Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1841B2921E5011F1A19C127EDAE4EC9C.roa
File: 1841B2921E5011F1A19C127EDAE4EC9C.roa (raw, json)
Hash identifier: xPnPjpNa3vqJ9oaz5rC3KXZWECLXH9/7z9h80clcHcs=
Subject key identifier: 1E:67:CB:FA:24:3E:CC:07:BC:21:84:F2:96:0C:BC:5A:FC:C9:BF:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF32
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1841B2921E5011F1A19C127EDAE4EC9C.roa
Signing time: Thu 12 Mar 2026 20:14:38 +0000
ROA not before: Thu 12 Mar 2026 20:14:33 +0000
ROA not after: Thu 16 Apr 2026 20:14:33 +0000
asID: 22773
IP address blocks: 154.202.78.0/24 maxlen: 24
154.202.79.0/24 maxlen: 24
154.202.80.0/24 maxlen: 24
154.202.81.0/24 maxlen: 24
154.202.82.0/24 maxlen: 24
154.202.83.0/24 maxlen: 24
154.202.84.0/24 maxlen: 24
154.202.85.0/24 maxlen: 24
154.202.88.0/24 maxlen: 24
154.202.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114482 (0x1bf32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 12 20:14:33 2026 GMT
Not After : Apr 16 20:14:33 2026 GMT
Subject: CN=69b31eae-0fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3b:80:df:eb:31:6e:7d:4d:c6:3a:64:3b:75:
6e:59:c2:7d:81:fd:6d:31:9c:27:11:d7:2a:a9:23:
bc:84:a3:a8:28:d0:8b:25:dd:1f:06:59:6a:2f:74:
47:26:44:5b:13:65:3e:1b:39:f7:c4:e0:18:90:6d:
97:1d:39:15:6a:9e:8e:42:d5:9e:15:ca:82:6f:58:
08:a3:ca:0f:72:3c:d9:07:0d:8d:66:f3:6d:d8:c0:
80:f5:df:c7:78:db:2b:f2:0f:df:62:58:d2:46:48:
3b:5c:0e:5c:ef:3f:9b:1e:3d:b2:eb:0f:d4:f6:b8:
4f:9d:35:61:a4:4f:6a:20:c6:71:ff:33:82:ff:88:
41:27:06:b7:31:dd:3e:e2:2e:9e:83:f7:77:4d:7a:
bf:82:33:9a:60:1b:09:da:43:e1:2a:a9:af:4b:ef:
12:e5:88:7b:9f:71:7c:f5:af:fe:a5:63:d2:4e:cc:
ea:16:3d:4d:2c:06:cb:d7:7d:e6:06:54:c7:de:88:
6d:25:b4:74:31:e5:25:38:b0:30:32:be:da:57:b7:
c2:48:3d:39:ff:a3:24:9d:c8:18:48:ff:ab:a0:f5:
b9:aa:84:fe:74:a6:a5:e5:e2:ae:49:44:2f:08:f3:
00:6a:01:25:3a:91:ed:b3:ec:38:12:72:9a:57:87:
6a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:67:CB:FA:24:3E:CC:07:BC:21:84:F2:96:0C:BC:5A:FC:C9:BF:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1841B2921E5011F1A19C127EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.78.0-154.202.85.255
154.202.88.0/24
154.202.108.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:54:3d:c1:43:66:a5:f8:be:03:8f:d9:69:d0:04:67:a2:e4:
a8:12:dd:d6:0b:68:2d:8c:2c:ff:18:4a:a8:d4:a9:60:ad:df:
39:06:5f:69:34:99:19:92:1c:0f:2f:a6:ab:d3:68:e4:11:27:
ad:64:a2:a1:45:e8:6c:6a:7b:8a:c6:24:f2:27:37:39:0f:6c:
b6:e3:25:96:cd:66:20:d6:c4:6f:3f:ee:10:5e:9a:90:89:18:
99:2c:1b:af:33:fb:44:a9:7b:a7:1d:2e:99:f2:55:47:fa:f6:
3b:e6:88:6d:6e:6d:0c:b3:7e:f8:b6:c6:bb:42:f0:ad:d7:e8:
40:3a:ee:1b:4c:42:59:7e:f5:bc:80:f8:f3:fc:68:58:cf:86:
0e:f3:e2:f5:d8:d9:6c:59:ab:30:35:e0:f4:0e:db:b7:f7:2d:
b6:90:b3:0b:f5:b4:1e:45:b6:81:00:be:1a:8f:8e:7d:95:d4:
32:76:57:06:9b:da:45:25:5f:5d:b2:23:55:3e:ff:9f:22:72:
f9:11:db:93:68:56:03:e0:4c:27:4e:93:71:3b:2c:10:27:7f:
3c:12:32:3f:75:e4:8e:a2:33:11:4c:3d:52:41:65:69:5d:fe:
90:65:0c:2f:47:1b:2d:00:10:3d:e0:52:df:37:45:4e:a1:89:
3a:8c:b1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:17:33 2026 by rpki-client