Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/630EDF261F8A11F1A2D64DB5DAE4EC9C.roa
File: 630EDF261F8A11F1A2D64DB5DAE4EC9C.roa (raw, json)
Hash identifier: RxljxbBuagzsFVQ2GJFAGIsfeU8CljfJuKmb1Lp4RRo=
Subject key identifier: 18:1F:A4:92:CA:CB:E1:C4:22:67:6B:9D:EA:39:F8:18:B7:17:DD:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF62
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/630EDF261F8A11F1A2D64DB5DAE4EC9C.roa
Signing time: Sat 14 Mar 2026 09:44:26 +0000
ROA not before: Sat 14 Mar 2026 09:44:21 +0000
ROA not after: Sun 31 May 2026 09:44:21 +0000
asID: 399077
IP address blocks: 154.91.67.0/24 maxlen: 24
154.91.68.0/24 maxlen: 24
154.91.69.0/24 maxlen: 24
154.91.70.0/24 maxlen: 24
154.91.71.0/24 maxlen: 24
154.91.72.0/24 maxlen: 24
154.91.73.0/24 maxlen: 24
154.91.74.0/24 maxlen: 24
154.91.75.0/24 maxlen: 24
154.91.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Mar 2026 00:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114530 (0x1bf62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 14 09:44:21 2026 GMT
Not After : May 31 09:44:21 2026 GMT
Subject: CN=69b52dfa-cec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e9:e8:d8:88:39:57:92:31:f2:64:8b:16:c6:
cc:a2:f3:1c:df:33:4f:ee:72:4d:80:a9:74:70:50:
1b:81:14:77:54:3c:52:fd:98:68:db:38:40:fd:a2:
07:8c:e3:38:a1:db:c2:04:90:3d:bd:9a:3e:fd:61:
bd:d3:64:7a:e3:05:fc:0f:a5:9a:4d:0a:d8:de:94:
5f:3d:ed:01:e8:05:b3:48:76:55:9b:bb:4f:31:e2:
79:5a:fc:5c:7f:9e:15:ba:ba:6f:4a:e7:52:0a:76:
58:22:55:b8:fc:f8:c6:fd:16:34:21:5a:a7:41:f1:
f2:ce:37:9b:55:ff:bb:13:ef:8f:19:af:52:0f:67:
00:2e:b4:ba:9f:89:09:6e:a8:3c:de:56:e3:d0:ef:
e4:b1:b7:23:12:97:57:b9:8e:e3:94:c5:13:c0:06:
bf:a9:af:13:f4:14:3f:7d:a6:20:65:8e:ac:2b:7f:
77:30:bf:c4:78:d3:74:25:c0:68:f5:d0:72:c0:1d:
ae:de:34:ba:34:fd:55:ee:ff:0b:83:9d:cf:bb:2b:
a3:15:c0:dc:0f:c6:cf:a1:9f:40:16:58:bd:9b:4b:
a0:e4:81:88:b3:5f:5d:7b:a2:fa:de:f0:f3:f6:7c:
83:8f:62:d0:85:4b:ce:f4:98:eb:da:53:0a:13:e6:
58:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1F:A4:92:CA:CB:E1:C4:22:67:6B:9D:EA:39:F8:18:B7:17:DD:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/630EDF261F8A11F1A2D64DB5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.67.0-154.91.76.255
Signature Algorithm: sha256WithRSAEncryption
5b:a4:db:54:a6:52:98:c8:87:12:9a:b7:dd:e5:81:1a:ed:f9:
bb:84:91:8e:01:cc:8b:9b:a9:46:69:74:10:6c:dc:43:d7:b2:
9c:e3:cc:d1:b9:bb:8c:66:08:f7:51:00:a8:8e:c5:e9:74:7d:
1f:61:2f:7c:d2:5e:e5:55:e6:2a:f6:15:6f:1d:83:ce:b1:5c:
e3:2e:4f:c3:c6:ac:6b:b0:bf:74:73:16:86:32:a0:5a:ab:0c:
6e:5a:5c:52:b3:cc:e5:de:2b:f4:a9:0e:bb:6e:c5:6f:94:81:
b6:9d:29:d0:63:04:d0:83:e4:28:30:55:1e:85:94:a2:74:c1:
7c:70:93:98:de:46:dd:b0:1b:5a:6f:e9:46:31:17:2b:5c:81:
b1:ff:0e:72:7b:6d:c6:a2:46:e0:92:67:ff:56:83:34:89:df:
d2:99:60:57:fb:51:7b:35:4f:44:60:d8:64:5b:ec:c0:96:e8:
9e:8f:df:4c:85:3b:ac:37:2e:46:f5:01:bc:92:8a:d0:d9:0b:
53:a0:ee:02:da:1f:61:5a:52:93:fa:c7:d9:98:f5:50:8e:82:
a9:25:23:07:a4:a4:f8:fd:90:c4:14:21:b9:f2:43:82:72:53:
d1:97:f9:50:2b:57:8a:a4:f3:1b:29:eb:2c:00:d9:30:dc:88:
97:10:9c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 21:28:18 2026 by rpki-client