Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6139DDE1BB411F1BFD6D2C9DAE4EC9C.roa
File: C6139DDE1BB411F1BFD6D2C9DAE4EC9C.roa (raw, json)
Hash identifier: H2H9g9FiJyokc2XzirrIrSio1uYdjjqdUj480yV+9Kw=
Subject key identifier: 88:81:10:7D:8F:01:57:A4:27:A6:DC:BF:0B:2F:09:6F:A4:5D:AA:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE90
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6139DDE1BB411F1BFD6D2C9DAE4EC9C.roa
Signing time: Mon 09 Mar 2026 12:37:46 +0000
ROA not before: Mon 09 Mar 2026 12:37:42 +0000
ROA not after: Sat 11 Apr 2026 12:37:42 +0000
asID: 17497
IP address blocks: 154.217.192.0/20 maxlen: 24
154.217.192.0/24 maxlen: 24
154.217.193.0/24 maxlen: 24
154.217.194.0/24 maxlen: 24
154.217.195.0/24 maxlen: 24
154.217.196.0/24 maxlen: 24
154.217.197.0/24 maxlen: 24
154.217.198.0/24 maxlen: 24
154.217.199.0/24 maxlen: 24
154.217.200.0/24 maxlen: 24
154.217.201.0/24 maxlen: 24
154.217.202.0/24 maxlen: 24
154.217.203.0/24 maxlen: 24
154.217.204.0/24 maxlen: 24
154.217.205.0/24 maxlen: 24
154.217.206.0/24 maxlen: 24
154.217.207.0/24 maxlen: 24
154.222.148.0/22 maxlen: 24
154.222.148.0/24 maxlen: 24
154.222.149.0/24 maxlen: 24
154.222.150.0/24 maxlen: 24
154.222.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Mar 2026 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114320 (0x1be90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 9 12:37:42 2026 GMT
Not After : Apr 11 12:37:42 2026 GMT
Subject: CN=69aebf19-57cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ea:50:e1:94:7e:7e:a6:8e:c2:34:0e:4d:05:
d8:5f:a2:52:ca:2f:38:12:a9:07:25:ba:d9:04:61:
25:dc:6c:fc:0f:1d:fe:b2:06:ab:fc:4d:11:b5:5e:
a3:f5:12:33:e9:21:6e:47:b2:c0:14:ba:d8:ea:47:
96:b6:5a:8e:99:ef:40:73:ca:50:d8:3d:eb:1e:13:
c1:a5:e1:4b:84:d0:e8:16:21:cd:32:33:db:ff:07:
45:04:37:3d:48:d3:fc:ca:ba:00:c7:d7:de:77:a5:
91:24:df:70:49:1e:0a:b9:7c:62:fb:0d:05:e6:81:
06:58:9e:b1:40:34:54:75:15:09:71:64:74:aa:a5:
3c:6e:e6:4d:10:32:fb:ab:ec:6e:93:14:bf:8a:eb:
32:10:1f:2f:31:53:00:ef:6b:69:45:70:d8:91:fe:
37:98:6a:09:46:b3:58:26:e7:b0:8e:08:ab:6b:eb:
1d:d5:5d:74:50:cd:9b:ed:a6:95:5e:07:05:65:06:
30:d9:8d:43:47:b4:87:de:b6:d1:07:d8:36:31:4f:
48:aa:d7:2c:cc:2b:5e:ab:08:83:54:f4:62:1b:19:
74:0d:d9:05:81:45:50:9f:45:0b:2d:19:22:ec:0b:
ec:5c:64:87:b5:07:97:72:ba:8f:d9:70:41:86:bf:
9a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:81:10:7D:8F:01:57:A4:27:A6:DC:BF:0B:2F:09:6F:A4:5D:AA:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6139DDE1BB411F1BFD6D2C9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.192.0/20
154.222.148.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:32:b8:f0:e0:b5:88:ac:b0:c9:72:3d:ac:a7:b3:10:79:1d:
9b:cf:c6:c4:8e:ef:02:aa:7b:1c:8f:77:a0:16:7b:28:26:79:
f0:66:48:aa:a4:aa:1f:20:00:9d:2c:97:c4:d4:33:04:68:13:
ec:84:6a:e7:8b:fe:e1:69:39:cb:e9:86:33:94:9c:0d:2c:4f:
be:aa:77:ba:21:33:9c:6d:47:8f:ab:44:95:ac:3f:86:9d:8e:
e9:74:73:16:a5:4e:ca:19:35:03:70:9a:73:c1:88:3b:a8:df:
da:d4:1a:b5:5e:c7:c9:06:e7:1c:f0:ed:7e:61:d8:61:8f:35:
8b:e8:28:b7:ac:df:27:1f:60:50:c0:f5:99:14:b7:2e:b2:74:
6b:e1:ae:c9:c7:2b:61:8f:5b:de:d5:a3:5c:65:fa:e5:55:36:
cb:5a:40:72:8f:f6:78:cd:f7:3a:d8:97:2e:fd:b6:fc:f9:75:
9e:fe:a6:8d:e4:d5:9e:97:2a:79:2b:7d:92:2e:d8:0d:24:18:
91:7b:c6:ed:12:a2:5e:96:fc:8a:e3:85:20:ad:64:0a:c2:96:
7d:34:df:1f:eb:e6:9c:32:1c:f7:b4:86:9e:22:6e:10:27:e3:
53:25:00:37:7c:3b:c9:14:87:42:31:3f:97:ef:5e:04:c4:53:
e8:02:46:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 09:28:18 2026 by rpki-client