Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E82BFA26033411F196D9E1CBDAE4EC9C.roa
File: E82BFA26033411F196D9E1CBDAE4EC9C.roa (raw, json)
Hash identifier: NauFUdHPeg72AAcnuc3anUHDsZlXx2vZ/YTR/Ynvx4Y=
Subject key identifier: 5E:A3:D0:CA:E3:56:51:81:56:D4:C0:CA:00:90:4E:22:6A:97:AF:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B8B9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E82BFA26033411F196D9E1CBDAE4EC9C.roa
Signing time: Fri 06 Feb 2026 08:22:00 +0000
ROA not before: Fri 06 Feb 2026 08:21:53 +0000
ROA not after: Thu 12 Mar 2026 08:21:53 +0000
asID: 20326
IP address blocks: 154.84.168.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112825 (0x1b8b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 6 08:21:53 2026 GMT
Not After : Mar 12 08:21:53 2026 GMT
Subject: CN=6985a4a8-84e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:00:2b:a7:55:95:56:c5:b3:42:7b:2f:6d:
b4:f8:9c:b6:d3:6a:79:09:ed:2c:2a:23:b0:ea:8e:
9a:e0:9d:41:53:bf:96:cd:24:bd:56:9c:96:cf:29:
2c:09:97:a9:56:42:2d:b9:23:f3:2a:24:2a:42:d5:
9f:a2:94:86:c6:14:75:48:9e:0d:c5:c7:be:14:32:
00:4e:ac:6a:80:31:56:0e:4f:8e:5c:6a:e8:d7:60:
e6:bc:2d:ad:fd:16:25:77:cd:c3:7c:c3:03:97:6f:
86:94:1e:b7:ab:c0:61:7a:64:cc:3f:da:9a:98:aa:
d0:22:7b:2a:93:17:4f:91:e6:d9:6f:30:95:ee:4b:
0b:93:dd:8d:1d:ea:d9:c8:a8:12:28:8c:6b:4f:c6:
95:b0:51:82:8e:b1:ff:69:57:51:0b:de:50:a9:4a:
36:5a:75:5d:6c:16:2f:75:26:65:e6:d2:72:cc:a8:
f7:0b:cc:d8:65:56:47:7a:38:c9:90:24:b2:5d:f8:
07:3c:3d:1b:53:09:de:ca:64:d3:76:47:10:3f:b9:
fd:a0:e6:bf:90:be:dd:72:a1:ff:9f:bf:93:7b:da:
85:83:7d:aa:7f:26:40:73:05:4d:dc:73:bb:9e:7a:
1f:d5:3e:9f:fc:a8:f2:4d:e3:e0:af:d1:68:b7:e6:
fb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A3:D0:CA:E3:56:51:81:56:D4:C0:CA:00:90:4E:22:6A:97:AF:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E82BFA26033411F196D9E1CBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.168.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:dc:b8:f0:64:cf:90:bf:b5:26:d3:83:7b:3e:d2:ad:f1:f2:
15:43:67:8c:84:d4:c3:32:26:3e:05:38:17:14:f8:39:59:67:
78:37:f2:75:02:fe:6a:8a:df:52:37:59:4d:16:ba:d6:79:fd:
6c:1e:25:f3:19:f5:87:24:51:d4:a7:c3:74:a0:14:88:3b:a4:
6a:f0:9b:80:5e:c6:cd:50:96:74:6a:1f:1e:7f:9e:44:73:ec:
e0:43:4b:6b:5a:16:b6:27:6a:0e:94:42:5f:cc:01:13:c4:ca:
91:6b:63:03:df:1a:3e:17:71:65:e1:de:1c:76:16:ef:b1:45:
35:e2:a8:55:a4:27:90:b7:a5:cf:68:88:e3:ae:38:5f:13:f7:
6a:fc:be:d2:37:2b:d9:04:44:0f:15:cc:cd:54:8b:d6:37:4c:
50:aa:3a:3c:f6:1c:ff:5b:c0:dc:96:42:f5:9d:91:9d:a4:ac:
be:6d:63:ea:12:4e:a9:90:ef:41:c4:0c:95:57:e6:6d:fe:a2:
05:a8:34:ee:53:f7:27:44:b5:56:f5:52:ad:58:75:70:a6:99:
dd:99:13:f0:fc:9a:9d:0b:85:f6:25:83:27:ba:3d:cc:95:e8:
fc:f6:31:52:2c:6f:d0:5d:9a:e1:e1:5e:a2:e8:dc:6d:62:f5:
29:1f:bf:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:24:50 2026 by rpki-client