Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/382272E81E0211F1B09172C0DAE4EC9C.roa
File: 382272E81E0211F1B09172C0DAE4EC9C.roa (raw, json)
Hash identifier: phXBLdPn+dPmMuy5Y/GJXptWz9bVzV0fDMNuwsLIrkU=
Subject key identifier: E1:B8:C8:BE:47:C5:52:0F:D3:C1:9E:73:AC:DE:59:D6:27:EF:02:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF08
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/382272E81E0211F1B09172C0DAE4EC9C.roa
Signing time: Thu 12 Mar 2026 10:57:11 +0000
ROA not before: Thu 12 Mar 2026 10:57:06 +0000
ROA not after: Thu 16 Apr 2026 10:57:06 +0000
asID: 22773
IP address blocks: 154.85.107.0/24 maxlen: 24
154.85.108.0/24 maxlen: 24
154.85.109.0/24 maxlen: 24
154.85.110.0/24 maxlen: 24
154.85.111.0/24 maxlen: 24
154.85.112.0/24 maxlen: 24
154.85.113.0/24 maxlen: 24
154.85.114.0/24 maxlen: 24
154.85.115.0/24 maxlen: 24
154.85.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114440 (0x1bf08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 12 10:57:06 2026 GMT
Not After : Apr 16 10:57:06 2026 GMT
Subject: CN=69b29c07-bb18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:72:68:63:59:52:f1:05:3d:0d:c9:18:2b:3a:
36:64:85:59:a7:97:7d:e9:26:a7:80:8b:f3:2f:d3:
cd:46:fd:04:06:f6:e2:3f:08:bb:65:ac:79:31:72:
7f:70:31:16:68:72:38:43:f1:5e:81:2e:e4:cc:3d:
36:4d:c8:40:80:40:16:32:ad:e2:1e:cc:12:8c:94:
bb:79:b6:2a:e5:49:b4:ab:7f:7b:3b:1b:e7:3c:7d:
49:f0:89:cd:7d:fc:b6:36:18:02:0e:f5:f5:4d:27:
ca:87:57:ec:99:fe:8d:ef:e5:34:30:e8:48:60:fb:
97:2e:a6:cb:10:75:2c:be:47:af:4d:73:7a:de:b3:
00:9b:ed:bc:a0:50:a9:96:a6:f0:a5:93:db:53:67:
46:c4:3b:ed:6c:c4:de:ba:c4:d3:c2:bc:31:8b:3f:
b0:e9:15:14:25:e9:f5:4c:76:f1:e2:32:ef:5b:ca:
29:e2:b4:f4:28:0e:28:2c:b2:9e:84:14:ec:4f:96:
a1:d3:3f:2e:5d:22:8e:46:d9:26:25:69:3b:56:d0:
df:b5:f3:dc:83:90:1d:5f:40:46:84:26:d6:68:1a:
08:4f:9f:98:64:65:df:c2:96:8f:28:16:f7:8d:6f:
7b:b3:8a:4a:9f:07:cb:e5:33:ef:90:30:47:a3:ec:
4d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B8:C8:BE:47:C5:52:0F:D3:C1:9E:73:AC:DE:59:D6:27:EF:02:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/382272E81E0211F1B09172C0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.107.0-154.85.116.255
Signature Algorithm: sha256WithRSAEncryption
2d:3e:5a:dd:bf:d0:eb:71:27:5a:a0:53:89:55:fa:78:49:50:
b9:d7:7a:b9:40:e6:77:b6:e3:31:13:c1:3b:76:be:0e:28:e4:
e3:8d:cd:4e:1c:ab:b7:fe:43:12:d7:5f:66:8c:ab:e1:b8:fc:
56:41:74:35:9c:77:ea:61:ba:81:b2:a3:e5:8b:8e:e0:0e:b5:
ed:b8:7c:75:ef:58:78:13:21:be:b8:9b:92:3d:a6:60:17:71:
a4:93:80:00:a8:da:a1:f3:22:e4:eb:4d:17:ef:d5:73:0f:74:
a6:98:84:b7:fb:b9:b7:60:2a:6d:9c:22:d2:2c:36:2c:db:2c:
c9:93:bb:2b:f8:5c:e5:e7:71:58:56:b1:2e:f9:5b:6b:6b:06:
69:21:b0:bc:71:87:9d:ab:01:ae:8c:dd:a7:07:33:15:74:83:
3a:4d:1f:3c:ce:8a:1a:2d:5e:5c:3c:15:21:9d:bc:26:09:55:
a0:5c:aa:56:cb:5a:89:e1:af:62:f7:f7:1d:4f:58:13:26:33:
e7:bc:ea:ab:bd:b1:a6:93:6e:87:98:0b:63:59:84:05:d8:6d:
a6:4c:8a:48:66:00:9e:3e:07:e2:b8:b5:65:01:ed:97:bb:33:
1d:e0:39:f5:b7:d0:ea:bd:02:cd:d0:ad:3c:d6:3b:93:ce:eb:
8d:7c:63:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:16:38 2026 by rpki-client