Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A40CF70239511F1B145A8C6DAE4EC9C.roa
File: 6A40CF70239511F1B145A8C6DAE4EC9C.roa (raw, json)
Hash identifier: OlK26rh+IDvqsGrehbi9i86NyATm5JAlKKLlAwG7D1Q=
Subject key identifier: D9:06:10:A3:20:5B:67:74:A7:60:FF:77:59:E0:5F:DA:9B:49:F9:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BFE7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A40CF70239511F1B145A8C6DAE4EC9C.roa
Signing time: Thu 19 Mar 2026 13:13:27 +0000
ROA not before: Thu 19 Mar 2026 13:13:22 +0000
ROA not after: Tue 31 Mar 2026 13:13:22 +0000
asID: 9304
IP address blocks: 154.92.192.0/24 maxlen: 24
154.92.193.0/24 maxlen: 24
154.92.194.0/24 maxlen: 24
154.92.195.0/24 maxlen: 24
154.92.196.0/24 maxlen: 24
154.92.197.0/24 maxlen: 24
154.92.198.0/24 maxlen: 24
154.92.200.0/24 maxlen: 24
154.92.201.0/24 maxlen: 24
154.92.202.0/24 maxlen: 24
154.92.203.0/24 maxlen: 24
154.92.204.0/24 maxlen: 24
154.92.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114663 (0x1bfe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 19 13:13:22 2026 GMT
Not After : Mar 31 13:13:22 2026 GMT
Subject: CN=69bbf677-ad9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9f:06:56:79:be:9d:87:d7:d7:0f:ed:0c:0e:
47:05:d0:44:e5:5a:9c:f1:11:49:ee:e0:e8:96:06:
cd:dc:bd:41:3d:12:20:57:f9:e8:d0:23:09:1c:56:
3e:17:23:b6:ee:fd:a3:41:1b:b8:bb:27:24:67:7f:
cd:7b:3b:82:ff:39:4c:fe:95:07:60:84:65:f4:24:
92:cd:07:33:69:b0:fb:2c:c2:dc:88:ee:4b:c1:bf:
79:a5:96:9d:8b:bc:3f:7a:f1:7b:62:ff:a3:6d:ed:
37:e9:a0:0c:c7:90:12:2f:94:51:a0:2f:f6:53:f3:
d3:e1:1e:b8:69:bb:0f:8c:34:c6:7d:60:64:24:3c:
6f:fd:af:93:61:aa:c9:c1:79:f0:03:3f:32:8e:75:
60:73:93:2c:f6:11:5f:0a:c3:3f:f9:7f:83:98:e1:
f6:db:27:c0:60:3b:40:2f:15:ad:45:71:06:3f:10:
c0:02:c5:32:2d:1b:b1:cf:df:54:50:fc:d2:4b:be:
3e:07:bd:f2:15:91:6f:92:6b:6b:e0:39:5c:10:b7:
d8:14:9c:50:90:ee:55:04:1c:68:48:6c:2e:a4:d2:
22:49:33:be:e8:94:60:2f:62:7d:02:f9:c2:d6:26:
f3:1b:0b:ed:60:ac:f4:bc:28:24:3f:58:ea:ab:29:
27:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:06:10:A3:20:5B:67:74:A7:60:FF:77:59:E0:5F:DA:9B:49:F9:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A40CF70239511F1B145A8C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.192.0-154.92.198.255
154.92.200.0-154.92.204.255
154.92.215.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:e1:74:41:48:99:8f:55:56:db:7e:9c:37:ae:b5:23:22:ac:
99:88:41:72:1c:f0:00:39:99:1a:72:bc:9f:db:78:f1:74:e8:
fd:86:99:53:3e:0d:2a:b8:55:03:b3:7f:97:0f:1a:6a:21:49:
04:89:11:72:3c:fe:fb:0a:39:c6:4f:1a:3b:c5:81:08:0f:57:
cd:65:42:70:87:79:f7:00:0d:6d:84:6a:d0:89:28:83:7c:12:
4a:2b:cb:25:58:d6:47:25:65:d7:e3:fb:f4:7e:43:9e:44:fd:
f2:e1:70:7e:4d:32:a8:54:48:13:0e:f9:86:25:79:00:93:80:
d3:d4:43:13:ca:99:6b:74:aa:ba:05:ba:73:8e:46:1b:32:f1:
2c:38:d2:28:5d:03:53:dc:39:43:67:51:3d:92:f2:4d:96:4c:
7b:62:7a:3f:e2:0c:3f:7c:40:6f:e0:a5:c7:74:1d:0b:60:dd:
7b:26:80:3a:63:98:d7:4d:d7:8e:ac:f3:a6:2c:d8:a8:3b:ce:
f3:eb:f0:03:d8:28:53:f2:4e:f2:4a:46:29:d8:fe:56:d4:cf:
f0:ad:ba:15:1d:6e:84:4e:e5:b8:c3:48:ff:87:7f:85:9d:40:
6e:f6:ce:88:4c:90:28:fb:e4:94:7c:b1:37:e9:5a:a2:92:1e:
06:2a:2e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:16:39 2026 by rpki-client