Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19E3404A1E0311F1999512C6DAE4EC9C.roa
File: 19E3404A1E0311F1999512C6DAE4EC9C.roa (raw, json)
Hash identifier: OR8/SDuD18XqtgUJEOcYvecoDnbGGqpO2AFKBdeWRYE=
Subject key identifier: 3D:0B:68:F4:C7:E9:5C:82:49:F2:7A:4B:2D:CF:2C:7B:0F:12:76:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF0A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19E3404A1E0311F1999512C6DAE4EC9C.roa
Signing time: Thu 12 Mar 2026 11:03:30 +0000
ROA not before: Thu 12 Mar 2026 11:03:25 +0000
ROA not after: Thu 16 Apr 2026 11:03:25 +0000
asID: 22773
IP address blocks: 154.85.117.0/24 maxlen: 24
154.85.118.0/24 maxlen: 24
154.85.119.0/24 maxlen: 24
154.90.2.0/24 maxlen: 24
154.90.3.0/24 maxlen: 24
154.90.4.0/24 maxlen: 24
154.90.5.0/24 maxlen: 24
154.90.6.0/24 maxlen: 24
154.90.7.0/24 maxlen: 24
154.90.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114442 (0x1bf0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 12 11:03:25 2026 GMT
Not After : Apr 16 11:03:25 2026 GMT
Subject: CN=69b29d82-4215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fd:73:ec:73:1f:9b:7c:00:91:57:ed:f0:65:
3f:60:e1:e2:35:82:ea:39:6c:b3:7b:25:63:4b:70:
2b:d6:da:7a:de:64:c7:f5:8c:ff:a6:78:8c:a5:74:
47:3a:fa:31:4d:04:38:9b:30:91:8e:95:92:d9:66:
af:a7:e0:34:f9:79:24:a1:0d:82:59:fe:5d:82:df:
f4:05:ab:04:50:6b:01:7b:ad:c0:b4:cf:19:d4:83:
fb:60:53:25:7b:2e:46:f1:f5:07:23:29:d5:10:fc:
d6:2b:f3:42:62:7a:36:df:d2:29:60:16:8a:d6:c0:
30:78:e1:55:99:b5:f3:6f:7b:55:09:c5:a3:d2:9e:
4a:84:97:06:84:d5:98:32:bd:40:9f:8d:66:53:6c:
0e:70:85:53:c6:83:fc:d3:07:ca:4d:f2:ec:8a:c5:
ae:6a:3b:51:68:8e:7a:9f:84:e0:45:a5:87:b8:7e:
f6:7e:33:b2:be:79:00:0b:9f:79:82:55:77:6a:24:
67:e8:a2:65:e4:d3:71:ad:31:26:dd:ba:4e:87:8b:
dc:44:30:94:d8:c5:36:18:5c:04:ec:7c:ad:13:28:
e6:c4:44:91:04:f6:dd:d7:d0:46:c0:1a:34:21:26:
89:01:6a:d1:c7:07:da:3e:17:a9:96:5d:c3:40:07:
84:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0B:68:F4:C7:E9:5C:82:49:F2:7A:4B:2D:CF:2C:7B:0F:12:76:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19E3404A1E0311F1999512C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.117.0-154.85.119.255
154.90.2.0-154.90.8.255
Signature Algorithm: sha256WithRSAEncryption
bd:1d:b3:85:55:aa:9d:d6:10:cf:37:47:bf:84:da:d7:0f:16:
c7:3b:b4:64:07:53:af:20:00:01:65:f0:32:7b:0c:79:2f:31:
72:b3:e1:c2:d7:b5:96:79:c1:15:01:4d:aa:e9:28:29:30:5e:
b2:f5:26:f6:44:4a:cc:1a:f9:88:40:d7:65:a7:24:48:c7:42:
fe:a5:f2:0e:6c:a1:51:d4:f3:83:fb:ee:79:dd:d2:f8:68:b7:
f1:6f:40:c9:74:cc:62:4a:0d:1b:4e:68:93:cf:00:06:10:f7:
fc:2d:43:db:3d:7c:0b:da:e8:90:1e:71:bc:09:4a:9b:5c:f8:
63:f4:cf:3d:6d:df:33:b2:f9:89:b8:13:29:88:d5:dd:fa:b3:
48:9d:cf:5d:46:53:13:61:76:fc:82:ec:74:89:e2:bb:bd:2e:
0e:ea:bb:b7:76:64:6c:8b:7c:d0:40:dd:5d:73:19:c2:d0:e9:
ce:1c:1e:e1:ca:1f:4c:ec:7c:f9:7b:2d:91:2d:26:59:ed:03:
7a:a8:0c:18:b4:8e:a9:eb:69:70:5b:8e:63:37:2d:25:62:e6:
ec:4c:2d:c2:77:ff:63:81:e0:54:73:df:2b:86:4d:43:d4:f7:
ef:10:f3:80:62:be:81:05:b0:2a:ca:da:72:16:e5:6f:e2:6f:
28:ac:30:34
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Mar 24 16:19:48 2026 by rpki-client