Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79A9B8141D1911F195F0D4F4DAE4EC9C.roa
File: 79A9B8141D1911F195F0D4F4DAE4EC9C.roa (raw, json)
Hash identifier: Kmxpr4FLCJyWV8j2xtFAnIlMoPygY+F26MsEYegPbT0=
Subject key identifier: 46:4B:70:6A:97:DF:A2:0E:98:0C:21:9E:9C:5A:61:31:4C:13:3D:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BEDF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79A9B8141D1911F195F0D4F4DAE4EC9C.roa
Signing time: Wed 11 Mar 2026 07:11:08 +0000
ROA not before: Wed 11 Mar 2026 07:11:03 +0000
ROA not after: Thu 09 Apr 2026 07:11:03 +0000
asID: 135377
IP address blocks: 154.202.65.0/24 maxlen: 24
154.202.66.0/23 maxlen: 24
154.202.66.0/24 maxlen: 24
154.202.67.0/24 maxlen: 24
154.202.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114399 (0x1bedf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 11 07:11:03 2026 GMT
Not After : Apr 9 07:11:03 2026 GMT
Subject: CN=69b1158c-60a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b2:ae:58:44:6d:2e:e4:39:12:51:19:1a:25:
d5:8f:d3:5c:b7:96:b5:13:58:6d:1d:7c:9d:d7:c1:
eb:f4:cd:f5:23:8b:3e:0a:fc:ae:ac:2a:88:c0:c4:
5d:be:2b:43:43:de:4d:38:a1:f4:91:e4:a4:38:9d:
7d:ec:88:82:95:97:14:69:04:a7:02:56:d0:1f:4e:
38:9a:8a:aa:1a:12:7d:af:80:a0:80:8c:fe:d3:a2:
9b:c1:5f:19:10:f1:a0:5f:cd:d3:82:85:5d:1c:33:
9e:99:58:d4:5e:1a:31:3c:8e:82:df:c8:59:96:b0:
fc:9d:b3:12:f2:75:e3:ea:47:e6:e1:eb:74:00:f0:
c3:54:3b:04:34:df:42:52:4f:de:65:b1:d3:57:b9:
71:a5:ea:29:9c:ac:ae:ff:6e:06:d8:d9:82:09:97:
65:d6:21:51:d5:c0:61:52:b9:6e:4b:36:82:ea:5c:
69:03:00:0d:00:10:e3:65:cb:d0:b2:55:4f:46:a3:
2c:c3:03:43:80:10:5e:35:3a:4d:5c:2b:47:a4:e3:
5e:7a:9a:37:f7:50:c4:44:5c:45:a3:b2:9f:9a:07:
38:d7:ec:a8:1d:0c:85:ce:af:d4:14:de:cb:ed:6d:
09:c2:d0:b2:f2:81:fd:e3:a6:05:98:5a:21:eb:be:
93:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4B:70:6A:97:DF:A2:0E:98:0C:21:9E:9C:5A:61:31:4C:13:3D:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79A9B8141D1911F195F0D4F4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.65.0-154.202.68.255
Signature Algorithm: sha256WithRSAEncryption
54:10:91:42:37:96:94:e5:b1:22:88:e0:7a:b3:ee:58:fd:90:
10:b6:e3:7b:b5:c6:32:79:ca:3c:aa:29:6f:8b:f9:c3:f8:81:
86:d8:69:1c:cd:f1:93:7e:ca:64:22:94:b3:09:91:95:b2:3c:
79:a9:11:61:f8:d3:c3:12:ad:d0:1c:2b:e5:64:81:26:0d:93:
9a:88:06:1a:a1:9a:ae:ee:9c:8a:a9:a0:29:2f:7f:0f:9b:57:
89:84:69:01:ce:a8:6c:c8:78:09:76:06:b5:cb:fd:80:61:bc:
af:8f:ca:f1:85:d5:dc:00:f9:26:85:cb:49:4c:a2:42:a4:7f:
67:21:ef:22:b7:09:38:9f:56:7e:9a:68:00:48:53:ba:07:6f:
5d:c7:7a:f4:7f:2c:a7:1c:dc:c6:f8:ca:ca:58:0e:14:3a:7b:
b0:87:ce:a1:9e:8f:e0:32:f4:1b:ab:02:09:c0:43:cf:5a:f2:
06:10:4b:f6:58:72:81:38:e3:df:b5:14:dd:12:56:f3:1c:4a:
66:17:81:da:bc:c4:fc:ba:fa:e0:2f:cb:3a:3b:8c:18:13:63:
61:e3:a7:3e:35:29:27:7b:fc:72:d2:7c:db:93:7d:b2:d5:fa:
30:ab:6b:77:ba:d1:ab:6f:0f:56:50:19:1e:6a:55:cb:87:13:
4e:ee:2f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:19:14 2026 by rpki-client