Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6066988237411F1ACD9018FDAE4EC9C.roa
File: E6066988237411F1ACD9018FDAE4EC9C.roa (raw, json)
Hash identifier: GRBsRu7Q5JI7wQfujgEwUeAc5l0w7wv2CDdm6V4X3ZI=
Subject key identifier: 41:84:DB:A3:F4:F2:5E:1E:8E:ED:48:11:78:3E:9D:37:21:42:21:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BFCB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6066988237411F1ACD9018FDAE4EC9C.roa
Signing time: Thu 19 Mar 2026 09:20:41 +0000
ROA not before: Thu 19 Mar 2026 09:20:35 +0000
ROA not after: Fri 24 Apr 2026 09:20:35 +0000
asID: 55933
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.148.0/23 maxlen: 24
154.89.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114635 (0x1bfcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 19 09:20:35 2026 GMT
Not After : Apr 24 09:20:35 2026 GMT
Subject: CN=69bbbfe9-855c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:11:26:05:62:6b:d0:7e:c7:99:8d:bb:36:68:
81:91:2a:b5:fb:17:6c:45:31:35:9d:8b:a0:14:6f:
19:3d:ad:59:85:ea:72:cb:57:5d:74:36:65:b8:c5:
78:d6:09:35:a4:7b:d0:9f:07:c8:61:ea:dd:f5:b9:
7a:c5:28:8f:31:ad:c4:e7:75:fd:64:19:b7:5f:7f:
e1:0a:3a:74:b3:1a:38:77:97:b7:bd:4f:c7:1e:95:
e1:46:82:df:a9:68:73:1e:c2:20:19:fa:2b:a4:39:
f3:ec:22:b4:85:c2:48:ac:3c:54:76:c9:60:e6:5b:
1c:2e:10:6d:b9:46:b1:48:2a:bf:5a:c1:56:61:ce:
0d:c3:91:dd:65:af:4e:e9:b3:33:c4:5f:21:86:8a:
94:8f:7f:2f:46:90:12:d7:d5:d8:15:5b:d0:8f:a7:
c6:20:fc:98:62:09:a8:46:ca:4f:50:18:61:b7:93:
cf:12:e8:af:c3:07:b7:f3:09:05:07:ac:fc:b6:a2:
c1:1c:ab:cf:2a:79:4c:c9:e0:92:0f:11:6d:bb:70:
f8:b3:b5:3e:19:59:35:a0:c0:3e:39:c6:c0:e7:fe:
94:e7:f8:b6:6a:ef:d1:73:d3:47:80:3f:58:fd:c6:
6b:b6:4b:de:44:39:c5:e1:94:d9:55:7f:4a:cf:69:
8c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:84:DB:A3:F4:F2:5E:1E:8E:ED:48:11:78:3E:9D:37:21:42:21:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6066988237411F1ACD9018FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0/20
Signature Algorithm: sha256WithRSAEncryption
4a:2b:a0:e6:c3:24:7b:2c:46:47:db:37:c4:10:7c:e6:92:89:
ab:ca:73:12:02:3d:fe:bd:b1:dd:f8:27:ca:fb:d4:0c:85:a9:
01:d2:3a:ee:5f:a7:2f:f1:ba:95:24:bc:13:f0:08:5f:45:4b:
27:d7:98:f3:45:2e:32:7b:48:49:51:34:d1:ea:7e:aa:e6:57:
ed:29:7d:0c:c3:f1:00:ca:b1:94:ee:70:b2:94:9c:b1:80:07:
e9:00:f4:e1:2c:26:f3:c0:b7:39:b7:df:48:c9:30:74:e8:a1:
4a:ce:39:f6:ea:5b:b0:9c:0e:26:a6:48:67:eb:89:42:e3:09:
ba:52:da:f1:1c:16:07:b8:0b:0a:08:10:16:6b:2d:22:0f:45:
2d:31:31:15:24:d6:2e:72:e8:fc:0f:57:1e:4d:8e:d5:0e:70:
6b:cb:96:1c:a6:cc:ab:d7:ec:0b:44:fd:48:4d:21:c1:f1:4e:
81:2e:f8:2a:43:0a:cd:10:d0:0d:e4:e1:06:88:d0:27:73:3a:
ed:ee:8d:b5:e4:97:1e:29:c9:bd:f4:e8:57:a3:c6:92:01:c5:
79:e4:b0:24:7c:82:eb:72:3e:02:75:8d:a6:87:f1:4d:33:5e:
e3:c9:df:b6:2d:2f:5e:ca:0e:2c:2a:ef:2d:b8:3f:9f:87:7d:
ef:7e:78:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:19:13 2026 by rpki-client