Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF00BCF4279311F1BCE32B8BDAE4EC9C.roa
File: FF00BCF4279311F1BCE32B8BDAE4EC9C.roa (raw, json)
Hash identifier: Mv/yLVK8YvAJlAUMHxDI6GOUke+mA4oDw7eTylT8200=
Subject key identifier: B3:CF:D7:ED:B3:26:DB:49:7C:BC:31:00:55:7A:A7:D8:4E:18:39:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C09F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF00BCF4279311F1BCE32B8BDAE4EC9C.roa
Signing time: Tue 24 Mar 2026 15:13:22 +0000
ROA not before: Tue 24 Mar 2026 15:13:17 +0000
ROA not after: Fri 01 May 2026 15:13:17 +0000
asID: 202656
IP address blocks: 154.200.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114847 (0x1c09f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 24 15:13:17 2026 GMT
Not After : May 1 15:13:17 2026 GMT
Subject: CN=69c2aa12-e14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4c:5d:47:8e:a6:d6:01:02:b5:5f:04:00:da:
b2:62:45:db:44:8a:3f:ae:bb:c8:9c:c4:ac:6a:02:
70:a9:05:24:74:2a:16:ff:c7:8a:01:c3:30:44:c9:
aa:b3:8e:37:0d:82:bc:e4:88:94:94:86:b0:f3:67:
d4:65:0f:2a:e6:37:2f:4e:c5:d4:d6:df:5f:3b:16:
83:47:4b:4e:81:16:a2:a0:00:38:38:50:c1:3b:07:
16:8d:90:b0:f9:bc:c0:42:0f:dd:ca:99:05:8f:41:
aa:5e:0a:14:15:d0:8c:6f:8e:c3:ce:22:fa:23:eb:
d6:b5:48:9f:67:ed:b6:20:9b:9c:59:cd:54:e1:e3:
8c:32:e3:1d:a3:ae:59:49:c8:d6:ba:48:30:67:e8:
43:29:88:3b:59:ec:d3:3f:29:da:71:10:11:5b:17:
ce:3e:af:54:10:70:9e:7f:ed:13:a1:c7:b1:e1:2e:
76:0e:e7:af:97:aa:3a:63:e8:5a:7c:dc:82:3e:a4:
eb:ef:bf:b3:e5:f8:3f:97:82:d0:29:f4:b0:3d:7c:
1a:f7:c5:ad:92:41:9f:ad:c8:67:6a:cc:76:79:2b:
0d:52:fa:42:6f:1d:26:cf:f5:97:a6:16:79:a2:fc:
a3:5c:58:46:72:1d:a8:c4:4f:72:e3:fe:26:2e:7d:
3b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CF:D7:ED:B3:26:DB:49:7C:BC:31:00:55:7A:A7:D8:4E:18:39:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF00BCF4279311F1BCE32B8BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.227.0/24
Signature Algorithm: sha256WithRSAEncryption
44:fc:12:33:c6:06:b7:af:28:27:8e:3e:fe:d5:1b:f4:79:6e:
65:e8:2c:21:19:ae:b9:c6:ab:51:04:b7:b3:1e:00:43:3a:ca:
0b:b7:94:5b:4a:2c:f2:e5:19:c3:6e:6e:bc:bf:49:e4:7d:13:
98:06:23:a7:14:a3:bd:9d:07:9d:9a:d8:31:f6:67:4c:1c:97:
80:5e:d2:b9:12:b5:e7:59:82:e2:a6:7c:e2:21:e1:a8:98:9d:
64:f9:ff:3f:13:4b:0a:eb:a4:19:12:d6:67:32:ad:3b:7c:00:
88:ad:8d:ab:0e:93:20:60:80:ee:58:45:98:f5:fa:1d:bf:da:
7b:8c:1d:c1:0c:5f:99:89:9c:05:86:34:0c:65:4d:13:ca:77:
ad:36:a1:f7:07:76:aa:2b:8d:81:c6:60:45:7e:e5:5c:6b:fd:
ab:53:80:1c:0f:93:c4:8f:e1:cc:96:f7:09:47:f6:13:aa:d5:
31:9f:c5:03:fe:c2:f7:8e:fe:c1:cd:4b:43:de:91:aa:11:56:
06:00:09:88:ec:9f:42:0f:3a:c2:6d:4f:9d:e9:8b:40:33:94:
42:99:2d:26:aa:5e:89:04:9d:a2:56:10:10:b6:04:79:89:da:
61:6f:ec:4c:ef:87:38:d9:4c:d3:2b:f7:53:ee:25:36:3f:b5:
0e:c9:1b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:06:24 2026 by rpki-client