Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00DE69AE245B11F18AE46AC2DAE4EC9C.roa
File: 00DE69AE245B11F18AE46AC2DAE4EC9C.roa (raw, json)
Hash identifier: Km2J1kR2pmf1KL2OZXTQb6Q3Fub0lqXTABuv+bZ8R7Q=
Subject key identifier: 7F:60:CE:34:F4:20:16:84:1C:5C:60:7A:B4:95:E9:1F:93:9D:E2:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C03C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00DE69AE245B11F18AE46AC2DAE4EC9C.roa
Signing time: Fri 20 Mar 2026 12:47:51 +0000
ROA not before: Fri 20 Mar 2026 12:47:45 +0000
ROA not after: Fri 23 Jul 2027 12:47:45 +0000
asID: 328608
IP address blocks: 154.83.240.0/22 maxlen: 24
154.88.36.0/22 maxlen: 24
154.88.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114748 (0x1c03c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 20 12:47:45 2026 GMT
Not After : Jul 23 12:47:45 2027 GMT
Subject: CN=69bd41f6-7dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:c9:dc:9b:93:ec:0d:4e:08:15:20:4f:55:
c4:7c:94:82:eb:9d:6f:01:5f:d4:51:50:2e:b0:73:
42:f4:78:a1:4a:e4:77:76:87:7e:f8:d2:78:34:69:
0f:47:33:66:53:1d:ca:23:42:ba:f7:06:2f:18:71:
23:f6:c0:37:8f:35:9f:4e:88:09:1a:db:de:b1:fa:
bc:a5:d6:dc:a7:52:ca:6b:55:50:89:ca:2b:ba:83:
b3:29:de:3f:ff:aa:4f:0c:a0:92:ce:6b:7e:77:8a:
7a:3b:de:dc:23:be:6d:4f:40:81:f9:b8:20:57:4d:
0f:2f:a4:c4:89:b8:be:09:39:1e:b7:da:48:1d:17:
26:16:b0:53:a0:3e:e2:76:18:57:3f:ca:f0:e7:98:
c8:46:80:3c:87:3f:39:10:f9:8b:9b:95:8c:3f:af:
f9:bf:a2:fa:33:52:58:03:ce:5e:4b:43:2f:fc:fe:
bc:a1:4e:5e:34:f8:45:90:3d:3e:e4:2d:d7:79:9a:
e5:24:3f:0e:e0:ee:2c:3b:31:f2:28:22:bf:b8:2b:
14:95:3b:c2:c0:8f:92:8d:9a:7a:7a:ac:d7:d5:29:
0c:c7:61:a8:3a:30:a4:a0:3b:02:68:af:4b:be:f3:
e9:09:fa:11:48:08:11:8f:73:8a:f3:04:3d:d4:20:
73:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:60:CE:34:F4:20:16:84:1C:5C:60:7A:B4:95:E9:1F:93:9D:E2:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00DE69AE245B11F18AE46AC2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.240.0/22
154.88.36.0-154.88.40.255
Signature Algorithm: sha256WithRSAEncryption
7d:79:8d:1e:68:5b:33:8c:17:47:5a:8a:a8:c3:2a:db:6e:70:
53:28:f0:ad:3f:6d:d4:9b:48:41:31:95:97:ab:5f:82:9c:d2:
2e:59:12:c2:e9:57:19:2d:38:cd:87:ac:a5:4e:7a:69:06:02:
d9:bb:e5:d9:50:19:25:34:f7:3e:c2:76:d3:7d:c6:0b:dc:8d:
ef:4c:f4:6a:e4:25:21:18:74:a7:b5:76:da:65:5d:c3:61:67:
41:80:56:39:77:9b:04:85:fe:63:31:bd:76:9d:73:14:a8:42:
5e:21:e0:85:4f:1b:45:ef:03:a3:57:e3:44:54:9d:b0:1f:39:
45:e4:94:9a:e8:b6:f0:73:89:62:11:a7:06:62:7f:15:98:30:
90:4f:6d:c0:f6:fd:62:6d:69:84:bd:a7:3c:8a:8c:4b:bb:d4:
1e:30:83:b7:78:1a:37:45:c0:2d:53:5e:27:82:65:bb:00:27:
99:ac:da:b7:e3:37:cb:20:67:21:eb:b1:d7:1b:65:97:c5:c1:
1d:e5:a6:4b:ee:9f:88:93:9c:3e:f2:63:bb:1e:b8:aa:64:e9:
d3:39:98:33:c1:fe:1f:2a:ea:cd:f5:7d:f1:47:df:26:54:d7:
0e:1e:46:b0:ce:4c:ed:6d:57:25:1e:85:84:ec:ab:81:5d:c6:
c2:16:eb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:19:49 2026 by rpki-client