Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D80D62E8245D11F18AF120D2DAE4EC9C.roa
File: D80D62E8245D11F18AF120D2DAE4EC9C.roa (raw, json)
Hash identifier: 3DAIE5XpF1Namo7z8CyrgRzzQ9QO8oWelP2agNtezDo=
Subject key identifier: D3:1F:B9:56:58:64:8F:F3:5E:AC:14:11:7F:9B:A5:01:85:B5:75:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C040
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D80D62E8245D11F18AF120D2DAE4EC9C.roa
Signing time: Fri 20 Mar 2026 13:08:10 +0000
ROA not before: Fri 20 Mar 2026 13:08:05 +0000
ROA not after: Sun 26 Apr 2026 13:08:05 +0000
asID: 63139
IP address blocks: 154.194.68.0/24 maxlen: 24
154.203.160.0/24 maxlen: 24
154.203.161.0/24 maxlen: 24
154.203.162.0/24 maxlen: 24
154.203.163.0/24 maxlen: 24
154.203.164.0/24 maxlen: 24
154.203.165.0/24 maxlen: 24
154.203.166.0/24 maxlen: 24
154.203.167.0/24 maxlen: 24
154.203.168.0/24 maxlen: 24
154.203.169.0/24 maxlen: 24
154.203.170.0/24 maxlen: 24
154.203.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114752 (0x1c040)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 20 13:08:05 2026 GMT
Not After : Apr 26 13:08:05 2026 GMT
Subject: CN=69bd46ba-31cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:40:3e:4e:86:d0:43:78:bc:17:8f:3a:52:a3:
9f:53:97:24:ba:6c:a6:0b:96:d5:0f:29:97:56:88:
8e:22:8f:13:99:27:b1:62:80:f1:61:44:68:36:4b:
8d:33:6e:79:f1:dd:54:aa:c5:24:83:00:ea:00:4a:
43:24:14:4c:69:24:8e:f3:0c:7e:1a:c3:36:fc:14:
1d:6e:22:79:d6:a8:a5:ad:fb:1c:cd:6f:03:19:b1:
b1:ec:9e:c8:74:f2:6a:c8:fb:65:fb:c9:9d:45:92:
1e:3e:58:42:83:af:12:48:76:9b:cf:f2:fb:7c:e8:
68:89:8e:1c:26:ba:a5:e1:4a:21:05:74:7e:49:0c:
06:07:25:3d:88:20:94:09:b2:fa:06:10:e5:bc:8d:
af:4c:4a:a3:c4:69:1c:40:84:99:d2:25:de:a5:3d:
e9:a2:82:a8:d0:dc:de:1b:94:91:34:22:0c:5f:46:
b0:73:cc:45:38:f6:d5:95:f4:6f:c1:5b:f7:5e:f9:
3e:a4:c1:c6:73:55:60:29:54:81:6d:14:a8:cc:f1:
e6:08:63:7f:e9:e6:67:78:91:c9:d0:6e:7e:61:6d:
c7:11:8e:87:81:fa:b2:f3:23:8b:b7:18:cb:de:a9:
0e:92:49:48:53:66:ac:03:3d:3d:9f:17:67:96:eb:
67:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1F:B9:56:58:64:8F:F3:5E:AC:14:11:7F:9B:A5:01:85:B5:75:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D80D62E8245D11F18AF120D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.68.0/24
154.203.160.0-154.203.171.255
Signature Algorithm: sha256WithRSAEncryption
be:70:37:d4:6f:4e:bb:a9:8e:e9:20:00:7a:81:65:1b:b5:a2:
5e:a1:d3:04:91:3d:bb:a3:e3:f5:00:5b:c4:84:77:b0:e3:17:
4b:23:d3:c0:64:02:84:60:d8:8e:57:03:dc:c2:c3:28:6a:ca:
6e:b6:dc:7e:34:85:25:ca:38:4a:16:30:8f:68:66:06:80:51:
dd:44:94:54:ee:95:08:61:ae:85:25:4b:32:96:37:06:29:92:
a8:0c:cf:17:67:0b:b0:1c:81:53:d5:4f:a3:c8:d5:63:1b:d7:
e5:29:ae:ad:07:52:59:64:2a:52:83:6f:2f:e7:dc:10:ec:96:
21:74:ac:75:ab:ac:fa:26:26:8c:c4:d3:86:9f:53:69:be:35:
16:f4:31:bb:74:76:bc:94:08:48:5d:aa:06:73:2f:44:b8:8b:
2a:de:c3:a5:30:2a:0b:e4:da:83:ce:58:64:64:64:db:65:6d:
8d:4d:58:eb:37:49:a7:0f:6f:ff:af:74:37:31:a0:3a:21:a7:
da:f8:53:13:bf:ff:cf:d4:81:9b:cf:3c:88:a7:44:18:16:b6:
7b:36:c0:8e:10:49:ca:63:5b:45:79:7a:35:1d:4f:7c:1c:3e:
07:3b:74:4f:78:58:63:17:97:54:65:ea:b0:9d:06:77:9b:8c:
71:99:42:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:20:36 2026 by rpki-client