 by rpki-client