Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14B170AE278811F18B7CFDC6DAE4EC9C.roa
File: 14B170AE278811F18B7CFDC6DAE4EC9C.roa (raw, json)
Hash identifier: oltaWhbmeDHNb7BqmhbiTV0Fiz3tLD8bFaxTIJjLiP8=
Subject key identifier: DC:BF:83:96:60:4B:78:67:A7:CD:00:BE:52:AF:48:79:59:A3:85:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C099
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14B170AE278811F18B7CFDC6DAE4EC9C.roa
Signing time: Tue 24 Mar 2026 13:48:05 +0000
ROA not before: Tue 24 Mar 2026 13:47:59 +0000
ROA not after: Fri 01 May 2026 13:47:59 +0000
asID: 62240
IP address blocks: 154.195.106.0/24 maxlen: 24
154.196.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114841 (0x1c099)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 24 13:47:59 2026 GMT
Not After : May 1 13:47:59 2026 GMT
Subject: CN=69c29614-515d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7f:e0:6b:0e:96:71:55:63:e5:c5:ae:af:d0:
16:4f:3c:ff:29:a2:64:ff:04:fe:43:ba:14:1b:25:
d2:5f:84:cd:70:bf:87:54:8f:8f:68:5d:17:5e:87:
1a:62:cf:ac:3a:57:aa:1f:34:df:f5:5d:35:52:fb:
ce:3d:08:22:29:fa:d7:35:ed:fa:b0:ff:32:a6:af:
3d:63:8e:a8:5c:02:62:43:e1:eb:21:3d:89:fc:65:
c7:c7:e8:86:48:5d:b1:ca:10:9b:de:7b:b3:b9:6d:
cd:43:3b:f1:d2:cc:11:d0:97:8c:9e:58:85:ae:fc:
4b:a5:2c:3c:bf:ee:b0:27:1e:f5:7c:38:0b:e1:a1:
a5:08:7a:ce:9b:1a:e0:92:53:2c:99:5d:6c:a9:5d:
fe:5e:02:d8:b7:b9:50:8a:a8:71:62:f3:91:3d:16:
19:a8:c9:bf:6f:44:aa:36:4b:9d:4f:4b:cd:41:c3:
6a:d5:71:01:05:37:95:11:6d:ac:68:36:d3:87:22:
ea:0c:e6:86:47:ff:e4:cc:19:5b:7a:fc:b5:23:27:
55:91:c4:68:ff:95:df:b2:b6:ce:d6:37:56:7d:22:
bb:d0:8e:9d:38:1a:e4:43:4e:c5:50:3a:5f:0e:bc:
7b:11:91:b2:af:d0:34:49:c3:9e:69:38:13:d1:fe:
c6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BF:83:96:60:4B:78:67:A7:CD:00:BE:52:AF:48:79:59:A3:85:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14B170AE278811F18B7CFDC6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.106.0/24
154.196.88.0/24
Signature Algorithm: sha256WithRSAEncryption
46:9f:69:38:e8:a9:3e:98:4d:42:f5:61:5f:c6:40:8c:91:8d:
d6:df:d5:a0:d7:1f:33:e9:b7:07:67:dc:e9:b5:53:ab:b6:6a:
3a:aa:01:61:81:34:09:bc:59:c5:fb:df:78:9e:d1:be:1c:6f:
63:ba:16:62:fd:05:11:52:de:fa:6a:5d:a0:13:d9:e2:3c:f2:
2e:1a:bd:b7:2a:c7:9f:a8:b1:5c:47:32:3b:12:e9:77:99:15:
46:64:8f:4e:3d:40:5f:68:c9:0d:98:bb:fe:5e:d2:5a:ca:d0:
d4:ff:92:e3:13:c5:c5:06:e3:2f:ca:af:ce:f2:10:cb:41:31:
00:21:c0:6a:77:40:c3:ca:a8:db:23:86:a3:ba:05:56:02:5e:
06:d6:34:c9:f9:b6:6d:65:9c:cc:4e:71:e1:7e:4d:f7:5a:c1:
e0:7f:d2:28:8f:51:5a:b4:ae:18:4c:4f:c5:2f:30:af:66:0b:
33:c0:af:e3:4e:33:e1:d2:cb:1f:5b:1e:01:92:2a:af:14:44:
a1:f2:26:9b:29:8b:2a:a7:f3:37:15:f1:5a:81:d8:a2:7e:3c:
bf:95:56:ac:a7:0f:31:82:02:67:d2:f9:bd:c4:34:b3:77:f1:
8e:e6:a6:6a:a0:4f:ab:9f:fe:44:cf:2e:59:88:4d:80:28:57:
e1:32:fc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:09:06 2026 by rpki-client