Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C7B866A243311F1850089E1DAE4EC9C.roa
File: 1C7B866A243311F1850089E1DAE4EC9C.roa (raw, json)
Hash identifier: MiR8A10IPofCspdBdc3EMa13i8OvRclpBTyDkudx8a8=
Subject key identifier: 91:06:EA:51:29:DA:D0:05:8B:C8:B7:A7:F2:70:6E:DE:4D:C1:EF:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BFFC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C7B866A243311F1850089E1DAE4EC9C.roa
Signing time: Fri 20 Mar 2026 08:02:17 +0000
ROA not before: Fri 20 Mar 2026 08:02:12 +0000
ROA not after: Sun 26 Apr 2026 08:02:12 +0000
asID: 63139
IP address blocks: 154.94.82.0/24 maxlen: 24
154.94.102.0/24 maxlen: 24
154.94.103.0/24 maxlen: 24
154.94.104.0/24 maxlen: 24
154.94.105.0/24 maxlen: 24
154.94.106.0/24 maxlen: 24
154.94.107.0/24 maxlen: 24
154.94.108.0/24 maxlen: 24
154.94.109.0/24 maxlen: 24
154.94.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114684 (0x1bffc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 20 08:02:12 2026 GMT
Not After : Apr 26 08:02:12 2026 GMT
Subject: CN=69bcff09-4690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8e:d7:18:c8:17:f3:73:cc:7b:ea:30:d8:c9:
08:69:e5:8e:1a:bc:e7:83:be:5c:39:23:e8:5a:c0:
11:95:a3:6d:38:69:38:51:8d:ff:90:58:43:2d:58:
5c:fe:39:bc:85:e3:45:bf:90:70:e8:9c:b0:cc:4d:
3f:26:85:88:95:4b:9b:de:69:34:1d:88:25:39:a7:
e1:c6:11:02:38:39:40:4c:be:27:c2:12:6a:f1:25:
fd:4b:58:2a:cd:4a:7c:73:0d:13:5e:84:9a:b1:ce:
1d:e3:f6:ae:15:f7:4d:82:13:0e:e5:d6:f7:2a:36:
be:9a:cf:a8:64:63:1b:f8:75:61:19:ac:4f:d1:68:
e5:47:fc:b0:38:5c:54:bb:33:78:15:e4:10:63:4d:
60:fa:7e:53:b5:83:76:10:79:9b:6a:71:79:c3:84:
9a:29:f8:93:d6:87:f1:35:84:b6:c2:a6:0c:ca:26:
6b:fa:df:14:e1:d6:d3:08:c6:cb:76:92:de:da:94:
c1:4a:1e:19:d2:10:b6:92:16:d2:f3:28:9a:af:98:
48:c2:6b:42:35:34:b0:93:85:13:3a:78:83:f3:65:
1c:e4:4b:d4:18:6f:4c:0f:1a:3a:c8:5e:53:da:bc:
ef:9c:aa:be:ff:ba:48:bd:b4:d8:15:85:a1:ae:24:
a3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:06:EA:51:29:DA:D0:05:8B:C8:B7:A7:F2:70:6E:DE:4D:C1:EF:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C7B866A243311F1850089E1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.82.0/24
154.94.102.0-154.94.110.255
Signature Algorithm: sha256WithRSAEncryption
89:a7:f3:e1:b8:90:7e:40:f9:c9:34:6e:2d:90:6b:36:86:e4:
1c:8d:39:91:99:9c:9b:b2:9c:cb:86:f8:68:28:6e:6a:49:50:
c3:11:ea:2a:6d:ac:10:69:7e:37:42:5d:a8:d7:3a:52:39:7d:
f9:a2:67:89:f8:a7:d0:19:df:9c:20:57:53:0f:f4:e2:f5:e0:
36:92:70:77:2c:f2:c0:ae:e6:29:2e:35:c2:66:f4:f4:00:c9:
c2:67:72:83:96:16:97:30:48:88:d0:2c:db:26:7b:11:67:f3:
e4:85:58:5c:c0:03:61:89:37:19:ac:5c:38:1e:71:3e:b7:ee:
57:da:66:27:eb:a6:07:4a:dd:de:b9:de:b5:1d:a9:a1:e4:3c:
6c:7f:6d:f4:f5:61:45:f0:39:f2:47:0e:75:24:9b:16:c8:b8:
fd:b8:19:14:79:7a:9c:56:4d:24:64:68:f9:0f:0f:80:d9:c3:
85:c5:50:9c:77:fe:c3:cc:af:fa:f8:64:94:fe:22:d3:15:b2:
72:be:e7:9f:25:b6:55:ad:06:b3:06:90:0d:0a:e8:85:48:d7:
d7:4f:22:1b:fe:9c:63:2e:52:f2:cd:60:f7:dd:09:c7:c6:b8:
ce:c6:cf:12:11:1d:5f:81:62:06:c7:81:d9:2e:fb:65:93:25:
89:d9:4a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:16:37 2026 by rpki-client