Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3755632A244C11F18E1480EDDAE4EC9C.roa
File: 3755632A244C11F18E1480EDDAE4EC9C.roa (raw, json)
Hash identifier: 4o/uf443Z5oTS5E8yuQLkKz1VMyippbzo7KeplXg6Pg=
Subject key identifier: EE:70:D8:FA:14:B5:08:2F:55:EA:D7:C2:C5:4A:ED:35:A1:20:DA:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C026
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3755632A244C11F18E1480EDDAE4EC9C.roa
Signing time: Fri 20 Mar 2026 11:01:59 +0000
ROA not before: Fri 20 Mar 2026 11:01:53 +0000
ROA not after: Sun 26 Apr 2026 11:01:53 +0000
asID: 140666
IP address blocks: 154.93.87.0/24 maxlen: 24
154.93.88.0/22 maxlen: 24
154.93.94.0/24 maxlen: 24
154.93.100.0/23 maxlen: 24
154.94.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114726 (0x1c026)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 20 11:01:53 2026 GMT
Not After : Apr 26 11:01:53 2026 GMT
Subject: CN=69bd2927-d856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:45:37:ca:6b:dc:6a:a3:94:fe:7f:4e:3e:b5:
b4:cc:84:dc:b3:00:50:3f:90:f3:a2:84:3b:46:b2:
ab:ae:83:16:76:5d:d7:74:17:1d:4c:58:52:a1:9a:
61:0a:0b:c8:4c:e6:eb:f5:d9:7e:83:e7:74:5e:36:
af:a0:b7:67:c1:17:60:b0:24:e2:47:5f:f1:f0:98:
d9:66:fe:a0:fc:3e:27:a9:a7:b8:5b:ba:5d:56:cf:
3d:50:bd:01:9a:4e:31:7c:78:0c:29:e5:cd:c2:e5:
0d:de:33:fc:5d:46:f4:7e:81:18:8c:a1:00:15:c5:
7c:f9:3a:93:1f:38:31:42:93:79:ac:80:50:e1:31:
de:5e:62:8a:8f:a9:b0:0c:a2:07:29:8a:de:7f:99:
98:32:d2:b9:78:78:ff:e0:4d:7e:33:e7:94:e8:ce:
c7:b8:0a:bc:2d:4d:0b:82:c4:67:e3:5f:da:8b:41:
ee:34:fe:38:75:3a:14:da:e7:34:7a:b3:68:2c:91:
cb:f8:a0:59:50:26:0f:d1:1f:bc:81:2d:1a:ce:62:
c9:18:b8:2a:27:f6:df:1c:8a:c9:51:e2:dc:10:7a:
ca:33:a3:d5:d4:3e:0c:07:02:bc:03:6c:c8:51:9f:
53:7d:a9:34:35:10:7c:07:99:43:9e:4a:71:4b:1e:
c4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:70:D8:FA:14:B5:08:2F:55:EA:D7:C2:C5:4A:ED:35:A1:20:DA:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3755632A244C11F18E1480EDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.87.0-154.93.91.255
154.93.94.0/24
154.93.100.0/23
154.94.68.0/24
Signature Algorithm: sha256WithRSAEncryption
62:24:ad:8d:31:58:7d:6f:2e:1e:c9:7f:ec:1b:42:0b:12:aa:
57:80:03:ed:71:b2:97:7d:6f:a6:65:fa:ea:f6:29:1e:ba:61:
76:14:0b:d0:14:42:02:cd:f3:af:8f:da:00:7b:64:a4:2f:ef:
5a:a0:14:34:e1:14:e1:4c:a8:54:a0:87:32:a4:65:0f:aa:6b:
d7:8d:5f:43:1b:42:da:63:81:e9:20:e3:17:7f:54:f6:f6:ee:
d5:c5:e2:cc:36:92:ad:36:df:b2:3b:3c:b3:84:e2:c1:a1:28:
28:bf:d3:59:fe:d4:92:c2:47:b3:e8:42:a2:da:d3:41:11:21:
af:53:7f:5d:ad:2c:24:0e:6d:69:25:04:e8:e5:89:38:66:a8:
39:fd:f1:21:ed:f7:07:59:b1:ea:4c:33:c7:18:93:01:73:b2:
3c:6a:42:9f:7d:f0:93:85:4f:9b:15:7c:1f:f6:70:6c:85:b8:
8f:f6:32:10:ba:9f:e8:da:65:36:d8:cb:db:f5:0f:12:9c:a9:
26:9c:f2:ab:d5:78:57:56:c6:24:31:15:53:bc:4e:cc:20:ed:
83:a0:61:4e:a5:6a:df:1f:3e:e3:a9:72:4b:c9:a7:8e:25:a1:
16:13:55:cb:72:49:09:e3:f4:7e:99:99:37:c5:0c:ed:6f:16:
4c:55:b6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:16:08 2026 by rpki-client