Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C95BC72244A11F19939B0E1DAE4EC9C.roa
File: 0C95BC72244A11F19939B0E1DAE4EC9C.roa (raw, json)
Hash identifier: /2AkG7Yw7Xpz65CINDYTC43rz3rfjGZR8nYU8U3ciA0=
Subject key identifier: A6:31:EF:48:42:E1:D7:87:A4:C2:5D:98:0A:AD:9C:35:EE:AB:5E:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C01E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C95BC72244A11F19939B0E1DAE4EC9C.roa
Signing time: Fri 20 Mar 2026 10:46:29 +0000
ROA not before: Fri 20 Mar 2026 10:46:23 +0000
ROA not after: Sun 26 Apr 2026 10:46:23 +0000
asID: 138915
IP address blocks: 154.206.64.0/24 maxlen: 24
154.206.65.0/24 maxlen: 24
154.206.66.0/24 maxlen: 24
154.206.68.0/23 maxlen: 24
154.206.68.0/24 maxlen: 24
154.206.69.0/24 maxlen: 24
154.206.70.0/23 maxlen: 24
154.206.70.0/24 maxlen: 24
154.206.71.0/24 maxlen: 24
154.206.96.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114718 (0x1c01e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 20 10:46:23 2026 GMT
Not After : Apr 26 10:46:23 2026 GMT
Subject: CN=69bd2585-511b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:02:73:f0:f6:ed:6c:72:cc:75:6c:ac:29:66:
42:23:11:cb:12:18:57:e3:b4:dd:ec:d3:a0:87:ce:
63:cc:4f:c4:3d:63:4b:81:b7:1e:8d:02:28:15:8d:
de:06:0d:2e:67:42:ad:be:9b:c1:28:0d:d3:2b:57:
72:96:14:61:06:8f:18:b8:c4:df:69:64:d4:78:5e:
3c:7d:cf:3c:58:b3:08:a6:a7:80:1d:8b:44:fd:6e:
5f:b1:e8:90:d6:87:c9:bd:08:8a:03:1e:6a:4c:7c:
73:5b:39:f2:24:c9:4b:fe:32:01:f1:e5:0a:3f:63:
11:2c:4f:ed:c2:b9:5b:d3:14:cc:8c:ac:15:23:86:
2d:76:b8:ba:2e:fe:67:ae:d7:49:bd:82:6f:0a:02:
70:eb:62:a7:9c:a9:a1:37:1a:02:89:58:6c:7a:cc:
9e:6e:1d:eb:1f:0e:b9:83:da:20:81:f7:f7:75:e0:
db:07:c2:8f:0e:2f:e4:4a:e5:02:11:cf:1e:94:cf:
9f:5a:cf:69:60:81:73:81:0b:fa:ac:ad:f4:b6:81:
16:86:5c:7e:16:a1:0f:d0:93:7c:95:dc:1a:47:69:
f1:79:7d:38:45:80:df:02:6e:28:bd:a7:6a:fa:97:
fb:ae:2c:e0:19:ec:74:5b:ab:ba:8d:46:d4:02:35:
da:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:31:EF:48:42:E1:D7:87:A4:C2:5D:98:0A:AD:9C:35:EE:AB:5E:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C95BC72244A11F19939B0E1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.64.0-154.206.66.255
154.206.68.0/22
154.206.96.0/23
Signature Algorithm: sha256WithRSAEncryption
80:f9:b1:aa:a4:d1:63:81:20:a8:21:6a:b4:ca:e1:64:1d:9e:
7a:7a:d0:4d:60:1c:c4:65:fd:40:0e:a2:83:3d:1b:d5:e6:51:
f8:a6:67:2c:5e:5e:b8:4e:ee:d6:44:28:60:ed:67:bd:74:1d:
a3:a0:43:df:fe:cb:71:8f:d1:ff:ca:3d:9b:0b:7b:11:51:ac:
82:77:7b:f0:fd:31:40:5d:c9:e6:09:c7:62:30:9c:bb:3e:ef:
e1:52:77:4f:c0:9e:1b:21:26:b3:57:1b:f7:53:5e:b2:bc:2b:
ca:45:3d:4c:7a:a9:fd:9b:97:d8:36:b7:f7:91:ac:18:6f:df:
d6:da:06:4e:b5:7b:f5:9f:b5:fe:f7:25:d3:bd:dd:79:28:04:
d4:52:92:89:da:0a:a9:58:ef:f1:9e:7e:f4:75:c9:3c:0a:c4:
d2:cb:60:67:c5:78:5f:60:35:b9:2d:68:a2:c2:90:96:6f:a9:
0b:d6:67:1f:64:54:c0:07:34:13:32:62:0e:b4:c2:c0:e6:6c:
7b:8d:aa:79:7d:1c:8b:96:1e:a4:31:78:c3:58:cc:b3:27:5c:
0b:b2:56:bf:03:2d:15:d6:a1:96:c1:b4:ee:61:8c:fe:9c:cb:
93:7d:b5:07:0c:ef:a5:d1:22:6c:8a:43:df:c4:df:25:f6:4c:
7b:6c:4c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:16:06 2026 by rpki-client