Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B801E5FC244711F1B68EA0D5DAE4EC9C.roa
File: B801E5FC244711F1B68EA0D5DAE4EC9C.roa (raw, json)
Hash identifier: 25/yybM7/zafxfeKSb5CutFeMOdawY2ux+9fyriDn+Q=
Subject key identifier: 2F:D6:20:93:5A:27:43:A8:C3:87:01:16:55:00:BC:07:88:B9:62:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C018
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B801E5FC244711F1B68EA0D5DAE4EC9C.roa
Signing time: Fri 20 Mar 2026 10:29:49 +0000
ROA not before: Fri 20 Mar 2026 10:29:41 +0000
ROA not after: Sun 26 Apr 2026 10:29:41 +0000
asID: 138915
IP address blocks: 154.203.149.0/24 maxlen: 24
154.203.150.0/24 maxlen: 24
154.203.151.0/24 maxlen: 24
154.203.152.0/24 maxlen: 24
154.203.153.0/24 maxlen: 24
154.203.154.0/23 maxlen: 24
154.203.156.0/24 maxlen: 24
154.203.157.0/24 maxlen: 24
154.203.158.0/24 maxlen: 24
154.203.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114712 (0x1c018)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 20 10:29:41 2026 GMT
Not After : Apr 26 10:29:41 2026 GMT
Subject: CN=69bd219d-b1c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c5:fc:e6:da:ae:83:a3:48:b6:34:0d:57:36:
9e:7c:35:43:95:66:5a:fd:7e:1b:4d:2a:eb:96:1f:
b0:86:17:11:62:c2:01:3e:23:d4:f8:96:19:99:55:
f9:86:13:a2:ce:94:88:7d:a7:ab:50:60:d3:73:bd:
7b:f6:92:4f:f6:82:30:64:2c:49:44:2b:dd:fe:1e:
94:dc:eb:a0:3c:0b:57:0c:08:09:e3:64:2c:19:d0:
ad:00:3b:54:8e:a1:20:dd:12:16:20:a5:9c:46:43:
97:b2:2d:38:01:4d:98:b4:ed:af:71:79:af:e1:c7:
15:a9:9e:c3:e0:76:64:64:62:c8:8f:49:c8:ca:76:
ac:16:86:a2:83:dd:c1:e5:94:aa:b3:4c:79:09:1c:
ff:6f:1e:18:56:9c:95:82:d8:e5:b7:7f:c1:12:37:
65:4f:c9:b1:86:89:7f:7d:9d:c1:01:d0:b3:c4:c3:
6e:f8:64:10:4f:ad:13:73:e0:9e:6a:ad:62:53:35:
46:6b:c1:0b:54:56:9e:2c:1e:a9:b8:8f:e5:7b:88:
c7:3b:bb:67:e5:24:b9:6e:b7:e9:0c:6e:3e:9c:92:
23:bf:fc:6c:80:53:fc:aa:3e:7a:ee:a1:ee:52:d7:
8c:d5:34:2e:4f:28:5e:28:53:54:f3:d0:b7:bd:7e:
70:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D6:20:93:5A:27:43:A8:C3:87:01:16:55:00:BC:07:88:B9:62:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B801E5FC244711F1B68EA0D5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.149.0-154.203.159.255
Signature Algorithm: sha256WithRSAEncryption
25:e1:cf:a9:30:80:a8:3c:6f:32:15:a6:0a:b4:4e:56:02:12:
50:e7:50:a8:8e:3e:df:8e:2d:f3:3f:7f:61:b3:1f:d8:6b:db:
dd:e0:f0:7f:40:d6:2d:d8:aa:1a:26:83:a8:1e:98:85:1d:64:
a8:bf:a2:d3:e4:51:67:40:cd:10:42:aa:b8:8c:a3:97:9a:24:
ab:43:02:53:3b:cc:a2:34:3d:1c:73:59:91:03:d7:b3:91:3d:
c7:c8:92:11:1f:41:d3:e9:92:26:d6:c6:8f:ab:b0:b6:d3:6e:
e2:58:78:38:6d:79:ab:56:9a:a1:b3:42:c9:8b:1f:fb:7b:b0:
22:85:85:c2:16:56:c5:63:7e:36:27:22:d0:4c:72:6b:9d:ae:
6a:15:ac:84:a6:63:08:43:e6:d9:58:4b:e2:8a:1d:8b:64:b0:
28:74:5f:68:33:33:e3:44:a7:ba:d0:2e:8e:dd:62:cb:a4:a0:
b4:96:7d:36:89:a9:d8:76:e1:07:68:9d:b6:5a:1b:86:c7:e9:
9e:54:89:3d:fc:f6:ed:44:1e:79:aa:d9:76:d9:23:fc:a2:df:
98:df:27:ea:b9:01:b9:c5:b6:32:4a:31:a5:cc:70:36:d1:76:
b2:e4:7c:62:ba:e6:c3:22:d2:c2:f3:60:06:82:ad:02:1a:83:
96:48:59:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:19:50 2026 by rpki-client