Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B4A28D6275411F1BA2B53A2DAE4EC9C.roa
File: 6B4A28D6275411F1BA2B53A2DAE4EC9C.roa (raw, json)
Hash identifier: 4qyaWnimKpPOkpepZdyAHJ5Sr2W1n344aSFvd04qy4w=
Subject key identifier: B2:90:D4:94:09:06:99:3D:F9:2C:23:3C:0E:4A:34:88:90:63:49:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C07F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B4A28D6275411F1BA2B53A2DAE4EC9C.roa
Signing time: Tue 24 Mar 2026 07:38:16 +0000
ROA not before: Tue 24 Mar 2026 07:38:11 +0000
ROA not after: Thu 27 Aug 2026 07:38:11 +0000
asID: 45669
IP address blocks: 154.81.224.0/19 maxlen: 24
154.81.245.0/24 maxlen: 24
154.81.246.0/24 maxlen: 24
154.81.247.0/24 maxlen: 24
154.81.248.0/24 maxlen: 24
154.81.249.0/24 maxlen: 24
154.81.250.0/24 maxlen: 24
154.81.251.0/24 maxlen: 24
154.81.252.0/24 maxlen: 24
154.81.253.0/24 maxlen: 24
154.81.254.0/24 maxlen: 24
154.81.255.0/24 maxlen: 24
154.91.160.0/22 maxlen: 24
154.91.160.0/24 maxlen: 24
154.91.161.0/24 maxlen: 24
154.91.162.0/24 maxlen: 24
154.91.163.0/24 maxlen: 24
154.91.164.0/23 maxlen: 24
154.91.164.0/24 maxlen: 24
154.91.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114815 (0x1c07f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 24 07:38:11 2026 GMT
Not After : Aug 27 07:38:11 2026 GMT
Subject: CN=69c23f68-e383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fb:29:2b:57:70:e9:5a:90:0b:17:dc:6e:15:
51:fa:b3:ad:f9:63:b2:66:85:88:c4:c5:61:fb:99:
8a:85:80:76:7e:02:75:eb:da:94:c4:d7:e2:0a:ca:
e7:9a:a2:f3:81:1a:c7:2a:7e:5b:18:5e:11:35:59:
35:1d:55:8e:1e:d8:1d:d4:fd:76:f6:57:85:f2:37:
65:23:e7:ba:be:3f:bc:ac:f4:a0:f2:4b:d6:73:0b:
9d:77:a1:fc:e5:22:1f:13:15:0e:3d:6c:68:7e:38:
90:61:29:8f:d2:81:08:02:2c:0e:f1:5f:6f:15:f3:
f5:b2:b7:04:1e:6b:af:bf:20:79:bb:6e:47:de:fc:
2a:ca:ed:76:32:07:b5:01:05:87:2f:c9:88:e0:17:
f8:d5:15:68:f0:e0:92:6b:d9:35:d5:68:9a:fd:d8:
3e:a7:fe:24:c0:38:7f:74:df:3b:c8:69:99:dd:a6:
85:4a:94:4f:2a:dd:4c:7f:7c:97:6b:da:35:8d:74:
68:92:a7:f9:29:8d:19:60:dd:ff:23:eb:a0:08:e0:
d5:4a:e4:e3:c8:3c:15:1f:e9:2a:76:64:41:59:26:
55:9d:6c:4e:06:7a:e8:53:61:2b:16:03:d8:bf:e2:
46:e1:8f:32:26:be:a4:aa:41:aa:55:91:8c:d1:dc:
c4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:90:D4:94:09:06:99:3D:F9:2C:23:3C:0E:4A:34:88:90:63:49:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B4A28D6275411F1BA2B53A2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.224.0/19
154.91.160.0-154.91.165.255
Signature Algorithm: sha256WithRSAEncryption
3b:a4:d4:08:71:55:36:c7:19:39:5a:cf:ee:7c:83:0f:d5:2c:
65:f4:d8:07:37:90:9f:5e:f8:29:6c:4a:41:40:04:b3:30:89:
ad:39:aa:72:2c:52:e6:96:61:a9:b7:be:7d:92:aa:0c:8c:f4:
3d:f4:98:05:a6:56:8f:ee:81:22:c9:9e:87:8b:b8:35:61:a9:
0f:1b:a1:46:3f:31:1b:72:2f:db:46:5e:fe:2b:5a:45:06:45:
b9:30:e7:76:aa:e4:57:7b:a6:d8:74:1a:b4:66:20:d6:58:f0:
3a:1c:40:06:06:3e:c0:7f:99:c3:ad:d6:cd:95:c0:6c:77:e7:
fc:30:4c:46:9e:80:99:15:8c:3e:c0:ed:20:eb:f1:4a:23:79:
f3:58:0d:01:87:f9:bf:ea:5f:1a:d3:c3:31:9b:7f:4f:d9:e9:
09:56:35:dc:59:c0:ce:00:7f:d2:66:ad:c4:88:24:4a:a2:93:
66:ff:07:d1:52:37:68:8c:8c:02:5e:6e:27:ae:74:27:95:73:
4a:ea:77:0a:98:90:f8:cc:a5:d5:aa:d8:6b:d4:43:24:db:56:
f7:35:7c:0d:38:22:f9:3d:b8:2f:65:c6:78:68:58:a2:e6:b5:
a7:c1:26:66:65:a3:48:11:0a:b8:31:d6:6d:9c:de:8e:80:43:
0f:95:21:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:15:57 2026 by rpki-client