Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/460668CC162A11F1ACC80BC1DAE4EC9C.roa
File: 460668CC162A11F1ACC80BC1DAE4EC9C.roa (raw, json)
Hash identifier: jLPi71Al3VmfMyexw3XtItJxFjy3ggaWF/mK3Wt6s90=
Subject key identifier: C3:55:4D:1C:50:0C:3A:62:CB:F7:C5:5B:FE:F4:85:D7:12:D0:C8:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BCF3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/460668CC162A11F1ACC80BC1DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 11:23:44 +0000
ROA not before: Mon 02 Mar 2026 11:23:40 +0000
ROA not after: Fri 02 Mar 2029 11:23:40 +0000
asID: 17561
IP address blocks: 154.80.2.0/24 maxlen: 24
154.80.3.0/24 maxlen: 24
154.80.4.0/24 maxlen: 24
154.80.5.0/24 maxlen: 24
154.80.6.0/24 maxlen: 24
154.80.7.0/24 maxlen: 24
154.80.8.0/24 maxlen: 24
154.80.9.0/24 maxlen: 24
154.80.10.0/24 maxlen: 24
154.80.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113907 (0x1bcf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 2 11:23:40 2026 GMT
Not After : Mar 2 11:23:40 2029 GMT
Subject: CN=69a57340-6a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:22:06:6e:31:65:05:8b:ab:ff:f0:b8:e2:
67:0d:1c:ab:67:43:f6:85:40:32:c3:fe:67:cf:06:
7a:c9:15:06:40:d1:d4:58:c9:cf:d2:13:58:e9:c0:
bb:4b:d4:71:4e:45:c5:18:81:94:b9:9f:b1:ac:05:
73:38:94:ef:f4:b5:ca:9f:9a:ca:0f:b3:53:19:b9:
a3:f8:fa:6a:6b:f6:d2:a1:79:c1:99:77:54:78:b4:
05:c7:c0:ee:d7:16:79:63:06:19:02:8d:01:66:b6:
cf:94:0b:f4:22:e7:9b:50:a7:e4:35:4c:bb:ad:8a:
da:3d:6f:01:ee:54:17:6f:40:22:0c:27:99:97:89:
e0:f2:b8:a4:0e:a7:4d:b6:63:43:32:5f:df:59:35:
ef:db:bf:96:47:ed:47:83:2f:d0:21:9b:f2:28:79:
68:10:47:a9:d1:8f:cd:03:11:f9:02:08:64:a2:ce:
56:1a:4b:72:00:ad:de:b6:ae:33:ca:16:69:5d:5f:
b3:1c:ea:78:02:a5:a0:ba:f6:a7:76:db:82:de:b3:
30:0e:55:20:a4:e4:7a:56:94:c7:f0:e9:53:e0:4e:
8f:91:b7:32:2d:08:2f:90:d5:16:e8:4f:a3:37:76:
c4:a8:69:76:52:73:c6:0e:62:97:1a:ce:0f:bb:ee:
cc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:55:4D:1C:50:0C:3A:62:CB:F7:C5:5B:FE:F4:85:D7:12:D0:C8:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/460668CC162A11F1ACC80BC1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.2.0-154.80.11.255
Signature Algorithm: sha256WithRSAEncryption
c6:4b:64:e9:05:2e:c5:0d:bf:4b:19:44:98:f4:c3:83:92:60:
5a:3e:75:b8:dd:7c:b6:d0:a3:d8:3c:4c:93:b1:42:45:42:e5:
d3:e9:2b:94:78:fb:1e:60:7b:ec:7b:e3:47:f0:f5:f1:18:d8:
76:8e:b2:e5:31:4f:b8:e0:29:04:50:a3:05:d1:bb:26:6f:20:
2c:90:61:fd:2a:96:2f:da:84:79:60:27:2e:d0:33:4e:79:0c:
86:48:1f:ad:c6:76:a7:e0:e9:99:92:88:b2:fb:ad:f5:a5:96:
40:d4:e7:3d:0d:05:03:00:9b:9c:64:a8:51:49:8f:41:e0:74:
2b:bb:be:84:bd:7f:24:9a:94:d6:9b:b0:63:4c:5b:34:72:02:
65:28:9e:42:6d:24:5e:7d:a1:e3:7d:c6:8d:cd:f1:66:06:35:
fd:ea:2d:e9:6d:35:bb:5b:4e:7d:83:af:7d:13:3e:a2:71:db:
9a:ec:42:5e:54:3d:92:ff:75:2a:f3:13:3d:02:08:54:a6:a7:
7b:7c:32:ef:1b:90:8d:e0:d6:f4:83:38:66:3a:0d:35:d5:e9:
6c:c7:b6:7f:df:8c:b5:58:4f:29:77:33:b8:6a:7b:71:a1:49:
ce:fb:d0:58:80:94:74:44:01:d2:cc:b5:0f:ba:ef:ea:fe:17:
b4:87:22:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:15:47 2026 by rpki-client