Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08F17F08274B11F1B929A6E8DAE4EC9C.roa
File: 08F17F08274B11F1B929A6E8DAE4EC9C.roa (raw, json)
Hash identifier: GNIvpZnh9FtrYaU2G+iRzxFB+BubkK2HGg9qlRutlR4=
Subject key identifier: DD:08:A3:01:81:AF:8B:89:68:0B:0F:6D:26:D6:D0:80:E7:89:BF:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C070
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08F17F08274B11F1B929A6E8DAE4EC9C.roa
Signing time: Tue 24 Mar 2026 06:31:06 +0000
ROA not before: Tue 24 Mar 2026 06:31:00 +0000
ROA not after: Thu 27 Aug 2026 06:31:00 +0000
asID: 45669
IP address blocks: 154.80.0.0/17 maxlen: 24
154.81.224.0/19 maxlen: 24
154.91.160.0/22 maxlen: 24
154.91.164.0/23 maxlen: 24
154.198.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114800 (0x1c070)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 24 06:31:00 2026 GMT
Not After : Aug 27 06:31:00 2026 GMT
Subject: CN=69c22fa9-cb49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d9:0c:1e:c5:8f:9c:ea:fa:90:88:9f:eb:c7:
b5:5f:57:31:a5:a4:c4:69:93:59:7d:0f:59:c2:c2:
b2:62:bf:c5:e0:78:10:1e:0f:92:f7:45:9b:15:d6:
f3:0d:32:50:00:3e:3f:89:56:23:88:29:8b:c4:0f:
d7:44:9c:9d:1d:9b:9f:1b:10:61:95:fe:0a:e3:19:
ef:a7:cf:55:9d:40:50:09:e4:10:1b:27:84:2a:5a:
56:de:9b:00:b3:32:d8:0b:60:48:7a:fe:c7:8d:bf:
9a:1d:b8:9f:6a:b8:80:26:51:d3:e3:35:9d:93:07:
9a:63:fc:94:11:34:19:2d:33:2c:28:cf:29:ed:28:
0d:32:8e:46:ac:d2:6a:bd:21:b1:94:ff:6c:8f:a7:
29:33:35:35:7b:1f:b0:37:e0:89:01:13:f5:aa:b3:
dd:34:b7:4e:37:b2:c3:c1:cb:db:d7:37:64:a5:90:
92:4f:bf:e5:1c:e0:ba:d7:33:0e:d3:07:ec:d0:47:
ab:d0:d9:73:78:2c:48:4f:9e:2b:da:7d:c5:a0:bc:
de:98:b4:b2:17:80:fb:87:6f:ef:26:18:50:a8:34:
c5:7b:3e:7e:59:7e:13:88:34:78:5c:30:bd:a7:55:
af:bd:51:c3:80:69:6a:3d:f4:28:fc:43:4f:20:c3:
2f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:08:A3:01:81:AF:8B:89:68:0B:0F:6D:26:D6:D0:80:E7:89:BF:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08F17F08274B11F1B929A6E8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.0.0/17
154.81.224.0/19
154.91.160.0-154.91.165.255
154.198.64.0/18
Signature Algorithm: sha256WithRSAEncryption
20:74:c0:c3:d6:29:74:f6:47:93:bc:85:62:5e:85:e5:39:20:
09:99:fd:9a:a9:a7:dc:45:a5:16:48:2e:dd:15:6a:43:ee:93:
ba:0f:da:38:4c:a9:85:01:a3:53:24:1c:a0:96:80:84:61:91:
c1:3a:2a:5c:a2:11:10:f9:b0:66:68:a0:42:e7:0c:87:1c:d3:
68:60:c0:bf:59:19:68:af:b7:18:be:c6:18:21:84:24:63:8c:
a4:ac:bc:fc:69:39:31:0f:2e:ed:aa:4b:18:73:08:97:24:6c:
dc:b8:b7:1b:cd:61:98:2f:cb:0b:83:40:4f:00:cd:2a:78:f1:
8b:c3:2d:c4:69:0a:80:6a:b2:59:4b:de:a8:4b:8d:6b:ca:4f:
bd:f5:48:7e:fb:7c:b0:9e:08:ac:54:ff:17:42:21:e4:a7:7b:
18:7c:95:d6:ee:2e:72:a0:ca:a5:6f:c4:60:3b:dd:90:be:68:
f4:19:2e:31:91:00:9c:32:ba:91:f7:ec:ee:19:89:05:31:4c:
80:2b:7c:cd:50:9b:8d:c5:ec:23:98:28:fa:27:f2:c3:35:a6:
e8:2f:88:c0:85:55:aa:35:5f:fd:f7:09:4b:ee:71:c6:86:bc:
27:c2:b3:d2:7d:79:d1:b1:79:c9:73:98:59:bc:a6:12:a3:34:
71:ea:2d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:15:46 2026 by rpki-client