Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6909A222162911F19F3FDBBCDAE4EC9C.roa
File: 6909A222162911F19F3FDBBCDAE4EC9C.roa (raw, json)
Hash identifier: BZpmuQKb5HF8i2EQzoL6fOfjpjpLTMnlIeZiRukANAM=
Subject key identifier: 45:7C:87:EF:2E:06:88:9D:20:77:60:34:06:CB:DB:01:C8:18:61:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BCF1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6909A222162911F19F3FDBBCDAE4EC9C.roa
Signing time: Mon 02 Mar 2026 11:17:34 +0000
ROA not before: Mon 02 Mar 2026 11:17:29 +0000
ROA not after: Fri 02 Mar 2029 11:17:29 +0000
asID: 17561
IP address blocks: 154.81.238.0/24 maxlen: 24
154.81.239.0/24 maxlen: 24
154.81.240.0/24 maxlen: 24
154.81.241.0/24 maxlen: 24
154.81.242.0/24 maxlen: 24
154.81.243.0/24 maxlen: 24
154.81.244.0/24 maxlen: 24
154.81.245.0/24 maxlen: 24
154.81.246.0/24 maxlen: 24
154.81.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113905 (0x1bcf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 2 11:17:29 2026 GMT
Not After : Mar 2 11:17:29 2029 GMT
Subject: CN=69a571ce-33d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1d:ce:4e:5c:60:24:77:7f:5d:e9:3a:a8:bb:
f8:70:4d:d9:2b:24:04:a2:16:6b:8f:cb:5b:4d:0c:
d9:75:41:9e:db:6a:b5:9e:0d:c2:a9:be:32:99:af:
14:e2:c2:5f:22:24:59:06:08:ab:12:21:a6:c2:53:
38:f1:14:72:f4:1d:cc:51:cf:d2:b4:7f:f3:50:e8:
fe:e0:3b:f7:fd:7c:e3:45:07:5e:2f:fe:cf:81:41:
55:6e:78:76:b0:41:ed:7b:06:bc:59:e5:e2:10:5f:
66:4a:d7:bf:f4:29:66:ca:23:82:98:86:4e:0d:31:
41:58:45:e3:52:fa:66:36:ee:76:dc:59:f7:56:b5:
a4:bb:ab:bc:94:b4:42:d3:a0:df:50:b0:0e:cc:9d:
ba:3b:bd:9c:55:78:93:ec:2e:79:3c:9b:16:5a:d0:
49:59:f2:35:99:39:54:ec:13:12:bc:ff:e2:d1:5a:
9e:49:b5:16:88:65:8f:9f:89:f7:83:37:64:9b:06:
fc:a3:5f:87:6e:e9:f3:b3:8c:b6:81:6e:41:39:c0:
32:c6:f8:38:7b:86:67:3b:a8:e6:c1:66:fe:e8:d5:
b2:c8:a2:5d:85:a4:3c:00:b1:e8:73:94:90:5b:60:
37:f8:23:c0:cb:13:68:8b:90:c5:8b:56:2f:72:ae:
b9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7C:87:EF:2E:06:88:9D:20:77:60:34:06:CB:DB:01:C8:18:61:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6909A222162911F19F3FDBBCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.238.0-154.81.247.255
Signature Algorithm: sha256WithRSAEncryption
75:04:18:e0:03:cd:fd:8e:5c:09:97:ba:f2:8b:ba:1b:04:5a:
30:1a:d8:5d:00:e7:a6:c0:fa:c6:44:8b:5b:20:ca:8c:3d:7b:
d7:ca:d4:30:9e:a5:35:30:4e:e4:38:ca:f6:47:90:46:ed:fc:
00:27:7b:4c:38:83:42:39:8b:a9:89:a6:af:bc:d3:79:58:88:
79:2d:8b:a0:7c:03:62:f4:18:78:b4:d0:80:e2:37:9c:22:71:
82:5f:0e:96:6c:bb:12:f3:57:a4:95:52:48:a1:d8:15:5c:8f:
45:1d:8e:78:fe:ee:0f:07:e0:df:fd:00:34:a4:cd:15:b0:21:
25:ad:65:3a:04:3f:16:b8:44:b3:5e:49:49:d5:89:3d:d8:96:
05:22:1f:b8:16:aa:5a:53:5a:42:bf:cc:60:26:da:a9:17:d2:
aa:45:bd:19:a9:59:2f:76:50:e5:95:87:ba:cd:9e:26:95:f5:
21:da:1e:96:e0:e1:cd:5b:ef:3e:c0:a2:a1:02:2a:f8:24:96:
b7:ad:f4:80:e2:67:6c:93:a0:66:38:b7:80:36:5e:f3:06:1f:
ac:8c:44:8b:9b:dd:3a:69:c4:6c:48:52:6b:0e:2e:e3:29:4c:
71:6e:91:57:20:e1:23:b3:1f:9c:df:cc:70:d2:0c:1e:c6:23:
e6:ed:19:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:50 2026 by rpki-client