Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E72A80200F0011F1B5B94BD2DAE4EC9C.roa
File: E72A80200F0011F1B5B94BD2DAE4EC9C.roa (raw, json)
Hash identifier: Z60nV8OJKiZWl8krw359/EiCd7coS98g1op+SaEpKQ8=
Subject key identifier: 0E:20:C8:B0:EB:2E:65:DA:F9:C5:8C:EC:F9:63:2F:3D:4B:85:AC:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BADA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E72A80200F0011F1B5B94BD2DAE4EC9C.roa
Signing time: Sat 21 Feb 2026 08:39:58 +0000
ROA not before: Sat 21 Feb 2026 08:39:54 +0000
ROA not after: Tue 24 Mar 2026 08:39:54 +0000
asID: 400619
IP address blocks: 154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113370 (0x1bada)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 21 08:39:54 2026 GMT
Not After : Mar 24 08:39:54 2026 GMT
Subject: CN=69996f5e-db91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e9:f0:b0:dd:9d:a6:d6:06:49:30:1f:bd:27:
0d:b1:65:e9:03:4b:04:54:79:90:cb:6e:b1:7e:16:
41:0a:14:62:0f:fc:a8:eb:ea:c3:20:41:78:81:d3:
b4:0c:d6:ce:85:e0:76:04:e5:15:a5:d0:83:8e:f2:
4e:8f:79:09:f1:f2:09:4c:70:60:2b:0f:0b:da:92:
64:89:c6:17:55:04:a4:91:5e:48:e5:e6:de:09:fd:
64:f9:49:ac:da:ad:68:3d:2d:33:ab:7d:6a:21:8d:
51:53:b2:dc:fb:ac:25:84:68:8d:37:37:cb:c2:85:
f2:6a:f8:41:cd:9d:05:e6:c9:c5:f8:f6:e2:9d:d0:
8d:e2:ee:2b:f2:e9:c8:46:aa:a3:d5:09:13:3e:56:
b0:e0:eb:81:b7:78:58:1c:0c:6b:8c:7c:0e:12:5c:
f9:70:f5:6b:90:00:7f:e1:e4:e1:cd:a5:48:7f:6d:
29:a4:8e:26:aa:28:aa:5b:32:24:9a:81:9d:bb:31:
bd:d3:51:4b:be:e4:48:a1:cb:28:6e:be:cd:8c:e7:
8c:7f:da:cf:f2:ee:84:3a:e5:1e:be:9a:ec:27:4f:
28:74:c1:54:bb:5b:56:13:36:eb:75:ba:ed:da:2a:
fd:ce:d0:86:8f:cb:a0:84:e5:fb:a9:94:37:a9:4a:
b4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:20:C8:B0:EB:2E:65:DA:F9:C5:8C:EC:F9:63:2F:3D:4B:85:AC:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E72A80200F0011F1B5B94BD2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
61:90:e7:8c:2a:ab:0b:c3:1c:6b:7d:4c:ca:8d:c0:bd:8a:87:
c2:d6:b0:d6:7b:b0:aa:53:f5:42:44:7e:43:c4:d3:fc:82:0d:
ac:cb:a6:f6:35:2b:4a:e4:52:b6:a4:72:f5:6f:f8:00:05:ca:
c4:9e:37:74:b6:df:d2:64:39:84:16:02:08:fa:4a:7f:bc:8d:
77:15:e0:a1:be:71:10:eb:25:ec:b8:e4:70:7a:a5:d7:62:28:
8b:23:c8:1c:c0:f6:44:f0:cf:c8:68:c5:d4:b3:62:21:0b:ec:
19:30:b2:66:ce:47:5e:f0:9f:a1:ea:de:bf:bf:53:0b:64:fc:
36:73:18:79:53:8a:89:55:c4:84:10:03:0f:e3:c5:aa:c3:5b:
ae:3b:dc:22:75:a3:4f:c4:fa:20:fd:13:db:dc:ca:0b:d1:a4:
0e:a0:fd:f7:80:39:e3:3e:98:32:7c:81:26:17:47:1f:ba:82:
e0:62:a9:bb:06:bc:af:14:da:1b:f0:0e:f8:13:b7:a6:07:20:
91:ec:d8:f2:3b:15:aa:cf:16:22:53:83:d8:d0:96:ce:55:b2:
c5:54:f8:47:57:15:bf:9b:33:73:cf:df:e5:89:d4:d7:43:a6:
3d:92:48:43:91:6c:40:44:74:4f:d5:10:06:a1:22:e0:4b:1c:
47:8d:de:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:05:32 2026 by rpki-client