Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19166470161111F19CACBDA8DAE4EC9C.roa
File: 19166470161111F19CACBDA8DAE4EC9C.roa (raw, json)
Hash identifier: 03vVu46Y+Nfj0DhGZptqegLrath0K/QWSHK0H8Ng8Dg=
Subject key identifier: 0D:EA:BA:01:7F:0E:89:26:0B:39:51:A1:B2:48:10:9A:50:7A:17:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BCC4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19166470161111F19CACBDA8DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 08:23:32 +0000
ROA not before: Mon 02 Mar 2026 08:23:28 +0000
ROA not after: Fri 02 Mar 2029 08:23:28 +0000
asID: 17561
IP address blocks: 154.80.122.0/24 maxlen: 24
154.80.123.0/24 maxlen: 24
154.80.124.0/24 maxlen: 24
154.80.125.0/24 maxlen: 24
154.80.126.0/24 maxlen: 24
154.80.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113860 (0x1bcc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 2 08:23:28 2026 GMT
Not After : Mar 2 08:23:28 2029 GMT
Subject: CN=69a54904-aceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5e:7f:3f:31:10:32:78:e2:2e:0a:20:c2:57:
3b:e2:8f:73:81:88:92:d4:d5:4a:d5:09:09:ba:30:
93:d1:b8:b0:bb:c3:35:e7:bc:df:da:98:09:a9:19:
3b:21:a2:37:8d:21:5c:83:93:3c:79:51:41:ed:f9:
95:f7:e0:79:ea:e5:a4:cf:0d:64:d9:f1:69:77:d9:
a0:76:a0:03:80:2f:d1:7a:95:f8:8d:fc:43:94:18:
10:a5:3b:21:2f:f9:57:b2:fb:d0:d4:ab:c8:ba:5a:
9d:77:a2:4e:2f:9b:77:74:33:4b:74:cf:96:b3:cb:
cc:a8:b8:66:77:9d:05:99:a1:45:6b:e4:29:fd:ce:
e6:8d:f2:b7:00:c7:b3:17:b3:e3:ce:6f:92:16:87:
20:41:4f:11:27:8f:6e:46:51:cd:dc:1b:c6:d0:f3:
ef:53:79:16:77:ab:fe:43:fe:d9:60:30:73:d8:f9:
93:95:95:13:98:84:39:e0:45:bd:90:3f:ed:ca:4e:
df:08:f0:80:0a:95:a9:81:2d:ae:7d:fc:cb:7c:75:
10:20:55:d3:2e:e7:57:59:96:88:06:25:39:83:3e:
89:1b:69:a6:4a:a5:73:84:d1:21:e2:84:b8:70:d3:
fe:c0:ab:6f:b8:e8:05:26:1c:db:08:ad:d7:55:00:
e7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EA:BA:01:7F:0E:89:26:0B:39:51:A1:B2:48:10:9A:50:7A:17:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19166470161111F19CACBDA8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.122.0-154.80.127.255
Signature Algorithm: sha256WithRSAEncryption
4e:44:92:fc:9d:a1:02:02:d2:9e:94:69:e7:bd:44:0d:33:42:
df:80:47:a4:bd:44:1a:64:83:3f:af:32:f9:7c:fa:e0:cf:3b:
f0:54:cf:9a:70:eb:38:52:eb:12:6e:96:7a:68:5f:d7:80:4a:
04:0d:bf:16:c8:19:82:94:e5:b2:5e:60:ce:90:71:b3:ea:b9:
dd:35:d7:67:e9:10:a6:62:9a:6d:0f:8b:0f:b3:05:43:fa:b8:
f3:fb:4b:64:89:5b:b6:6b:13:35:f3:c2:20:0c:c7:9c:95:c5:
95:ce:b2:0f:f4:3b:39:a8:f2:7f:34:87:1d:cb:d4:bf:27:ca:
93:d8:e7:33:48:29:fe:1d:31:8d:ea:df:dc:2f:2b:d8:0f:c9:
fc:d4:05:01:d1:0c:c6:bb:5c:df:39:ab:b6:56:37:11:c3:7e:
fb:9a:fe:f6:1c:e1:df:1f:d7:2d:72:26:99:43:64:e6:f2:e7:
bc:98:bc:3f:2b:50:e5:5b:99:5d:d6:28:e4:0d:44:a0:17:25:
6a:4c:6f:9b:81:18:68:68:94:0c:00:30:2f:cb:a4:84:bf:f0:
1f:08:21:1a:85:e7:10:2d:75:e5:58:65:cd:e3:57:2e:ab:71:
0f:a1:16:8e:45:e6:e8:90:b4:0f:53:e2:b9:d8:26:34:ab:98:
d8:e7:08:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:20:35 2026 by rpki-client