Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A341321E244A11F1BB8694E5DAE4EC9C.roa
File: A341321E244A11F1BB8694E5DAE4EC9C.roa (raw, json)
Hash identifier: bKT6zwi9IG6yAlVAX+3CCMEFZEns/WZKcchGr0VCjoo=
Subject key identifier: 22:BB:6B:4D:6F:FF:5B:FA:D9:D5:8F:62:0E:D0:C3:63:D8:CF:D4:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C020
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A341321E244A11F1BB8694E5DAE4EC9C.roa
Signing time: Fri 20 Mar 2026 10:50:42 +0000
ROA not before: Fri 20 Mar 2026 10:50:36 +0000
ROA not after: Sun 26 Apr 2026 10:50:36 +0000
asID: 138915
IP address blocks: 154.206.98.0/23 maxlen: 24
154.206.100.0/23 maxlen: 24
154.206.102.0/23 maxlen: 24
154.206.104.0/23 maxlen: 24
154.206.106.0/24 maxlen: 24
154.206.107.0/24 maxlen: 24
154.206.108.0/23 maxlen: 24
154.206.110.0/23 maxlen: 24
154.206.112.0/23 maxlen: 24
154.206.114.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114720 (0x1c020)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 20 10:50:36 2026 GMT
Not After : Apr 26 10:50:36 2026 GMT
Subject: CN=69bd2681-22ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:27:6c:f7:58:fb:2c:3b:21:8b:15:12:0d:7e:
7d:ba:09:3c:b6:94:04:26:5b:93:a0:ac:6d:fe:89:
37:1b:f0:17:fb:04:f5:aa:5a:13:64:d6:3d:45:bf:
68:62:c8:35:0b:41:10:3d:b0:d6:62:fb:ac:42:4c:
5f:84:d0:80:04:20:2f:e4:e2:df:d5:d6:d7:5c:38:
34:77:35:f5:d4:ff:f5:ef:1d:d3:b8:5a:c8:2c:62:
c0:17:b8:5a:98:55:67:e5:e7:0f:ef:d9:71:a7:32:
29:6b:f7:d5:26:59:2d:6d:e4:c5:7d:37:e4:81:a6:
b1:b4:9f:a1:02:87:2a:40:ed:df:6a:ad:8e:dc:cb:
b4:e7:2e:1d:bc:c8:fc:63:5a:ca:19:eb:f3:80:4d:
0d:5a:a1:3e:b5:36:f1:2a:01:4c:37:a6:16:62:6e:
5e:f8:8d:4b:a2:9e:86:8e:96:de:e6:76:88:be:cd:
9e:c9:b1:87:e3:b4:77:06:13:1d:9a:88:d4:7c:5d:
6d:84:fc:51:a5:8f:27:e1:5d:77:b6:b2:9d:fe:bc:
1d:fb:26:c0:60:63:01:db:c6:e5:18:a9:71:6e:ac:
6e:bd:f1:97:c3:9a:24:15:6e:2a:5f:c5:53:dc:78:
54:f7:25:97:9a:d9:ff:bf:32:2d:ec:ea:39:92:ce:
73:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BB:6B:4D:6F:FF:5B:FA:D9:D5:8F:62:0E:D0:C3:63:D8:CF:D4:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A341321E244A11F1BB8694E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.98.0-154.206.115.255
Signature Algorithm: sha256WithRSAEncryption
cc:04:b6:63:e5:9e:ec:8a:71:c7:50:22:73:98:fb:04:ea:5e:
48:6f:12:b1:a2:d7:17:21:5f:76:26:70:23:56:fc:aa:a8:76:
78:c2:18:6b:91:d5:f2:51:c7:f9:86:be:84:27:03:34:4b:25:
c0:a3:0c:d0:2d:a7:fd:b9:70:18:1a:07:80:74:e4:ce:cb:49:
e0:1c:a6:47:83:34:ba:f8:09:0b:fc:1a:a1:38:a9:de:12:76:
8e:88:c6:08:61:e2:4c:0e:e6:2c:62:65:d7:55:71:05:f4:27:
15:7a:1d:6c:c3:7f:66:24:fd:83:9b:90:0d:91:36:66:cf:58:
72:5a:bd:fc:56:8b:09:67:61:2d:05:1d:9c:a4:08:21:55:72:
26:3e:22:af:c3:8d:1f:76:87:e4:7a:7e:5c:0a:c3:9b:c1:12:
19:d0:99:82:e0:66:b3:16:cd:dd:89:4c:1c:31:a5:24:51:55:
e7:b2:7b:02:b4:6d:37:63:fd:8c:6d:25:34:87:68:a9:9b:69:
5d:c6:1e:99:b1:da:b3:35:29:a6:75:6e:98:52:15:e0:10:0b:
54:b6:29:08:a1:b8:e5:e4:f6:e9:b5:c2:c7:41:b0:d7:53:30:
56:f7:bd:a5:38:d7:fe:e0:d9:eb:06:34:dd:a5:4b:98:85:bb:
9d:05:3a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:17:18 2026 by rpki-client