Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A08F8D2C243611F18F83FCF4DAE4EC9C.roa
File: A08F8D2C243611F18F83FCF4DAE4EC9C.roa (raw, json)
Hash identifier: QmY/zfMEp0yVOAYxZuQxIk/46sP3vlaondeUaWAXQG8=
Subject key identifier: 32:18:45:0F:4B:29:E8:3E:E7:E6:57:29:E2:52:2D:E2:74:61:C9:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C004
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A08F8D2C243611F18F83FCF4DAE4EC9C.roa
Signing time: Fri 20 Mar 2026 08:27:27 +0000
ROA not before: Fri 20 Mar 2026 08:27:22 +0000
ROA not after: Sun 26 Apr 2026 08:27:22 +0000
asID: 63139
IP address blocks: 154.93.77.0/24 maxlen: 24
154.93.78.0/24 maxlen: 24
154.93.79.0/24 maxlen: 24
154.93.80.0/24 maxlen: 24
154.93.81.0/24 maxlen: 24
154.93.82.0/24 maxlen: 24
154.93.83.0/24 maxlen: 24
154.93.95.0/24 maxlen: 24
154.93.123.0/24 maxlen: 24
154.94.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114692 (0x1c004)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 20 08:27:22 2026 GMT
Not After : Apr 26 08:27:22 2026 GMT
Subject: CN=69bd04ef-c7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bc:a7:1c:e9:bf:09:2b:93:88:0a:78:4e:c1:
b1:5f:65:5c:63:f1:d6:03:e8:3a:72:fd:5b:2a:df:
17:58:c9:34:38:bd:bc:45:da:05:b3:2e:7f:ab:8f:
87:8f:90:30:90:92:37:d9:b5:90:79:f6:b9:c5:e2:
19:36:09:dc:fb:bf:16:c9:e4:33:79:8f:be:7b:be:
b2:a5:13:9b:b0:d0:c9:62:39:78:40:71:f0:29:ff:
44:9c:2b:c9:08:72:8f:0b:a3:7a:22:d3:80:b9:74:
e8:6e:03:04:24:fd:ac:5e:89:a1:2d:57:21:b8:f5:
da:cb:ab:48:d0:f9:82:15:aa:1f:15:47:f9:8d:db:
9e:a6:92:a8:45:4c:70:68:05:dc:86:cc:ba:95:61:
87:5b:42:1d:60:84:e3:1f:57:ff:e3:73:85:30:36:
be:3d:1a:f4:4d:26:37:93:51:14:86:be:c4:71:f6:
fe:d3:31:46:3a:52:0d:7e:77:cc:af:50:8a:1a:1a:
30:5a:9a:f2:45:b3:cb:bf:ee:3b:22:43:fe:27:01:
ef:63:61:73:0a:98:49:ae:4a:b7:6d:3e:44:b4:fb:
38:d6:bf:bb:23:f5:19:08:56:1e:f4:7f:1a:41:42:
9a:6b:6b:a5:60:22:9a:e4:56:97:a5:ac:e9:d6:42:
3c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:18:45:0F:4B:29:E8:3E:E7:E6:57:29:E2:52:2D:E2:74:61:C9:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A08F8D2C243611F18F83FCF4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.77.0-154.93.83.255
154.93.95.0/24
154.93.123.0/24
154.94.111.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:1a:18:07:75:8f:e0:44:79:dd:d8:5e:2d:a8:f7:26:db:75:
94:e2:2a:44:61:c1:e8:5f:b5:e9:f6:36:d2:22:75:a0:78:a6:
cd:32:48:4b:61:a3:2c:90:f9:1d:75:40:e3:8d:3f:0d:22:a4:
66:49:f5:34:fe:a5:c6:c6:1a:85:61:7f:f1:e1:6b:98:dc:b3:
4a:54:79:8c:d3:26:92:3f:ba:f2:fe:39:71:a6:aa:e6:4f:5b:
9b:7a:7d:a7:43:92:e7:ed:88:49:ae:98:32:14:2f:13:53:c7:
3b:9b:31:4a:df:1b:e6:7f:06:bf:36:f8:af:6c:9e:51:dd:4b:
7c:85:f5:25:13:2c:14:7b:9a:aa:8e:1f:9a:d9:19:fc:57:8a:
01:ac:ee:5c:51:68:8a:e8:d9:7d:0e:3d:e1:91:60:41:0a:62:
52:5d:24:80:0c:80:aa:3f:2b:3b:2b:a2:04:11:8d:bc:89:33:
3b:43:b6:3a:fc:cf:74:f2:77:cc:29:ff:c1:30:c6:bb:01:5c:
01:89:aa:55:1d:66:f1:58:a0:23:b2:6d:3b:9d:79:ef:1d:81:
6c:0f:21:6c:9a:f4:02:a3:a7:62:d5:31:fd:ef:97:24:25:66:
ff:98:0d:b3:92:bc:9f:b4:31:d9:dd:ec:6f:8a:8d:dd:6b:9e:
69:86:a4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:13:52 2026 by rpki-client