Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87950F74244811F1A587DFD9DAE4EC9C.roa
File: 87950F74244811F1A587DFD9DAE4EC9C.roa (raw, json)
Hash identifier: JsM1bejcF0D1bJcM+iovEZxXLaAVnGV46AQaOtHu5Jk=
Subject key identifier: 45:E5:3E:0B:18:20:57:64:93:36:19:DA:DC:B1:B7:C3:7B:C0:AD:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C01A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87950F74244811F1A587DFD9DAE4EC9C.roa
Signing time: Fri 20 Mar 2026 10:35:36 +0000
ROA not before: Fri 20 Mar 2026 10:35:29 +0000
ROA not after: Sun 26 Apr 2026 10:35:29 +0000
asID: 138915
IP address blocks: 154.206.56.0/23 maxlen: 24
154.206.58.0/23 maxlen: 24
154.206.67.0/24 maxlen: 24
154.206.72.0/23 maxlen: 24
154.206.74.0/23 maxlen: 24
154.206.76.0/23 maxlen: 24
154.206.78.0/24 maxlen: 24
154.206.79.0/24 maxlen: 24
154.206.92.0/23 maxlen: 24
154.206.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114714 (0x1c01a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 20 10:35:29 2026 GMT
Not After : Apr 26 10:35:29 2026 GMT
Subject: CN=69bd22f8-39ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:60:c3:f7:4d:2c:fa:68:9c:f1:c7:ff:05:aa:
08:20:37:29:e2:78:12:83:62:b3:37:61:e3:93:8e:
86:e1:7f:6c:db:2e:99:3a:cf:e7:70:ec:c9:10:ea:
8c:fa:ea:76:81:22:a0:4d:ad:02:3c:25:28:1d:f9:
08:a3:02:b4:84:ae:50:9c:27:e8:8e:6d:83:e9:f9:
84:52:8a:23:ea:87:f1:21:45:ae:34:bb:6f:93:a4:
3b:2e:f2:04:e3:39:77:2d:65:b4:08:bb:68:43:4e:
72:53:79:7c:6c:48:4b:13:67:9a:4f:93:2f:7d:13:
03:f7:60:68:32:2c:b5:41:81:1b:c4:58:99:d2:68:
93:d0:39:d5:5e:5e:2b:de:1d:82:37:87:e4:b5:cf:
45:65:67:8a:7f:63:43:10:69:f9:4f:0c:71:69:88:
71:71:97:62:1a:bb:0d:5b:e0:90:3d:55:cc:11:29:
0d:6a:ea:8e:43:16:ae:5a:69:d9:77:64:c1:28:f1:
ca:29:80:3e:55:cd:70:8d:0b:a1:25:d9:84:57:3d:
a0:10:e3:b3:0a:5e:06:41:b4:44:af:55:3a:a9:a7:
11:e7:4e:c2:04:79:c6:95:fe:8c:d4:d1:bf:55:84:
04:63:05:00:67:30:af:cb:f7:55:d3:85:25:71:a6:
d2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E5:3E:0B:18:20:57:64:93:36:19:DA:DC:B1:B7:C3:7B:C0:AD:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87950F74244811F1A587DFD9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.56.0/22
154.206.67.0/24
154.206.72.0/21
154.206.92.0/22
Signature Algorithm: sha256WithRSAEncryption
09:5e:07:14:17:5e:e5:b2:ca:d4:93:30:62:10:0a:20:79:92:
61:32:57:8a:f2:95:50:30:87:11:66:97:df:36:1e:12:7c:93:
c4:47:f2:16:0c:df:28:19:73:61:36:a3:fa:da:35:52:fb:3d:
df:16:6e:99:4b:9e:62:19:d7:ce:bb:24:ac:54:ad:64:ac:05:
e5:fb:f1:e3:40:1f:80:d5:da:cc:07:45:85:23:84:a5:a5:99:
94:9f:a3:a4:c3:a3:0a:87:55:88:ea:c9:8c:8b:9c:73:49:ca:
ef:ed:1f:a5:54:33:b5:e5:ab:b3:e6:ec:25:7e:13:b9:2e:64:
94:90:d3:61:ea:f2:a1:f7:7b:e7:b4:4b:86:cf:3e:a6:10:c4:
59:88:95:38:56:b0:0e:3a:be:85:8e:40:4a:96:e2:e2:f0:53:
1e:1f:a2:6d:40:6e:df:f4:3f:a5:99:94:73:65:d4:2d:01:c0:
f1:81:c2:93:f6:68:7d:f9:4f:2a:96:b5:51:f5:a8:2e:f6:af:
69:3f:e7:f0:97:fe:65:d8:5d:b5:e0:ee:89:9f:2c:3a:b5:54:
e0:86:cc:f8:22:b6:53:02:21:43:f2:8f:cd:a5:b0:03:1f:04:
bd:27:4c:f3:da:ff:60:e3:aa:d1:1d:4e:72:d4:5c:04:3c:86:
c2:01:8e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:13:53 2026 by rpki-client