Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EF9B26419F711F1B62672A9DAE4EC9C.roa
File: 0EF9B26419F711F1B62672A9DAE4EC9C.roa (raw, json)
Hash identifier: M0XCRwFuoOvYQ9Qv9tazq1svCq6PECxKDU7HhZkvTAQ=
Subject key identifier: AD:9D:1F:3F:AF:FC:C2:19:D7:72:ED:D4:76:2B:B9:F0:C7:97:D1:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE24
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EF9B26419F711F1B62672A9DAE4EC9C.roa
Signing time: Sat 07 Mar 2026 07:27:13 +0000
ROA not before: Sat 07 Mar 2026 07:27:08 +0000
ROA not after: Thu 04 Jun 2026 07:27:08 +0000
asID: 142403
IP address blocks: 154.209.4.0/24 maxlen: 24
154.209.5.0/24 maxlen: 24
154.211.12.0/24 maxlen: 24
154.211.13.0/24 maxlen: 24
154.211.14.0/24 maxlen: 24
154.221.16.0/24 maxlen: 24
154.221.17.0/24 maxlen: 24
154.221.18.0/24 maxlen: 24
154.221.19.0/24 maxlen: 24
154.221.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114212 (0x1be24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 7 07:27:08 2026 GMT
Not After : Jun 4 07:27:08 2026 GMT
Subject: CN=69abd351-a10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:70:eb:4e:5d:64:27:5b:9d:88:68:0b:3a:74:
c9:aa:d9:a9:cf:16:9c:cf:33:b7:9c:cb:c2:d9:6f:
bf:bd:8f:13:1a:98:ae:a8:34:7e:62:cc:d5:ec:08:
1b:c8:ce:a2:00:eb:15:d0:a1:27:d7:7e:79:97:f4:
32:28:b3:02:b6:71:21:26:20:52:c4:72:09:0d:28:
80:35:27:ae:eb:44:5d:e5:85:2f:d5:95:26:39:97:
e6:b4:40:79:4c:ec:0f:89:ad:07:34:b7:19:ad:e6:
07:f3:d2:0a:93:a8:bb:81:f4:bf:03:61:8b:4c:c0:
08:16:e6:1a:3b:8b:4c:06:f9:63:45:ba:10:b6:48:
ae:81:cb:87:3d:61:66:5c:76:a3:f8:2b:6f:de:c3:
ea:45:6a:d3:62:0e:0e:5b:99:e0:8e:75:ed:77:3a:
ca:77:a7:06:80:cc:7d:b0:d0:d1:dd:50:35:df:80:
2c:1b:01:23:da:06:f0:1d:83:24:2f:07:56:2e:06:
44:5d:2d:95:0b:1f:ed:b6:a2:04:c7:aa:3b:e1:62:
ef:3e:cf:82:c9:14:59:c2:51:bd:0f:69:c6:c3:bc:
cf:8c:c4:ed:32:12:3b:c1:ec:22:0b:07:ce:4a:2a:
6b:dc:ea:ff:91:62:b1:4b:d7:9f:44:f1:39:4c:b1:
e4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9D:1F:3F:AF:FC:C2:19:D7:72:ED:D4:76:2B:B9:F0:C7:97:D1:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EF9B26419F711F1B62672A9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.4.0/23
154.211.12.0-154.211.14.255
154.221.16.0-154.221.20.255
Signature Algorithm: sha256WithRSAEncryption
33:29:91:9a:cf:a4:53:57:61:25:fb:26:89:d9:81:c8:e7:b1:
7e:74:a7:5a:c3:e3:70:38:e3:7c:c5:ce:f1:54:b7:67:7f:f9:
14:7c:8d:60:ba:89:21:78:f5:4f:dd:cf:eb:8f:c3:ef:00:2f:
00:4f:75:ee:9f:5c:04:cd:0c:59:aa:0b:57:c8:18:a2:46:18:
14:7c:5a:46:6b:c0:9b:24:44:17:57:6e:f5:d3:dd:af:8d:16:
1b:30:17:31:44:b4:aa:9d:df:46:34:6f:1a:e9:95:4a:08:16:
d8:81:de:31:fa:eb:e7:4e:1d:ba:c6:51:b4:b7:ca:74:6b:66:
f8:96:d7:96:db:78:93:f9:5d:83:dd:ec:f9:bd:14:eb:b1:8a:
e2:00:b1:c4:b4:f0:16:fa:4f:50:59:98:b0:37:94:35:d3:3d:
5c:27:a6:1a:95:5a:92:14:4f:bb:05:0e:8e:17:c7:f9:7d:f2:
b9:c7:9d:5e:a5:b5:65:1f:ab:b0:c8:50:25:c7:3a:fc:0a:d3:
48:26:1c:1b:7e:1e:54:af:01:91:c0:84:e7:e2:9b:46:c0:db:
df:81:20:3f:16:26:07:20:f7:e2:6e:0b:be:4f:24:03:3b:57:
cb:12:85:c4:29:a5:4e:db:42:11:40:34:b2:1b:b5:f0:21:d1:
03:2d:8b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:20:35 2026 by rpki-client