Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/753AB3F0244911F18B1C2AE1DAE4EC9C.roa
File: 753AB3F0244911F18B1C2AE1DAE4EC9C.roa (raw, json)
Hash identifier: CTrlw9Vp9/4yEjYep9ruP+C1ev3u6X8Hx1o1FLvbtfc=
Subject key identifier: D4:34:4D:B5:0F:EB:7B:F8:E8:6D:3E:85:F0:E7:D2:89:46:84:8F:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C01C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/753AB3F0244911F18B1C2AE1DAE4EC9C.roa
Signing time: Fri 20 Mar 2026 10:42:15 +0000
ROA not before: Fri 20 Mar 2026 10:42:09 +0000
ROA not after: Sun 26 Apr 2026 10:42:09 +0000
asID: 138915
IP address blocks: 154.206.60.0/23 maxlen: 24
154.206.62.0/23 maxlen: 24
154.206.72.0/24 maxlen: 24
154.206.73.0/24 maxlen: 24
154.206.80.0/23 maxlen: 24
154.206.82.0/23 maxlen: 24
154.206.84.0/23 maxlen: 24
154.206.86.0/23 maxlen: 24
154.206.88.0/23 maxlen: 24
154.206.90.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114716 (0x1c01c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 20 10:42:09 2026 GMT
Not After : Apr 26 10:42:09 2026 GMT
Subject: CN=69bd2487-96dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ba:58:46:1f:26:f4:70:18:ed:a7:44:f6:01:
f8:a0:32:d2:6a:73:46:0e:ac:ec:ed:08:12:42:6b:
da:f5:0e:57:69:d3:c6:14:fd:6f:5e:62:60:e8:10:
18:bb:1c:c7:3e:2f:66:fa:00:51:29:99:a6:ad:dd:
15:7f:49:9f:a0:c7:f7:f5:6f:f2:bd:ab:11:6d:7a:
a3:fa:4e:6d:0b:02:0d:c6:8c:49:94:9b:92:a7:ec:
0e:d5:9f:4a:82:e1:6a:83:15:cc:cb:84:70:82:b8:
52:19:79:fa:53:f4:3a:dc:80:83:9e:1c:cd:d7:f9:
1a:ef:48:7a:00:e3:e7:86:e2:03:8a:b5:0b:49:62:
72:bb:55:51:1e:29:c4:65:4c:20:39:0d:fa:3e:5e:
61:dc:09:56:cb:c1:87:95:fe:0f:06:1a:f7:2a:a3:
77:b5:fc:80:62:c7:15:51:c7:cf:63:1e:d1:8e:0f:
7b:63:df:fc:8e:72:3d:ce:f7:84:1d:ba:9d:73:ca:
65:7b:85:11:db:fb:6b:76:5d:0e:a7:99:68:cb:b1:
07:a7:f4:6a:7f:23:ba:0c:3b:18:ad:05:87:db:86:
c9:14:17:86:d3:87:2c:73:56:f5:93:ac:ee:3f:40:
ff:49:b5:df:62:de:ed:09:1f:68:d4:11:ce:3d:47:
71:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:34:4D:B5:0F:EB:7B:F8:E8:6D:3E:85:F0:E7:D2:89:46:84:8F:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/753AB3F0244911F18B1C2AE1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.60.0/22
154.206.72.0/23
154.206.80.0-154.206.91.255
Signature Algorithm: sha256WithRSAEncryption
cf:16:13:f9:d4:1d:4b:6c:72:6e:4d:fd:3c:8c:af:15:5d:f0:
af:1f:5a:43:64:67:09:8f:00:d0:30:d8:92:9a:98:26:b9:ef:
b2:93:5f:43:8a:15:de:21:41:21:a5:1b:4e:71:ff:31:cf:7e:
13:b3:30:0e:a5:58:f2:79:47:6b:63:86:60:1e:da:d3:be:f1:
ee:17:ba:43:28:04:81:16:1d:01:29:69:11:1c:bf:a1:ff:c2:
c8:e8:50:5b:86:91:6a:3f:c3:1e:ac:ed:05:66:33:26:3e:28:
b0:89:eb:44:b6:d9:27:ad:93:7c:70:cd:28:a8:fa:40:da:0c:
3e:0a:8b:62:c4:e8:b8:10:1c:37:8e:dc:07:eb:d3:b8:f9:74:
2a:b7:12:d9:4e:ea:0c:2e:c0:de:72:b4:3a:a9:a3:69:3d:cb:
62:01:c4:72:80:4f:8c:17:4b:6a:9c:ce:03:9e:07:94:6a:ea:
70:d9:70:70:6c:cb:9e:2a:83:e0:a7:b3:cc:46:a2:95:d5:4d:
4f:e3:82:8e:eb:92:43:71:49:38:ca:fb:6c:ee:c6:ef:d1:41:
b6:0b:98:44:98:18:91:e7:56:a4:6b:18:3a:6f:f0:ea:2f:b1:
7b:14:8f:ce:2a:61:da:d0:6d:4c:f5:53:d1:fe:52:c2:25:4a:
1e:68:39:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:22 2026 by rpki-client