Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B073902C161611F1ACD4CEC9DAE4EC9C.roa
File: B073902C161611F1ACD4CEC9DAE4EC9C.roa (raw, json)
Hash identifier: poM1pZ5VMuec3yOLkGL5R/a64IytjHjejWrBqK0HvIo=
Subject key identifier: 8A:CC:6D:9D:25:55:AA:AF:00:36:75:08:D6:0F:BB:88:A6:94:6B:7C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BCDD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B073902C161611F1ACD4CEC9DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 09:03:33 +0000
ROA not before: Mon 02 Mar 2026 09:03:29 +0000
ROA not after: Fri 02 Mar 2029 09:03:29 +0000
asID: 17561
IP address blocks: 154.198.124.0/24 maxlen: 24
154.198.125.0/24 maxlen: 24
154.198.126.0/24 maxlen: 24
154.198.127.0/24 maxlen: 24
154.211.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113885 (0x1bcdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 2 09:03:29 2026 GMT
Not After : Mar 2 09:03:29 2029 GMT
Subject: CN=69a55265-3473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:89:66:98:56:d6:1c:39:d0:52:35:bc:ce:
7f:00:50:6b:d9:b7:d5:b1:47:75:b9:01:bc:92:c2:
37:f5:78:d2:0e:92:33:50:87:e6:23:f6:89:23:3e:
cb:48:e6:84:2f:5c:e0:c9:9b:9f:1e:46:bf:d5:7a:
e4:2d:bc:bd:f0:7e:16:19:37:c7:36:38:84:d1:15:
ab:e5:43:1d:34:e4:e6:be:cc:56:60:05:5d:11:a1:
c7:ea:47:ed:eb:e5:31:d2:5b:14:c8:91:5c:80:b3:
63:f1:07:55:ca:b2:8e:db:0d:4f:12:57:c2:2f:ef:
d1:3b:df:17:b3:f1:94:7a:46:1a:26:6d:aa:db:e7:
9c:16:09:30:b4:0c:bb:c9:dd:ac:a5:75:6e:e3:24:
50:7a:3b:bc:a8:ab:74:74:f8:96:73:d9:88:9d:5c:
7f:a2:59:6a:61:03:f9:42:06:c0:04:a7:f4:6c:e0:
8c:1a:43:85:6c:7c:79:a1:b2:67:2b:08:cc:16:35:
79:c0:56:92:24:c0:be:a2:d6:fa:86:c5:6d:24:a2:
d8:a1:3a:1d:7a:3f:e0:6f:9b:37:90:2e:18:49:a8:
c6:1b:2f:67:43:aa:ae:d2:d9:98:06:cd:d8:88:a0:
c4:a2:2e:13:30:33:4d:87:0f:d1:bd:22:4d:55:58:
a8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CC:6D:9D:25:55:AA:AF:00:36:75:08:D6:0F:BB:88:A6:94:6B:7C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B073902C161611F1ACD4CEC9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.124.0/22
154.211.210.0/24
Signature Algorithm: sha256WithRSAEncryption
43:d8:3b:ef:d0:ca:d8:f8:86:49:28:e7:6f:7c:9e:1c:c1:c0:
d9:8e:bc:83:de:dc:f6:9b:04:66:36:de:d8:b1:24:3f:f9:8b:
b0:c9:79:1e:1b:dc:32:19:94:c0:5e:3f:6a:86:3c:c7:e1:40:
52:da:5f:39:bf:c5:51:79:b4:c2:07:b2:f9:48:28:77:05:2f:
f8:c5:68:4f:8c:c1:bf:f5:75:d7:3e:c6:ac:44:9c:fa:dc:31:
88:52:38:3a:b2:65:03:ba:14:2a:22:14:5d:5a:e1:65:de:77:
7f:28:31:a9:a0:17:8c:22:8b:3a:d4:50:50:bd:11:5d:6b:d0:
ae:c4:43:d6:c0:25:91:cd:58:f2:b1:09:ae:b3:48:66:e3:42:
5c:2b:2f:08:1c:30:26:58:e8:1b:47:bb:a8:8b:ab:69:7e:e3:
97:70:3f:f4:26:2e:8d:dc:5a:49:a1:46:17:a5:28:25:07:80:
c0:36:ba:6b:da:b4:04:48:2d:66:af:bf:01:cc:2b:40:23:00:
79:06:4c:b7:1b:a0:1a:6e:89:66:75:76:cf:00:ba:09:b2:4d:
d2:90:0f:fc:6b:d3:f9:47:c1:97:a5:90:3c:2a:65:da:33:ce:
32:79:28:52:cb:9c:82:06:5b:ee:c4:48:38:02:9e:6b:08:85:
d2:ae:77:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:20 2026 by rpki-client