Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E0774F619FA11F1BA560ABADAE4EC9C.roa
File: 0E0774F619FA11F1BA560ABADAE4EC9C.roa (raw, json)
Hash identifier: AvVwQyfl21795Jp8+UcJmTxK/YS+2bhipCQLnKBs+qI=
Subject key identifier: B6:53:FB:32:4D:CF:C9:BF:94:DD:3E:51:5E:4B:D2:9B:75:AB:91:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE2C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E0774F619FA11F1BA560ABADAE4EC9C.roa
Signing time: Sat 07 Mar 2026 07:48:40 +0000
ROA not before: Sat 07 Mar 2026 07:48:35 +0000
ROA not after: Thu 04 Jun 2026 07:48:35 +0000
asID: 136970
IP address blocks: 154.92.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114220 (0x1be2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 7 07:48:35 2026 GMT
Not After : Jun 4 07:48:35 2026 GMT
Subject: CN=69abd858-d704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2b:f6:5a:55:2a:d1:3b:6c:30:d9:b3:58:ae:
ce:4e:ae:35:dd:51:13:aa:9c:db:2b:de:c6:80:ce:
12:71:1a:69:ef:8a:d3:11:9a:64:f4:8c:40:53:2d:
05:f5:88:90:a7:38:7f:bf:21:d3:a4:1b:35:30:bc:
b6:c8:c5:6f:6c:f0:35:bc:9c:fe:9c:19:a5:99:f1:
cf:55:29:79:48:fa:5f:b3:ba:c7:69:ff:72:55:d8:
68:27:20:03:64:d1:a6:81:cd:5c:a1:17:1b:e4:48:
5f:43:73:6d:e8:a8:ef:6b:80:95:14:d1:13:9b:0e:
0b:03:18:8c:81:4f:76:69:92:f9:e5:b4:dc:6b:18:
d9:da:c2:bd:06:49:d2:9a:44:18:25:58:ee:fb:d3:
ff:36:39:17:b4:1c:9c:93:cf:af:3e:3f:a0:72:ab:
81:87:09:49:e0:fe:65:9e:a3:49:bd:b5:22:3f:d3:
5d:24:ae:03:5c:9b:0d:81:f2:bd:e4:88:fe:8c:ea:
2c:73:55:7a:30:a5:68:89:de:f6:de:ea:6d:07:d5:
f6:02:8e:b8:4f:ae:88:74:62:72:08:8e:34:e3:82:
d2:0e:f2:da:4e:1b:8e:b9:a2:2b:e1:6f:c3:59:b3:
b8:3d:14:f8:fe:64:ff:72:b3:b2:10:0d:bc:f9:37:
48:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:53:FB:32:4D:CF:C9:BF:94:DD:3E:51:5E:4B:D2:9B:75:AB:91:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E0774F619FA11F1BA560ABADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.20.0/24
Signature Algorithm: sha256WithRSAEncryption
36:c9:eb:9c:b4:a1:2b:e0:6d:96:60:49:64:0d:36:99:53:ae:
ce:ac:3e:1d:f5:b7:47:70:a6:c5:8d:c3:51:7e:7e:9d:6f:ce:
73:7f:2c:a8:d6:5f:0e:d8:74:74:83:a2:46:30:64:d4:aa:f1:
37:50:5f:84:a0:96:9e:1d:a4:bc:f8:c8:0c:8b:10:16:02:61:
11:35:9b:65:05:a0:51:2e:56:e9:8a:b0:9e:c8:82:33:a9:7a:
6b:f6:88:82:57:84:9e:3a:14:5a:bd:65:95:20:92:cf:c1:7c:
1f:ee:42:d5:49:01:53:38:33:4c:01:eb:aa:d8:63:06:6e:1e:
d3:2d:41:12:52:5b:e8:d5:2f:81:d3:bc:84:ff:b9:41:65:b5:
df:4b:f2:83:f2:4a:bd:8a:01:9c:ad:e2:00:66:6f:4c:19:da:
7d:b8:28:cf:9a:ab:31:36:f2:2e:d8:05:b6:eb:66:cd:32:61:
36:5e:da:fd:c5:95:cd:14:cf:ce:77:c3:ba:48:50:18:fd:0f:
a5:5f:b3:e8:10:5c:59:db:6e:ce:25:b2:c3:31:92:d4:60:a8:
a3:ac:89:9d:40:b4:c6:f4:91:97:b2:b5:94:9c:25:79:16:fa:
ae:be:3c:6f:88:62:91:08:79:4d:50:56:3f:42:f3:62:30:64:
a5:a2:76:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 13:21:43 2026 by rpki-client