Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B09254801DE111F19570D386DAE4EC9C.roa
File: B09254801DE111F19570D386DAE4EC9C.roa (raw, json)
Hash identifier: F3n2P/TtBhNWlc3lYiN8ZC4m1NQkyD6NdQIQl0CyMNk=
Subject key identifier: 63:93:B7:11:76:87:09:8D:E2:94:E3:24:C2:C5:D1:73:1C:B8:3F:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BEF6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B09254801DE111F19570D386DAE4EC9C.roa
Signing time: Thu 12 Mar 2026 07:04:20 +0000
ROA not before: Thu 12 Mar 2026 07:04:15 +0000
ROA not after: Sun 19 Apr 2026 07:04:15 +0000
asID: 63199
IP address blocks: 154.81.62.0/24 maxlen: 24
154.81.63.0/24 maxlen: 24
154.89.2.0/24 maxlen: 24
154.89.3.0/24 maxlen: 24
154.89.134.0/24 maxlen: 24
154.89.135.0/24 maxlen: 24
154.92.1.0/24 maxlen: 24
154.92.21.0/24 maxlen: 24
154.196.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114422 (0x1bef6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 12 07:04:15 2026 GMT
Not After : Apr 19 07:04:15 2026 GMT
Subject: CN=69b26574-e334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:37:3d:77:d9:90:b4:ec:a6:be:43:37:eb:ba:
43:0d:7e:b2:38:8e:d8:49:5c:13:1f:ca:90:4c:0f:
ec:27:ce:43:bc:bb:67:24:7c:76:43:a5:45:6a:c5:
60:dd:74:c1:6a:a0:ce:89:41:b8:63:d8:a3:50:10:
d3:9c:f3:e6:a3:13:4e:a8:96:77:c3:80:ef:52:ce:
a1:e1:fa:9d:26:b3:a9:a3:7b:cf:47:2d:26:8d:49:
19:69:c6:e3:40:b9:b5:46:d2:0e:a8:bc:e5:21:55:
f8:47:2e:66:96:9e:e7:c2:22:d9:6f:31:b9:be:b9:
e3:67:13:86:37:aa:54:87:2f:01:d5:ab:fa:c7:39:
65:78:89:1a:99:54:cf:4c:e1:ea:0f:a1:60:99:97:
0d:d1:e6:15:87:51:ff:40:85:31:b7:61:ab:35:78:
90:7d:d5:cb:ed:ce:85:61:a2:82:f0:b7:8e:6e:29:
2c:38:54:b3:00:ab:87:5d:fa:bf:7c:01:07:23:47:
48:11:cf:c0:6c:8a:02:22:43:ef:a7:fa:f8:dd:5a:
0c:62:07:a0:c8:e5:2d:47:bf:10:18:8b:9a:21:eb:
60:f1:e3:17:fc:c3:34:94:37:ae:14:af:43:a2:2f:
48:dd:b5:a1:59:42:c9:87:7d:57:e3:9f:a9:0b:40:
34:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:93:B7:11:76:87:09:8D:E2:94:E3:24:C2:C5:D1:73:1C:B8:3F:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B09254801DE111F19570D386DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.62.0/23
154.89.2.0/23
154.89.134.0/23
154.92.1.0/24
154.92.21.0/24
154.196.13.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:c4:d6:96:b3:ef:71:34:66:bb:4a:c3:10:10:81:5b:9b:5b:
8e:14:88:98:b7:91:cb:4f:6a:ad:7b:7a:4f:dc:e0:91:22:ee:
00:9a:2a:16:63:75:b9:50:d5:59:d9:db:e6:a8:4a:4e:e2:d4:
c9:0a:16:9d:68:b8:31:e6:7c:81:4e:f6:e8:a1:cf:ba:d3:28:
bc:a3:2b:44:81:3a:59:18:eb:be:1b:5d:34:16:ba:2b:9b:a4:
f8:89:18:26:8f:26:ee:25:59:7c:da:e5:18:dd:cf:bc:50:38:
97:f5:fa:ac:2b:5e:2c:f6:8f:17:e3:eb:a5:fa:00:cc:8a:3f:
69:5b:86:fe:57:78:47:7e:14:2a:57:59:98:a9:9b:a7:59:ef:
ed:e6:24:64:9a:2c:ce:e2:66:b8:af:7c:0c:b1:0c:32:88:43:
0b:19:1b:78:32:35:8e:e5:58:b3:e5:15:26:cd:76:88:13:9a:
4f:f8:e3:b9:65:18:4c:ef:de:6d:77:6a:6f:37:59:4d:09:6d:
34:76:77:11:cf:69:30:db:02:ad:ae:8e:c2:a5:d2:fe:82:4b:
2f:d6:5d:2b:a7:1b:41:24:0a:36:33:57:0f:f8:c0:58:04:96:
86:b0:ea:53:45:b5:2f:9e:75:5e:d5:80:1f:1a:ef:10:33:db:
02:39:1f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:17:33 2026 by rpki-client