Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81A6005E237211F186833780DAE4EC9C.roa
File: 81A6005E237211F186833780DAE4EC9C.roa (raw, json)
Hash identifier: UCThQM23hFisdf9+AY3g6ug1Xbeof7AJGkbW6YoSsas=
Subject key identifier: 79:DB:A1:C5:7F:93:E2:28:DE:26:5D:B1:DF:2A:56:37:F2:20:78:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BFC7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81A6005E237211F186833780DAE4EC9C.roa
Signing time: Thu 19 Mar 2026 09:03:34 +0000
ROA not before: Thu 19 Mar 2026 09:03:28 +0000
ROA not after: Fri 24 Apr 2026 09:03:28 +0000
asID: 55020
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Mar 2026 00:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114631 (0x1bfc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 19 09:03:28 2026 GMT
Not After : Apr 24 09:03:28 2026 GMT
Subject: CN=69bbbbe6-ad62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:03:4a:52:5b:cc:f0:70:13:cf:27:76:be:7d:
de:10:3b:0b:41:4e:7d:82:2d:0f:77:6c:ae:36:46:
23:cb:21:ab:98:46:2e:94:73:a0:c6:03:44:19:4c:
9e:48:00:d5:17:d4:86:ba:0f:ee:83:bb:a3:bc:f8:
ad:77:a4:7e:dd:d0:23:3f:5f:cc:ee:a9:c3:42:ff:
15:06:c4:a9:ca:03:24:82:6a:9f:16:3f:a9:a9:e3:
25:d5:27:5e:d8:93:f7:67:3f:d5:b5:aa:b3:60:84:
f5:5a:28:23:ee:a3:32:0c:16:7a:22:ad:4c:ff:e8:
73:e3:e6:5a:4b:b2:ad:8e:4f:c7:7c:cc:37:4c:15:
e4:28:e0:d7:4b:37:01:2d:05:bc:28:cf:60:66:62:
28:d3:9f:ed:98:85:05:50:75:f1:96:f0:0e:78:0d:
8b:d4:84:40:61:74:32:49:f5:9d:b2:8d:d0:2b:0b:
aa:a8:0b:5d:79:71:37:19:c2:16:ad:d5:0d:39:4b:
66:93:10:dd:f4:12:9f:ff:ed:c1:e4:bc:1b:01:e4:
34:a4:c8:02:2d:69:7a:f9:3c:6d:1a:5e:8b:43:dd:
35:ff:cf:39:bb:14:66:9f:6a:16:2c:82:1b:30:54:
57:c1:2d:9b:a5:73:65:9c:f2:45:20:3a:15:8e:a4:
8b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DB:A1:C5:7F:93:E2:28:DE:26:5D:B1:DF:2A:56:37:F2:20:78:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81A6005E237211F186833780DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
75:3b:c9:b4:89:29:d3:46:3f:69:e1:57:7c:9f:68:73:78:36:
87:06:f3:c6:c5:8b:5f:9d:0a:fe:e8:14:6c:94:06:6f:1f:0a:
7c:f1:85:a5:88:3f:c6:b1:01:16:a4:36:53:ab:71:fc:b5:2f:
2f:dd:09:6d:f6:53:bb:ac:e1:97:ee:19:b2:6e:82:b0:92:7c:
4f:4e:bc:86:35:79:35:2f:0e:be:e4:25:b4:e0:cb:de:18:2d:
2b:d3:98:77:e2:f7:b8:bd:2c:c7:45:2d:7f:9f:a6:9e:39:eb:
91:ad:4f:f5:d7:cf:c0:d5:8a:65:90:04:b9:c4:b0:87:bf:0f:
44:6c:a2:2f:89:6b:97:9c:7e:d8:91:7a:ec:1c:e0:fb:5a:b5:
63:29:f4:4e:8c:ae:cb:06:11:a8:92:7e:c2:66:ef:0f:f2:68:
50:b5:5d:8a:96:bc:b5:f6:7b:0a:0c:74:c9:f4:5a:9c:0e:5a:
c1:8b:bb:43:36:0d:ca:f3:09:8d:be:11:81:f5:1f:9b:5e:19:
bb:50:b7:1c:26:51:83:df:58:f9:07:91:e4:32:cc:42:ab:41:
e1:82:d1:6e:7f:98:ae:49:8c:85:b8:70:6c:e1:ab:36:06:fa:
7c:42:89:40:6e:28:88:bc:96:a8:e8:ab:55:b8:d4:9e:97:d4:
62:0b:6b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 22:42:32 2026 by rpki-client