Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F83B6EBE01D211F1BA2338C6DAE4EC9C.roa
File: F83B6EBE01D211F1BA2338C6DAE4EC9C.roa (raw, json)
Hash identifier: nQfsIuY3VbODgtxaXjU6JPSsN6WLtZX+PvbG6AcyZwc=
Subject key identifier: 5E:F9:78:E4:38:4E:20:19:15:98:4E:F1:FF:A3:E0:57:64:6B:3D:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B899
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F83B6EBE01D211F1BA2338C6DAE4EC9C.roa
Signing time: Wed 04 Feb 2026 14:08:25 +0000
ROA not before: Wed 04 Feb 2026 14:08:20 +0000
ROA not after: Wed 18 Mar 2026 14:08:20 +0000
asID: 271916
IP address blocks: 154.205.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112793 (0x1b899)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 4 14:08:20 2026 GMT
Not After : Mar 18 14:08:20 2026 GMT
Subject: CN=698352d9-ebb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c3:ca:4f:ca:12:f6:db:05:d1:73:cd:4a:b7:
4f:f6:fd:3d:4e:a6:b9:ee:77:d5:bc:dc:52:2d:6e:
5a:8c:a2:e9:01:15:01:ee:56:21:01:a0:68:9d:76:
7d:dd:6a:7e:e2:03:fa:c3:16:81:b1:d8:83:20:c4:
a7:11:3d:8d:bf:d6:22:57:8a:6f:7f:1d:9e:df:9a:
7f:a3:7c:07:3c:8e:14:68:99:79:c8:9c:69:9d:3a:
4b:c3:05:64:ba:2e:18:8d:e2:81:8f:6d:94:b9:0d:
1a:23:b1:20:a7:ed:b0:cb:4a:87:c1:03:90:bd:02:
8e:0c:35:bf:ac:63:1c:37:c4:eb:80:ac:f8:37:a0:
cb:86:89:da:07:84:7e:47:4b:e1:f4:b0:5c:fe:14:
c2:b4:7b:6f:ee:5d:19:ac:91:c8:a4:7d:43:3d:19:
8c:4f:6f:cb:a9:e9:2f:95:91:68:ee:9c:55:08:70:
1b:c4:f5:60:9b:e9:a4:d2:ef:83:46:42:79:68:22:
de:96:c7:88:36:2a:69:4c:45:79:12:86:e1:c3:a4:
9e:6a:50:41:cc:73:74:c5:49:36:5d:8e:7e:d7:5a:
94:54:29:2e:89:25:0a:1e:0e:03:d9:b3:6b:01:7b:
f0:7e:db:ba:06:1d:89:93:d8:20:aa:aa:40:5a:a9:
d5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F9:78:E4:38:4E:20:19:15:98:4E:F1:FF:A3:E0:57:64:6B:3D:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F83B6EBE01D211F1BA2338C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.24.0/22
Signature Algorithm: sha256WithRSAEncryption
96:c5:95:f6:4c:3f:e1:ad:09:ee:c5:55:e6:a7:cc:20:1c:09:
2f:de:8d:b4:4a:82:f0:79:6b:d0:ca:26:f1:b0:31:ea:4e:65:
26:68:25:bf:94:85:7d:1c:a1:0e:02:e7:8e:a6:23:76:22:37:
20:09:71:70:5b:4c:49:63:ee:1b:db:c6:4a:86:17:24:d6:c7:
05:30:f1:79:aa:dd:6c:c6:61:87:84:bf:f4:f1:f9:4c:bb:71:
8f:b3:7b:55:b1:ce:fa:a5:17:76:07:7b:44:82:df:84:42:58:
77:ce:11:a3:e3:85:5a:ce:1f:70:98:ea:cf:69:89:5b:31:83:
59:c0:93:88:33:2a:ae:a5:4f:96:87:2b:4c:39:40:ba:5d:3d:
0b:e2:bb:81:0d:43:c5:62:47:00:ac:5a:a3:b4:62:de:4d:c5:
7c:79:16:a8:b5:63:b8:a3:ce:c6:a9:2c:a5:3d:9b:28:de:82:
9c:33:8b:80:5e:ed:d0:e6:18:c5:dc:7b:25:65:d1:b9:78:59:
e1:a0:92:a5:4e:9b:26:c8:38:87:ff:1f:a5:6c:40:f2:34:47:
d8:c9:0f:1d:60:b6:ea:ce:38:07:ac:ab:42:68:d7:19:06:3f:
f7:58:21:17:87:76:9b:4e:44:67:fe:30:ae:7e:bd:ce:45:12:
04:7d:1e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:01 2026 by rpki-client