Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CA8058E1F8911F185C966B1DAE4EC9C.roa
File: 8CA8058E1F8911F185C966B1DAE4EC9C.roa (raw, json)
Hash identifier: G+9PbPNWKQvmuDla6U8dhMa5McBABXQLKUohQlR55To=
Subject key identifier: 24:28:47:69:82:0A:F6:23:FD:58:3D:75:E8:D2:08:49:87:48:6A:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF60
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CA8058E1F8911F185C966B1DAE4EC9C.roa
Signing time: Sat 14 Mar 2026 09:38:26 +0000
ROA not before: Sat 14 Mar 2026 09:38:21 +0000
ROA not after: Sun 31 May 2026 09:38:21 +0000
asID: 399077
IP address blocks: 154.91.77.0/24 maxlen: 24
154.91.78.0/24 maxlen: 24
154.91.79.0/24 maxlen: 24
154.91.80.0/24 maxlen: 24
154.91.81.0/24 maxlen: 24
154.91.82.0/24 maxlen: 24
154.91.83.0/24 maxlen: 24
154.91.84.0/24 maxlen: 24
154.91.85.0/24 maxlen: 24
154.91.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Mar 2026 00:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114528 (0x1bf60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 14 09:38:21 2026 GMT
Not After : May 31 09:38:21 2026 GMT
Subject: CN=69b52c91-8a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f8:ca:7f:70:a9:57:55:3f:7c:a4:40:0a:22:
c9:c6:d3:a9:d8:eb:dc:68:8f:86:23:fc:24:70:2c:
8b:8c:e8:33:81:ba:87:2e:2f:42:55:ed:d2:f7:9e:
be:15:42:4d:25:02:74:f5:5b:4d:78:6d:22:f7:0f:
a6:56:4e:55:05:34:d9:44:27:81:2b:e6:5d:49:eb:
2c:63:cb:87:44:b0:88:75:64:66:e3:9d:1f:2f:01:
d1:b4:98:c3:49:6a:87:24:20:0c:f9:8e:4f:8a:7d:
f0:6a:21:4c:50:50:70:9f:79:71:8b:1a:32:36:0f:
3c:e3:f0:cb:d8:b6:0e:0e:bb:06:a1:0a:0e:4d:ff:
59:d6:17:4c:39:6d:26:18:0e:42:23:4b:a2:4c:b2:
ec:71:99:6c:0a:46:b4:6b:85:60:1a:8d:b7:c9:f5:
c7:9b:f9:d3:39:da:13:97:fe:4c:dd:f8:d3:96:94:
af:57:34:4a:e8:5a:b8:e4:1c:71:ee:71:d6:39:bb:
fa:8b:1a:ba:7c:61:e5:d1:45:bd:35:ac:33:ef:35:
9c:e2:b0:3a:4c:6e:88:97:fd:47:ac:be:10:f5:35:
f1:21:e2:c8:eb:c1:17:0d:a9:d2:fa:df:7a:3e:cc:
3e:c3:99:f1:81:98:7b:47:17:fa:03:7c:03:a7:06:
e9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:28:47:69:82:0A:F6:23:FD:58:3D:75:E8:D2:08:49:87:48:6A:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CA8058E1F8911F185C966B1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.77.0-154.91.86.255
Signature Algorithm: sha256WithRSAEncryption
4b:7c:77:55:fb:6b:7f:bd:02:2d:94:c6:9f:12:ca:4e:01:c4:
21:b2:6f:87:00:81:87:76:a9:14:99:ce:fe:2d:ba:88:76:67:
1b:4c:29:19:15:9d:43:07:6e:2d:96:71:f9:9d:2d:40:1c:cc:
1b:32:7c:af:a8:93:e5:68:66:39:4c:4f:c3:d1:c3:a4:85:c0:
4b:31:78:a2:26:29:b2:51:80:f8:f5:98:4a:32:f4:11:97:a0:
d6:ef:cc:28:b0:3f:75:7f:59:51:bb:9c:fe:b7:fb:72:2d:c9:
fe:2d:c8:57:05:83:45:64:8d:fb:bd:b4:41:5f:fc:80:3f:44:
64:a7:90:d8:96:f4:52:6e:06:6b:99:29:7e:0f:5e:7e:f9:0a:
75:2c:1e:33:19:ed:92:f8:31:d3:ab:72:05:eb:aa:91:c4:20:
75:8e:bb:de:98:7b:72:20:0f:22:48:73:d8:23:ec:44:c1:9e:
dc:79:4d:5e:82:7b:c8:03:a6:db:35:21:ae:83:4e:2f:82:2c:
cb:73:fa:54:b8:a9:ea:72:5b:73:05:a4:0c:65:75:ca:ae:37:
83:dd:fa:af:b5:eb:64:7c:c4:ac:8c:7a:07:46:ef:83:e8:fd:
c5:d2:d2:d2:21:59:c0:8d:d1:c5:a8:38:b4:5c:d4:8f:49:b3:
a2:6c:96:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 21:29:22 2026 by rpki-client