Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27CD75321E0C11F190B1F779DAE4EC9C.roa
File: 27CD75321E0C11F190B1F779DAE4EC9C.roa (raw, json)
Hash identifier: DLUK3cb2t4rrbcmIEpucvWQKxuEqPBHXKDcVFrdG+c0=
Subject key identifier: 54:72:CF:D5:33:B7:6A:1A:37:43:09:E1:11:60:3A:8E:22:24:0A:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF0E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27CD75321E0C11F190B1F779DAE4EC9C.roa
Signing time: Thu 12 Mar 2026 12:08:19 +0000
ROA not before: Thu 12 Mar 2026 12:08:12 +0000
ROA not after: Thu 16 Apr 2026 12:08:12 +0000
asID: 22773
IP address blocks: 154.202.29.0/24 maxlen: 24
154.202.112.0/24 maxlen: 24
154.202.113.0/24 maxlen: 24
154.202.114.0/24 maxlen: 24
154.202.116.0/24 maxlen: 24
154.202.137.0/24 maxlen: 24
154.213.192.0/24 maxlen: 24
154.213.200.0/24 maxlen: 24
154.213.201.0/24 maxlen: 24
154.213.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114446 (0x1bf0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 12 12:08:12 2026 GMT
Not After : Apr 16 12:08:12 2026 GMT
Subject: CN=69b2acb2-a881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:91:fa:5a:4e:d8:99:12:28:8c:80:7b:ec:
42:19:21:59:35:5d:86:18:37:61:25:23:02:8b:da:
dd:14:3e:57:25:60:07:f7:26:54:52:35:af:67:e9:
6f:2b:b6:36:a0:7a:db:ce:b4:1c:b2:3e:29:cc:15:
79:a5:c0:b9:4c:b0:ac:ed:31:96:bf:93:f7:10:6f:
cc:a8:e8:e5:7f:a6:41:8d:ea:c0:e8:33:66:dc:20:
3a:b0:51:3e:f3:ee:b7:30:ef:68:33:23:94:07:88:
8b:d2:01:72:36:f1:63:27:ed:f4:87:b7:83:16:e6:
31:92:db:38:70:b0:a6:b2:60:dc:b9:20:d0:a8:f5:
53:09:71:76:33:58:d2:13:8f:25:44:a9:2b:ee:45:
2e:3c:5a:62:5b:65:09:9b:45:76:6e:0c:ab:69:b1:
a0:9c:0b:39:5d:a9:15:75:12:30:13:a4:2e:13:e6:
dc:e2:60:02:ff:47:62:dd:94:71:e3:8f:e9:28:1a:
06:98:ce:89:dc:24:2d:be:c7:e5:0a:e6:ad:9f:27:
ce:78:7d:95:33:c1:30:67:ba:11:ef:a9:83:1d:ae:
dd:92:0a:ed:90:6e:3f:5a:c1:66:c2:7e:79:7d:30:
eb:f8:4a:fb:e4:bc:17:c5:6d:a1:f9:a1:01:8d:6c:
61:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:72:CF:D5:33:B7:6A:1A:37:43:09:E1:11:60:3A:8E:22:24:0A:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27CD75321E0C11F190B1F779DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.29.0/24
154.202.112.0-154.202.114.255
154.202.116.0/24
154.202.137.0/24
154.213.192.0/24
154.213.200.0/23
154.213.205.0/24
Signature Algorithm: sha256WithRSAEncryption
41:d2:ae:21:07:da:ad:76:dd:be:b7:5f:1b:69:99:bf:1e:1d:
9e:07:af:d5:b5:40:29:2f:a3:1f:62:06:2a:73:65:b1:df:b7:
f0:b3:f0:bb:de:c2:64:33:2d:55:8e:5c:71:20:17:00:a1:99:
9e:80:87:cf:8d:81:cb:0a:fe:9b:02:d4:c8:54:45:b7:7b:d5:
b4:46:ab:da:b2:b8:23:91:4c:ef:b0:5b:75:05:f0:11:1c:57:
81:fd:37:79:01:83:4e:ba:e9:bd:cc:37:2f:52:0c:05:14:b1:
56:2c:9b:6a:45:6b:7b:68:a7:40:d9:30:45:9b:f1:53:3e:13:
22:91:67:94:91:75:83:ea:2c:17:81:d7:50:b0:b5:34:23:08:
ce:26:16:8d:0f:bf:dc:7f:47:aa:37:b5:21:58:80:7e:f7:4e:
73:63:8f:f5:2c:9c:e1:c6:e4:28:ee:70:6e:89:d3:f3:f1:d6:
f2:51:0a:ea:05:a2:ee:16:9a:cd:c1:87:b8:53:f4:b1:39:84:
6f:3f:90:1d:48:60:35:4b:39:65:bb:6f:28:0b:55:c4:cd:60:
cf:a0:78:ec:d5:8a:dc:a9:8d:35:a1:07:4c:4d:0f:01:e1:76:
4f:cb:ef:1a:d0:1f:e1:9f:93:5a:62:83:6f:46:42:6b:20:12:
93:6d:20:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:19:14 2026 by rpki-client