Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64C242AE1E5411F1AB69BF97DAE4EC9C.roa
File: 64C242AE1E5411F1AB69BF97DAE4EC9C.roa (raw, json)
Hash identifier: EhHyqMBi+JZ6Vgrk5rzF1by/HGd2QSj5NVAFQouNUVc=
Subject key identifier: 11:4C:0A:6F:F3:A9:5A:D0:F4:AA:97:7F:EA:BE:29:DF:FE:0B:30:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF3C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64C242AE1E5411F1AB69BF97DAE4EC9C.roa
Signing time: Thu 12 Mar 2026 20:45:25 +0000
ROA not before: Thu 12 Mar 2026 20:45:20 +0000
ROA not after: Thu 16 Apr 2026 20:45:20 +0000
asID: 22773
IP address blocks: 154.202.23.0/24 maxlen: 24
154.202.24.0/24 maxlen: 24
154.202.25.0/24 maxlen: 24
154.202.26.0/24 maxlen: 24
154.202.27.0/24 maxlen: 24
154.202.28.0/24 maxlen: 24
154.213.218.0/24 maxlen: 24
154.213.219.0/24 maxlen: 24
154.213.221.0/24 maxlen: 24
154.213.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114492 (0x1bf3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 12 20:45:20 2026 GMT
Not After : Apr 16 20:45:20 2026 GMT
Subject: CN=69b325e4-f609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e5:6b:03:9c:96:90:0e:36:3d:ee:63:2e:a6:
1c:81:d2:c5:62:ce:e0:eb:95:e1:20:29:8e:e9:37:
97:ce:ed:bd:00:d7:82:4e:0c:d5:ca:e6:54:82:90:
d5:7f:5f:d4:6f:c8:f8:85:7f:c9:73:57:b4:f2:9b:
7e:13:5f:f7:52:42:61:ea:bb:07:dc:49:4e:8c:54:
c1:59:61:3b:d4:65:43:c8:8b:90:f6:36:97:47:ca:
87:24:62:ba:8a:4d:f9:22:27:74:30:c4:d8:c1:6b:
34:b0:c3:93:47:66:29:95:38:c6:fb:5c:39:f8:98:
6a:05:9e:f5:4e:fc:1a:38:1f:47:f8:ec:da:78:0e:
4f:dd:54:79:db:e4:c8:6d:9a:d9:8d:6c:fe:ac:14:
47:91:68:1f:c4:9c:9e:e9:3e:6e:67:f5:ca:89:f1:
9b:d5:e7:1f:e2:d5:0e:d2:a8:a9:96:10:fb:99:2f:
84:6e:6f:48:da:71:ac:a6:38:09:8f:0c:71:2c:ae:
30:1e:34:bf:95:17:6d:72:46:c0:ed:11:62:69:7f:
88:ca:f7:3d:b1:e8:35:f2:5f:d2:56:18:01:19:3d:
35:f2:b6:0c:c8:3d:83:58:f0:dd:97:83:bc:34:5b:
c4:0d:2f:29:6d:09:ef:49:78:90:93:6e:4c:a8:f6:
cc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4C:0A:6F:F3:A9:5A:D0:F4:AA:97:7F:EA:BE:29:DF:FE:0B:30:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64C242AE1E5411F1AB69BF97DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.23.0-154.202.28.255
154.213.218.0/23
154.213.221.0-154.213.222.255
Signature Algorithm: sha256WithRSAEncryption
54:ac:43:c3:48:04:67:6a:85:14:6e:d1:fb:c7:0d:9d:42:2c:
41:71:f3:18:20:4e:06:41:cd:ae:2e:bd:06:e4:14:23:d7:9f:
95:8b:db:9a:8c:b7:39:e1:81:e4:eb:f1:72:30:5e:e7:c8:30:
8b:07:25:76:69:42:4b:d5:0d:82:3c:75:ec:66:a5:23:8b:8e:
98:d8:09:a3:e7:90:ef:1e:06:2d:3d:d1:76:d7:cf:9a:10:e6:
5a:d8:fd:10:8d:ff:d7:b9:97:e8:23:c3:5d:7c:bf:33:7f:da:
8f:82:b5:d9:91:4a:c5:3f:e6:2c:6c:59:1f:e7:e8:bd:db:8b:
04:a8:75:a4:2d:af:4f:fc:60:5e:de:6b:52:02:85:a3:fc:73:
58:3c:cc:fd:71:d4:f0:b8:91:f9:6a:5e:5f:6b:23:1f:dc:e4:
c3:3c:09:6e:1d:0f:55:ca:9e:0a:52:05:02:27:f8:b4:91:21:
3f:c5:b9:b2:1c:de:9a:31:24:e4:4d:4a:23:ea:ff:32:dc:c4:
45:4c:6d:17:9b:b9:25:f5:37:ea:91:9d:1d:36:66:aa:2f:27:
8d:9d:8f:48:04:d1:4e:fe:b8:ad:c2:12:fc:8b:ba:12:f7:38:
35:ec:60:49:39:3a:58:25:2b:bf:c5:e6:64:9d:1c:f0:ae:3a:
fb:82:3a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:16:08 2026 by rpki-client