Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E64A0B90193B11F1A74271A5DAE4EC9C.roa
File: E64A0B90193B11F1A74271A5DAE4EC9C.roa (raw, json)
Hash identifier: tZs4k3HcVQh26w1X5Jh6TnZ1dASFQ/abNCqoaVjcM+s=
Subject key identifier: 19:F2:AE:EA:67:D7:CD:A7:FE:0E:04:A5:41:8A:5C:FB:49:39:FD:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BDF7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E64A0B90193B11F1A74271A5DAE4EC9C.roa
Signing time: Fri 06 Mar 2026 09:07:28 +0000
ROA not before: Fri 06 Mar 2026 09:07:24 +0000
ROA not after: Wed 08 Apr 2026 09:07:24 +0000
asID: 45194
IP address blocks: 154.84.200.0/24 maxlen: 24
154.84.201.0/24 maxlen: 24
154.84.202.0/24 maxlen: 24
154.84.203.0/24 maxlen: 24
154.84.204.0/24 maxlen: 24
154.84.205.0/24 maxlen: 24
154.84.252.0/24 maxlen: 24
154.84.253.0/24 maxlen: 24
154.84.254.0/24 maxlen: 24
154.84.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Mar 2026 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114167 (0x1bdf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 6 09:07:24 2026 GMT
Not After : Apr 8 09:07:24 2026 GMT
Subject: CN=69aa9950-aa91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2d:ed:06:fc:20:59:5f:00:c2:24:42:41:c5:
59:77:5e:4e:7d:77:8c:96:b4:a3:a8:89:33:76:c8:
15:8a:e7:d2:07:f1:96:3a:7a:3e:6c:6b:5f:bb:57:
de:f5:8b:97:a5:28:f9:3c:1c:9e:eb:ac:0f:34:2c:
68:f5:80:d1:1f:df:fd:6d:42:9c:5c:01:0e:8c:c8:
88:41:bf:e2:b0:f6:9f:72:46:57:74:28:b9:69:f0:
d3:87:76:2a:eb:90:c6:50:98:31:7a:b9:dc:33:07:
85:42:5b:52:dc:4d:62:42:f6:7b:b4:93:f7:65:75:
64:2e:ff:ef:e6:84:48:19:9b:4c:98:0d:e9:26:db:
4c:33:3c:72:e5:96:3b:a1:85:cf:6b:1c:de:40:f2:
1b:7b:18:2b:d8:bd:e7:c6:ff:a0:ee:73:4c:a1:18:
96:15:d6:b7:eb:c2:36:d3:1d:a9:e0:4a:03:31:74:
a5:03:f1:45:c8:f0:71:1c:7c:9d:f5:23:d3:ca:a7:
04:03:22:a8:66:57:a3:5e:3e:86:ad:26:33:f8:03:
1e:ae:3a:f4:36:2f:20:01:35:64:df:c2:29:89:7d:
5f:74:da:28:4f:8a:7d:57:54:90:b0:25:e5:1a:9a:
d1:09:fe:52:b3:b0:f6:89:a3:83:25:80:a7:eb:d7:
57:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F2:AE:EA:67:D7:CD:A7:FE:0E:04:A5:41:8A:5C:FB:49:39:FD:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E64A0B90193B11F1A74271A5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.200.0-154.84.205.255
154.84.252.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:6d:dc:04:2f:c6:0f:f3:d4:7f:6c:de:0b:11:f0:9c:dc:12:
d4:87:48:82:2e:5e:21:79:1e:30:2d:06:d1:01:ed:cd:fc:5f:
71:c1:22:eb:d4:ba:8f:76:3b:70:92:ea:54:93:20:d3:7c:b4:
fc:28:6f:61:73:47:76:75:d1:f3:85:03:f6:fe:58:92:15:15:
34:b7:aa:8b:8f:8d:54:48:29:b3:8f:7e:86:3c:cb:ba:fb:4b:
04:d8:0e:04:8e:b7:b0:a9:c8:8b:1f:89:44:83:8d:7c:07:fe:
93:99:36:00:c0:b1:c5:01:43:1b:7d:6b:c7:be:79:ce:aa:c1:
0a:fd:51:e9:88:9c:b5:28:04:e1:e3:df:60:d9:61:d6:65:18:
a1:70:f7:ee:25:01:40:e8:69:37:9d:75:13:c4:6c:29:14:35:
7b:47:d1:b8:41:4b:37:47:61:95:e2:13:d4:b5:f2:39:1a:58:
7a:d4:69:ee:c0:36:ab:5c:b2:a9:70:b7:4c:2d:8a:04:f8:40:
36:e6:cc:84:2c:25:72:04:91:26:a2:e2:9a:8b:ec:b1:16:30:
65:58:2a:2a:08:6f:19:7e:76:d6:f8:a9:56:83:6a:ee:e6:81:
d0:5f:f7:a1:3a:aa:04:fa:d9:6a:5a:3b:56:51:d5:03:aa:5c:
04:27:a3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 08:00:13 2026 by rpki-client