Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00EA8264186E11F18D5E76B1DAE4EC9C.roa
File: 00EA8264186E11F18D5E76B1DAE4EC9C.roa (raw, json)
Hash identifier: fBOWbCH2b5A0Otlc1jFc5t5KOGyh29iTN87pExBQQ/4=
Subject key identifier: CD:56:36:A7:E7:E0:06:A1:C3:93:E4:2C:97:8E:C6:29:0C:73:2E:F4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BDB9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00EA8264186E11F18D5E76B1DAE4EC9C.roa
Signing time: Thu 05 Mar 2026 08:33:37 +0000
ROA not before: Thu 05 Mar 2026 08:33:32 +0000
ROA not after: Thu 09 Apr 2026 08:33:32 +0000
asID: 139646
IP address blocks: 154.204.0.0/24 maxlen: 24
154.208.12.0/22 maxlen: 24
154.208.16.0/20 maxlen: 24
154.212.128.0/24 maxlen: 24
154.215.0.0/24 maxlen: 24
154.218.0.0/24 maxlen: 24
154.221.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114105 (0x1bdb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 5 08:33:32 2026 GMT
Not After : Apr 9 08:33:32 2026 GMT
Subject: CN=69a93fe0-2c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3f:dc:a6:4c:8a:aa:19:09:50:76:c0:c5:69:
65:11:42:da:fb:b5:d3:f0:d5:9f:1f:d9:c2:39:46:
68:3c:ff:d4:36:0c:60:27:0b:4f:99:9f:fe:a5:0f:
e0:84:9e:cc:18:10:ce:e7:4d:db:9b:41:8c:8d:7e:
47:0b:2a:03:fa:b6:c6:d4:dc:5f:62:ca:5d:34:2c:
81:84:19:8d:3b:ee:f5:35:26:81:51:e8:e0:fb:8e:
a3:e1:69:ae:a0:e8:33:5b:10:58:2c:f3:44:95:4d:
63:fb:49:28:5e:2d:95:48:74:b3:d2:4f:4c:51:bc:
a4:b1:4c:c9:6e:a1:66:3d:3a:e5:44:7d:6a:e3:fd:
aa:6c:ac:4d:2d:b8:87:53:cf:c9:d2:0d:73:7c:43:
ab:17:e9:5e:55:ed:1f:1a:7c:5a:44:2d:17:5c:af:
06:b6:6f:09:90:2d:ae:4d:15:13:5e:65:25:96:45:
9b:6b:44:73:5c:60:6b:8a:05:a7:9b:01:9c:08:84:
1c:80:00:e0:8a:2b:eb:e4:8a:a0:cd:b0:7e:5a:4d:
6a:ff:41:02:ab:8b:92:f6:9b:e5:ae:e3:23:4c:d4:
ac:66:5a:07:e0:b3:76:7b:55:fe:1f:fa:12:6c:a1:
49:0d:b5:b3:d2:a9:66:85:fb:af:1a:1e:17:cf:46:
8d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:56:36:A7:E7:E0:06:A1:C3:93:E4:2C:97:8E:C6:29:0C:73:2E:F4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00EA8264186E11F18D5E76B1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.0.0/24
154.208.12.0-154.208.31.255
154.212.128.0/24
154.215.0.0/24
154.218.0.0/24
154.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
07:29:04:ff:ff:f5:90:a6:af:0b:2a:e9:1a:05:5e:91:98:d7:
dd:80:41:3b:b3:14:9f:9e:bd:32:f2:b9:15:73:35:ed:ec:e1:
71:fb:5e:ea:ba:3f:f5:12:cc:05:d4:f8:16:7b:da:6b:97:41:
57:b5:32:30:a7:ee:d5:ff:c9:4e:e0:07:19:fc:3c:50:5c:58:
a9:70:b0:f5:54:f2:6b:67:e4:24:a5:92:25:6b:f5:65:56:e9:
d8:fa:9f:e7:91:8d:d7:8e:1a:fb:f3:63:29:87:07:bd:7f:a4:
93:8f:37:e3:c5:74:5c:bd:93:c3:45:d3:82:74:b9:cc:83:7e:
16:f0:04:62:c5:58:fb:af:97:c4:14:8d:58:82:6d:d8:9e:c0:
b3:17:0f:46:3e:f0:6b:42:61:a2:ed:8b:b9:41:73:b9:f9:80:
8f:10:8c:21:61:b3:4b:66:13:73:d3:d4:02:40:82:5c:c1:0f:
20:2b:db:a6:84:fe:01:17:ce:9c:84:f8:04:a3:ae:f5:cf:e9:
9c:63:6e:76:0a:39:30:46:aa:83:4a:15:84:71:ea:e9:73:21:
d0:bc:5a:dd:78:24:fe:58:ac:b0:84:2f:5d:71:7e:c9:1b:a7:
74:a0:d8:46:2c:61:31:3e:b8:cd:63:79:8d:32:a5:78:0b:95:
4f:cc:7d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:17:31 2026 by rpki-client