Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58E6765C192D11F1A1A627CCDAE4EC9C.roa
File: 58E6765C192D11F1A1A627CCDAE4EC9C.roa (raw, json)
Hash identifier: 6rcaNM3WkyqNPb2dpexEREQsah8VjTAE+SV9udC8v3Q=
Subject key identifier: 64:B8:A2:E4:47:83:DF:A5:3E:90:27:E7:AD:2B:DF:3C:61:3C:3B:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BDE5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58E6765C192D11F1A1A627CCDAE4EC9C.roa
Signing time: Fri 06 Mar 2026 07:23:18 +0000
ROA not before: Fri 06 Mar 2026 07:23:13 +0000
ROA not after: Mon 13 Apr 2026 07:23:13 +0000
asID: 17497
IP address blocks: 154.196.184.0/21 maxlen: 24
154.211.128.0/19 maxlen: 24
154.217.232.0/23 maxlen: 24
154.217.232.0/24 maxlen: 24
154.217.233.0/24 maxlen: 24
154.222.140.0/22 maxlen: 24
154.222.140.0/24 maxlen: 24
154.222.141.0/24 maxlen: 24
154.222.142.0/24 maxlen: 24
154.222.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Mar 2026 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114149 (0x1bde5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 6 07:23:13 2026 GMT
Not After : Apr 13 07:23:13 2026 GMT
Subject: CN=69aa80e6-6059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c1:e1:8e:88:d8:50:66:c2:81:8d:9a:54:cd:
83:d0:08:9f:90:af:a9:fc:40:33:75:c4:40:ff:bf:
c5:9c:31:96:0e:0f:44:ca:cd:30:4d:58:e3:7c:54:
66:d5:d3:df:5e:66:c4:ab:9a:e8:99:2d:20:8f:84:
37:93:7c:e5:6f:b9:25:5f:f6:39:f4:81:74:5d:f8:
59:f6:44:2f:7b:b4:52:f3:69:9e:0a:22:24:70:5e:
9f:ec:3a:47:56:c8:9c:46:5d:fe:71:c6:1d:88:9e:
6a:0b:22:84:56:d2:1d:18:54:62:97:62:79:62:7c:
bf:eb:c6:0c:b5:cc:a6:f0:07:a9:e8:d1:80:c8:eb:
68:85:03:08:5c:d8:81:85:83:3e:56:59:4a:7f:d3:
9d:29:93:b0:e6:a3:c2:69:c1:bf:08:c6:6c:53:2d:
ca:15:fe:60:36:63:d1:7b:0a:36:e7:88:88:19:2c:
8d:d3:ed:61:04:9a:97:a8:81:91:4a:81:bd:c4:25:
76:e8:4f:cc:3b:59:59:f1:6b:20:b7:1f:dd:3c:b3:
c3:86:c1:07:8a:60:fb:e7:29:04:03:8b:a5:21:c8:
07:07:ef:8d:e2:ae:a9:76:9f:ba:60:a3:d1:8b:f1:
7a:f2:d6:2c:01:88:c8:d1:69:63:f3:7e:a6:6e:3c:
02:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B8:A2:E4:47:83:DF:A5:3E:90:27:E7:AD:2B:DF:3C:61:3C:3B:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58E6765C192D11F1A1A627CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.184.0/21
154.211.128.0/19
154.217.232.0/23
154.222.140.0/22
Signature Algorithm: sha256WithRSAEncryption
45:ec:09:46:cb:59:a3:e7:d8:1a:4f:1f:97:0a:01:de:b2:34:
aa:e6:eb:f7:ee:54:8a:17:59:59:41:fa:97:7d:a3:20:3e:ba:
1d:f5:ed:0c:9f:de:b1:63:81:ef:3a:e5:6e:3e:91:84:d6:8e:
a0:ce:03:d1:3f:bd:f1:6d:86:9e:d7:a7:29:64:af:1c:49:1c:
98:c9:85:68:75:30:69:0e:19:c2:15:76:f0:e4:ce:fa:90:30:
0d:ab:76:51:f6:b5:54:b0:6d:74:38:ae:82:f8:6d:f4:92:d9:
0f:82:99:d9:60:36:43:c0:07:c8:54:04:16:8c:b6:12:c9:f6:
e1:e5:50:29:0e:c5:f3:da:26:51:75:22:d8:3b:fa:39:22:9a:
bb:f1:6a:d2:3a:28:f3:22:fb:a3:d6:45:36:c1:c5:97:d0:d0:
25:f4:f5:85:d5:56:59:75:65:58:dd:1f:de:cf:af:92:c9:e9:
34:f3:54:a6:ab:23:53:bf:2d:f3:85:86:eb:67:2e:54:53:b9:
e7:82:23:96:f1:de:c7:8c:59:b2:5b:ca:4d:7e:e7:70:bf:16:
3d:e7:9c:69:5f:08:ce:1a:7c:f5:d0:fd:9f:52:28:69:3a:b9:
a3:0d:96:35:a1:70:0d:6f:39:c8:cb:e5:d4:d4:07:30:09:74:
fc:1b:fa:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 09:28:49 2026 by rpki-client