Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19507CFE1F8B11F192DD37B9DAE4EC9C.roa
File: 19507CFE1F8B11F192DD37B9DAE4EC9C.roa (raw, json)
Hash identifier: Zkv4+GeoPo0tRP4A31o9N5zHKHkn480QsGm68KBCQVc=
Subject key identifier: 01:CA:A4:4A:D8:E3:9B:BB:8D:DC:B6:5E:16:46:84:64:AF:FD:BD:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF64
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19507CFE1F8B11F192DD37B9DAE4EC9C.roa
Signing time: Sat 14 Mar 2026 09:49:31 +0000
ROA not before: Sat 14 Mar 2026 09:49:27 +0000
ROA not after: Sun 31 May 2026 09:49:27 +0000
asID: 399077
IP address blocks: 154.91.64.0/24 maxlen: 24
154.91.65.0/24 maxlen: 24
154.91.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Mar 2026 00:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114532 (0x1bf64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 14 09:49:27 2026 GMT
Not After : May 31 09:49:27 2026 GMT
Subject: CN=69b52f2b-99f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:52:53:e6:a9:b9:fe:d2:c8:70:a4:34:91:19:
d8:9d:b9:b0:11:a3:85:91:68:23:6b:87:df:6c:9c:
47:15:2b:5b:cd:83:0e:d2:a3:dc:c7:5d:7c:8c:b3:
8f:2c:0a:bd:64:2f:8b:16:8a:80:bb:ff:92:85:22:
21:7b:7e:ef:64:0a:25:c5:c7:16:82:88:2e:01:8e:
5a:05:17:91:91:fd:3b:e0:9c:c0:22:23:62:7f:0a:
a0:6b:9e:5f:1d:2e:04:18:af:7d:ec:dc:a5:8a:89:
8a:7d:ad:73:82:23:64:3a:eb:1b:0a:cb:7b:5a:79:
73:d8:4c:45:9f:df:53:27:7e:16:5e:30:4a:b8:9a:
4a:9b:1c:77:20:57:e1:7c:d1:7d:2d:70:49:39:c3:
ec:85:c9:27:9a:73:03:05:7d:ff:d7:a6:41:70:1b:
d6:8e:d8:0a:e5:e8:8a:23:04:5a:30:bf:c7:42:4d:
79:4f:e6:c8:10:86:27:1e:c2:40:93:8f:13:40:ea:
52:1a:8a:3a:52:50:ec:05:84:d2:bd:85:c8:3f:fe:
2e:6e:93:0d:8a:56:ca:2d:c7:bd:02:1d:ee:20:f5:
bb:b7:a7:09:24:8e:e6:6a:82:4f:1c:7d:c2:ca:aa:
97:2f:c8:45:e5:23:ac:13:23:ba:ad:3d:ca:86:85:
30:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CA:A4:4A:D8:E3:9B:BB:8D:DC:B6:5E:16:46:84:64:AF:FD:BD:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19507CFE1F8B11F192DD37B9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.64.0-154.91.66.255
Signature Algorithm: sha256WithRSAEncryption
b8:9f:e1:56:a6:72:30:bc:ab:9a:91:16:a2:f2:9c:e2:39:13:
4b:fa:58:b2:22:f9:9b:ef:e0:79:7e:51:23:73:6b:43:66:a8:
65:01:e8:be:22:be:56:b6:a5:4a:79:ff:aa:32:5f:97:ee:52:
7c:5d:ed:fa:44:a7:7f:0b:83:fb:68:41:52:80:d8:93:7a:66:
c2:3e:2a:2b:a1:3a:ea:c9:8a:59:63:18:76:ee:50:6c:bc:f7:
cf:90:94:a4:9b:1c:aa:a2:99:ac:fd:a5:69:24:a5:8c:3b:23:
03:23:f7:99:87:74:fd:00:41:8e:fe:76:3a:ea:f4:b8:26:25:
f0:aa:4b:94:7a:b5:a7:34:78:6a:fe:e3:33:a2:5b:74:51:59:
de:8c:c8:11:79:d7:41:5d:c3:1d:d4:c5:40:9d:86:92:8a:82:
f3:e1:78:4c:88:da:b6:74:a4:5a:c4:94:e4:0c:b8:05:17:4a:
3d:eb:c7:3c:0e:8f:91:66:f1:28:11:df:50:48:47:aa:48:e4:
5e:b5:24:2b:b1:56:f8:fa:5d:53:e4:f1:d5:ca:4d:d9:cd:d7:
a0:74:be:15:f3:14:7e:8a:af:20:80:51:20:90:91:b1:06:4b:
e3:b8:e0:5e:e8:fa:23:4b:07:9c:82:d4:24:02:8c:a8:6c:43:
c4:a4:fa:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 21:28:19 2026 by rpki-client