Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBCA829A279111F183973B7FDAE4EC9C.roa
File: CBCA829A279111F183973B7FDAE4EC9C.roa (raw, json)
Hash identifier: EuaqnZ9HYdXchBvf5gFC+9SRFgU3LzICQjag4oQvBow=
Subject key identifier: D5:A8:A7:D8:E4:E0:69:BA:18:86:6A:6E:9C:9B:C6:DA:38:E4:FE:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C09D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBCA829A279111F183973B7FDAE4EC9C.roa
Signing time: Tue 24 Mar 2026 14:57:37 +0000
ROA not before: Tue 24 Mar 2026 14:57:31 +0000
ROA not after: Thu 30 Apr 2026 14:57:31 +0000
asID: 401696
IP address blocks: 154.201.64.0/19 maxlen: 24
154.201.94.0/23 maxlen: 24
154.201.94.0/24 maxlen: 24
154.201.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114845 (0x1c09d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 24 14:57:31 2026 GMT
Not After : Apr 30 14:57:31 2026 GMT
Subject: CN=69c2a661-ff43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d9:99:66:36:16:b3:58:ee:de:06:fd:d5:11:
fc:a2:97:66:0b:26:7f:7a:4e:b4:9d:85:98:43:82:
93:09:57:b4:5f:83:58:a9:77:9e:28:9a:00:d8:69:
f1:61:46:a3:77:ff:bb:31:89:a7:21:35:ff:d2:ba:
1f:1b:c4:52:2f:45:c4:55:a7:a6:65:19:b5:2d:51:
e9:28:a8:cb:54:9e:c8:54:38:83:a0:48:47:0c:ad:
7e:21:1d:7c:5c:fe:a3:4c:3d:74:bc:c5:e5:c4:ee:
6a:5b:02:40:9a:52:47:a1:88:a2:8e:e4:ed:28:9f:
e1:02:b2:5f:c1:cf:1b:6a:79:db:eb:82:b2:e5:09:
78:6f:cc:72:f3:9c:ee:76:1b:18:7a:e3:80:7b:6e:
25:37:7b:70:8b:c1:0f:c5:3e:93:62:1a:a3:f9:ca:
99:20:76:c6:59:a7:e8:c0:f9:7d:a2:c7:54:59:31:
fe:33:87:4a:f1:36:92:fa:2c:ab:14:ce:9a:e6:eb:
fa:13:e1:0e:d1:07:89:5b:d2:58:8c:d8:4b:f5:a7:
ff:ca:8b:fb:35:4e:bd:4d:48:e2:72:44:18:ca:59:
68:92:58:82:61:17:6e:f6:df:5c:72:51:be:a3:34:
85:9e:3d:77:43:5e:2f:f6:c1:4f:3a:5f:3b:58:fe:
cd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A8:A7:D8:E4:E0:69:BA:18:86:6A:6E:9C:9B:C6:DA:38:E4:FE:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBCA829A279111F183973B7FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
d6:ee:af:7c:75:61:cd:38:f5:44:80:3c:e8:7c:8d:4a:77:45:
06:6a:45:c9:e7:f0:dc:e6:ea:7e:c1:bb:b0:cb:7b:69:ae:b7:
4f:f7:c9:75:14:62:ff:8d:ae:62:71:61:ae:91:c0:70:f4:b8:
46:fd:d9:15:2e:90:d6:b8:11:bd:d6:c6:6b:5f:7d:bf:56:5a:
05:07:39:55:c4:41:28:84:81:e0:91:ec:07:50:26:40:48:96:
b5:90:ce:39:c8:c6:a6:21:65:6c:f0:67:a7:43:93:3c:71:08:
6a:36:a4:d4:35:5d:31:d6:86:a5:3e:fe:35:3a:81:03:9e:83:
8f:7a:3c:74:58:66:05:75:3a:a0:6c:3a:c1:6f:e6:82:d2:86:
63:45:15:5b:bc:31:c9:3e:32:f6:b6:f7:03:df:c0:fe:68:90:
24:f5:09:85:46:dd:8f:95:80:f1:6f:1b:f3:84:a7:b2:36:6d:
0c:b2:ff:04:c9:c1:10:27:a8:4d:eb:13:f8:93:92:90:55:e7:
6c:b8:65:92:a8:b5:02:40:55:ea:22:85:5a:87:02:b3:9e:e2:
9c:3c:fd:e3:d3:58:a4:f4:86:22:1a:ea:c2:2c:f4:8a:1e:22:
26:6f:68:55:ff:6a:01:d0:34:b2:da:2c:d5:c3:27:8e:7e:8b:
78:b1:32:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:38:42 2026 by rpki-client