Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9710BBBC275211F1BA4EE795DAE4EC9C.roa
File: 9710BBBC275211F1BA4EE795DAE4EC9C.roa (raw, json)
Hash identifier: i1KnrgVo1DOB8ZSwsTeeCPmJNXibUjj2EhAY1STs31o=
Subject key identifier: 72:2B:D4:15:6D:4E:7A:8B:B3:B9:3C:88:69:2E:42:90:EC:14:FC:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C07B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9710BBBC275211F1BA4EE795DAE4EC9C.roa
Signing time: Tue 24 Mar 2026 07:25:11 +0000
ROA not before: Tue 24 Mar 2026 07:25:05 +0000
ROA not after: Thu 27 Aug 2026 07:25:05 +0000
asID: 45669
IP address blocks: 154.198.69.0/24 maxlen: 24
154.198.70.0/24 maxlen: 24
154.198.71.0/24 maxlen: 24
154.198.72.0/24 maxlen: 24
154.198.73.0/24 maxlen: 24
154.198.74.0/24 maxlen: 24
154.198.75.0/24 maxlen: 24
154.198.76.0/24 maxlen: 24
154.198.77.0/24 maxlen: 24
154.198.78.0/24 maxlen: 24
154.198.79.0/24 maxlen: 24
154.198.80.0/24 maxlen: 24
154.198.81.0/24 maxlen: 24
154.198.82.0/24 maxlen: 24
154.198.83.0/24 maxlen: 24
154.198.84.0/24 maxlen: 24
154.198.85.0/24 maxlen: 24
154.198.86.0/24 maxlen: 24
154.198.88.0/24 maxlen: 24
154.198.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114811 (0x1c07b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 24 07:25:05 2026 GMT
Not After : Aug 27 07:25:05 2026 GMT
Subject: CN=69c23c56-0112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4b:90:d6:a6:b5:ac:e0:f6:54:f8:c4:8f:ca:
3f:d9:e1:61:91:4a:7d:6a:90:ae:e3:e7:11:c6:24:
48:5f:55:fe:a7:dc:cb:94:b6:44:91:fa:a6:aa:a4:
29:86:45:24:80:30:c2:96:6c:10:a3:f3:45:f9:c2:
e9:f7:fb:b3:48:62:9d:c3:be:1c:e6:56:bd:c5:85:
26:50:21:48:00:72:19:da:c1:35:f0:da:8e:d9:8f:
f5:f1:f6:51:69:77:8e:0f:04:f1:d6:84:c6:e4:6c:
65:1d:7d:c8:a8:a0:28:d1:4d:c5:c7:a9:3b:bb:66:
cd:8c:21:dc:85:7a:6c:d0:4c:a4:b1:80:75:d6:94:
1b:db:8b:2e:35:35:39:e0:c5:5d:d2:89:8d:3a:18:
2e:0c:83:3f:9d:d2:b6:79:22:ba:49:1b:9f:16:b9:
11:92:7f:bc:c6:9b:b0:29:3e:42:09:20:a3:4d:39:
9d:06:c1:cb:4f:90:30:14:54:b1:c8:42:dc:3f:0d:
9a:1a:c9:fa:c5:8f:28:c5:2d:b6:90:67:ff:4c:8b:
64:2d:58:93:bd:c9:80:44:d6:ae:77:06:05:a5:02:
8f:7a:d8:36:f1:2d:cf:c4:63:19:1e:31:23:89:fd:
62:11:62:1e:5b:d3:4f:ef:f3:e3:15:09:8f:a9:c7:
98:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2B:D4:15:6D:4E:7A:8B:B3:B9:3C:88:69:2E:42:90:EC:14:FC:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9710BBBC275211F1BA4EE795DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.69.0-154.198.86.255
154.198.88.0/23
Signature Algorithm: sha256WithRSAEncryption
15:92:39:b7:b0:ae:1e:15:27:85:b7:df:e5:92:ca:3f:4c:6d:
22:1d:5c:13:bf:c9:d1:27:c6:b3:e4:fe:65:58:ad:8a:fe:1e:
b6:dd:ad:b0:96:54:e4:c7:09:ea:69:29:68:3a:7f:2e:97:fa:
9c:a9:fb:9f:65:74:29:dd:01:cb:7d:2e:19:96:d8:7c:7c:ee:
d9:c1:43:54:37:8d:44:a5:c5:ea:7b:98:14:a6:08:9f:e1:c6:
b2:d6:26:e8:3b:fa:40:72:57:33:45:a3:4c:6e:23:51:e4:25:
73:87:ff:14:ab:a1:11:bc:b5:13:27:4b:de:9c:14:5e:96:0f:
a6:e9:61:c6:c1:b0:b2:d7:94:76:0c:73:b7:64:40:05:c0:a5:
9a:1b:77:f9:d5:07:9c:29:6b:5d:58:e8:b0:19:b1:8a:90:1e:
20:b1:74:c1:6c:46:fa:10:1e:b3:7d:28:57:59:15:a1:d3:71:
d8:35:80:d2:b7:c2:96:4d:f6:65:3a:82:26:86:54:b6:0a:b1:
99:27:9a:1e:f7:41:d0:51:30:02:78:ea:77:1d:1e:83:0e:26:
2a:d6:19:78:31:69:f9:df:2b:9e:a5:0c:39:6b:b9:71:72:00:
84:5e:45:23:20:b8:db:80:f8:2b:27:d8:17:95:78:ea:0d:25:
b4:34:fe:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:17:19 2026 by rpki-client