Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/767E38A2214E11F1A3C49B7BDAE4EC9C.roa
File: 767E38A2214E11F1A3C49B7BDAE4EC9C.roa (raw, json)
Hash identifier: N+Jylc7RZLJOFry7QfbQK0+DLYlV0HDJZE955q2w9KQ=
Subject key identifier: 2C:B5:46:2E:BA:C7:0C:E6:A7:21:98:FD:6D:67:87:4B:48:2C:77:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF8A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/767E38A2214E11F1A3C49B7BDAE4EC9C.roa
Signing time: Mon 16 Mar 2026 15:40:31 +0000
ROA not before: Mon 16 Mar 2026 15:40:24 +0000
ROA not after: Wed 07 Jul 2027 15:40:24 +0000
asID: 328608
IP address blocks: 154.83.240.0/22 maxlen: 24
154.85.3.0/24 maxlen: 24
154.85.8.0/22 maxlen: 24
154.85.120.0/24 maxlen: 24
154.193.51.0/24 maxlen: 24
154.193.52.0/23 maxlen: 24
154.193.54.0/24 maxlen: 24
154.197.122.0/23 maxlen: 24
154.198.1.0/24 maxlen: 24
154.198.2.0/23 maxlen: 24
154.202.105.0/24 maxlen: 24
154.202.128.0/21 maxlen: 24
154.209.128.0/22 maxlen: 24
154.213.193.0/24 maxlen: 24
154.213.194.0/23 maxlen: 24
154.213.202.0/23 maxlen: 24
154.213.204.0/24 maxlen: 24
154.213.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 20 Mar 2026 00:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114570 (0x1bf8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 16 15:40:24 2026 GMT
Not After : Jul 7 15:40:24 2027 GMT
Subject: CN=69b8246f-4b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:46:e9:4d:cf:59:26:13:7c:c4:77:37:c0:4f:
d4:44:63:55:a2:9e:44:f1:1b:e1:f1:4d:e3:e6:d4:
79:8e:7d:f7:7d:e0:44:db:d4:c4:e0:9d:46:ce:f1:
78:3a:a8:e3:a0:c3:25:78:3d:0d:bc:ff:00:d9:3b:
4b:a9:a1:b6:42:57:c0:11:6c:29:2c:c4:a1:19:97:
28:81:54:19:fc:a0:85:88:a7:42:6a:2c:31:8d:da:
5d:8a:ec:8b:03:18:41:b1:8f:76:4d:13:c3:20:ec:
b8:ac:ac:53:6b:39:1a:bb:ea:f3:d0:71:b9:e7:7b:
1b:76:88:00:d8:92:d8:9f:8c:62:0d:89:5b:e2:9e:
9a:dd:35:55:bd:a7:19:10:9b:e8:7a:77:fd:40:e5:
59:cf:bf:63:15:f9:2a:83:52:2e:92:99:a7:73:76:
2c:30:c6:c5:7c:cf:fb:06:8d:cd:88:07:a5:92:05:
ab:20:0a:e6:35:62:a1:e4:97:55:56:cc:3f:0b:d0:
3f:4c:2a:b9:f5:3f:82:4d:85:16:c7:5d:25:54:12:
55:74:e1:01:60:cd:0a:8a:cf:e1:8c:6f:2c:12:de:
1e:32:94:de:b5:31:ed:13:d5:32:f0:99:4e:83:18:
27:19:08:ca:47:e0:d4:46:1e:55:fc:17:5f:e1:f2:
6a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B5:46:2E:BA:C7:0C:E6:A7:21:98:FD:6D:67:87:4B:48:2C:77:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/767E38A2214E11F1A3C49B7BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.240.0/22
154.85.3.0/24
154.85.8.0/22
154.85.120.0/24
154.193.51.0-154.193.54.255
154.197.122.0/23
154.198.1.0-154.198.3.255
154.202.105.0/24
154.202.128.0/21
154.209.128.0/22
154.213.193.0-154.213.195.255
154.213.202.0-154.213.204.255
154.213.223.0/24
Signature Algorithm: sha256WithRSAEncryption
90:3e:2b:97:52:90:3e:03:50:12:cc:00:c3:41:20:c5:57:c5:
38:80:32:55:ca:7d:71:45:11:d8:e5:e8:92:97:1b:17:d0:e5:
fb:8b:1a:b8:50:82:30:05:e7:f1:be:ea:92:aa:26:3a:90:57:
0d:83:70:dc:77:f8:fc:1b:8c:99:51:ee:17:a6:be:1d:6c:9d:
2a:24:18:00:96:17:e6:36:96:f8:7d:ea:c2:67:b3:56:a8:9e:
34:4d:d3:ee:07:bd:85:39:c8:b9:0f:5c:12:c4:b8:1d:2f:58:
5f:d8:8a:1d:5a:ad:54:7b:d1:06:9a:6d:78:66:6f:ee:56:6d:
9a:47:36:6b:51:76:14:e1:ce:1b:ed:f4:1f:8d:f5:8e:7b:8e:
e6:b7:5a:16:56:1d:e4:0f:81:cf:7f:f4:e3:be:e6:ec:85:11:
69:bf:c8:07:a5:23:1a:d9:7f:d2:87:32:86:4f:08:a7:a9:c8:
aa:ad:01:87:f7:97:9c:f0:9c:60:67:f9:32:f1:ca:1d:87:a7:
71:5f:a8:a3:36:dd:ab:67:1f:be:f4:a1:c7:74:b4:09:56:10:
f2:0a:61:08:84:61:6c:7f:ac:93:2f:f7:09:a2:61:88:8f:8d:
24:af:e8:8f:cc:25:65:99:c3:bd:b5:cd:3f:97:82:a7:7c:58:
fe:b7:6c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 06:59:51 2026 by rpki-client