Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3349231A239411F195AED1BEDAE4EC9C.roa
File: 3349231A239411F195AED1BEDAE4EC9C.roa (raw, json)
Hash identifier: dZo2yaXTCAnGl11uaLMY/u1UUc37vkBQK/v57Jp1g0c=
Subject key identifier: 1E:B2:94:2B:00:CF:0B:18:5D:3A:CE:BC:AB:1F:6D:A0:98:28:52:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BFE3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3349231A239411F195AED1BEDAE4EC9C.roa
Signing time: Thu 19 Mar 2026 13:04:45 +0000
ROA not before: Thu 19 Mar 2026 13:04:39 +0000
ROA not after: Tue 31 Mar 2026 13:04:39 +0000
asID: 136501
IP address blocks: 154.92.192.0/24 maxlen: 24
154.92.193.0/24 maxlen: 24
154.92.194.0/24 maxlen: 24
154.92.195.0/24 maxlen: 24
154.92.196.0/24 maxlen: 24
154.92.197.0/24 maxlen: 24
154.92.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114659 (0x1bfe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 19 13:04:39 2026 GMT
Not After : Mar 31 13:04:39 2026 GMT
Subject: CN=69bbf46d-f58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5a:e2:e8:b5:e8:ff:15:9d:39:4f:90:dc:b9:
d6:5c:68:4e:24:93:7c:ef:43:01:db:fc:a8:30:1e:
2f:e9:52:42:fa:7d:4c:bf:1f:b7:2d:62:58:e5:dd:
2a:81:19:8a:64:da:6d:af:7d:25:02:dd:18:00:5a:
43:6d:7b:43:43:d9:f8:75:b6:5e:b3:97:ed:92:9e:
e9:79:d2:8d:e9:06:65:82:ef:43:52:e2:e9:88:0e:
ba:bd:55:ab:b2:38:5f:c3:52:58:61:7e:55:5a:14:
ec:f6:13:48:f0:7c:18:0c:bb:42:13:84:e0:eb:08:
ac:09:c3:67:5c:2d:44:ef:4a:43:a9:26:62:f3:47:
93:9c:76:3a:3f:01:0d:f5:9a:54:e3:d1:79:f1:58:
75:75:12:40:71:1d:c6:ae:64:d6:22:89:37:19:df:
cc:e6:fa:4f:ea:60:70:87:eb:df:14:99:e2:ff:23:
84:ba:76:31:84:25:2a:99:3d:94:a0:be:3b:67:9e:
c2:83:aa:80:3a:a4:4c:97:9d:19:e1:40:08:83:6d:
f9:5e:8e:13:4e:36:e7:d8:4d:18:be:3c:c7:b8:1d:
6f:df:11:c0:87:99:0b:7a:fc:b1:cc:3d:d4:12:17:
5b:c2:67:11:b4:79:1b:4c:3b:8b:0a:5a:b5:83:b5:
63:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B2:94:2B:00:CF:0B:18:5D:3A:CE:BC:AB:1F:6D:A0:98:28:52:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3349231A239411F195AED1BEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.192.0-154.92.198.255
Signature Algorithm: sha256WithRSAEncryption
58:be:db:06:93:2d:89:38:5b:66:6a:e7:ac:0a:29:b1:f8:13:
39:e3:0b:b9:f6:55:9d:b4:c6:f6:29:3f:6d:e8:06:0f:77:a8:
da:85:85:00:fc:07:f7:d7:7b:0c:7a:3a:18:a1:c3:92:6e:58:
14:77:14:00:8b:c5:28:c3:14:4f:64:54:7c:c5:bd:4e:c9:54:
52:d6:f5:1d:c9:27:6c:02:c7:da:e8:e1:41:01:8b:c6:0b:09:
3b:b2:00:12:1e:c2:a9:fe:90:32:aa:74:85:11:67:01:1f:53:
4a:40:43:e4:9a:c3:18:06:3f:94:67:1f:4d:e5:46:30:a1:d6:
61:b7:6f:ba:df:f2:19:59:5d:24:e1:d6:e1:97:63:1e:fd:7d:
3d:0e:5a:d4:15:13:aa:4a:52:c6:9a:4c:dd:b4:f2:9f:04:00:
8c:72:9a:7b:67:49:65:9a:8a:ac:6e:51:cb:d0:65:49:1e:6d:
7c:0d:3d:f4:6c:e2:29:e9:7e:15:42:b0:fe:63:98:de:10:a7:
fd:17:14:ab:4b:fd:82:67:11:64:96:9e:97:fb:38:4f:d8:a8:
da:bb:e6:30:3c:35:0a:99:e1:0d:27:34:66:5d:10:15:fb:20:
42:f9:d1:f3:c7:04:66:1c:6a:3b:3f:68:26:be:41:5c:84:31:
dd:2b:a9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:16:39 2026 by rpki-client