Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E93B151E1AB811F1A0A583D1DAE4EC9C.roa
File: E93B151E1AB811F1A0A583D1DAE4EC9C.roa (raw, json)
Hash identifier: /LdfYoaZn11IEoGUbsCeckUzQX89Ce7ciDj5sHJ7RO4=
Subject key identifier: 4F:39:0D:4E:B6:E9:66:A7:7D:D3:E7:9A:A0:CB:D9:0A:CD:1A:51:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE57
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E93B151E1AB811F1A0A583D1DAE4EC9C.roa
Signing time: Sun 08 Mar 2026 06:34:51 +0000
ROA not before: Sun 08 Mar 2026 06:34:47 +0000
ROA not after: Thu 08 Mar 2029 06:34:47 +0000
asID: 17561
IP address blocks: 154.203.61.0/24 maxlen: 24
154.203.62.0/24 maxlen: 24
154.206.20.0/24 maxlen: 24
154.211.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114263 (0x1be57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 8 06:34:47 2026 GMT
Not After : Mar 8 06:34:47 2029 GMT
Subject: CN=69ad188b-c070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0d:13:42:e4:45:24:70:3e:04:e9:dd:26:d0:
d7:bc:da:b8:66:a2:ff:2d:a9:14:a8:71:64:19:55:
8d:69:ff:36:0f:32:5c:4d:c3:3b:83:2e:ab:e2:fb:
4e:d9:3e:60:0d:2b:cf:da:8f:0c:e7:70:8a:48:38:
35:2f:51:d2:41:06:2f:4f:3f:87:75:3f:3f:a2:b0:
af:bc:3d:cb:9e:1b:78:d6:68:1e:f1:5a:ce:5e:9d:
35:03:3b:5e:3f:b9:3f:d9:5a:cc:52:e1:97:d7:a7:
b9:bc:30:9f:5b:d1:40:d1:be:13:16:f8:5d:7d:a5:
b6:d7:bd:15:99:2b:24:ea:66:40:bb:fb:cf:29:bf:
76:89:3d:87:b7:96:9e:aa:05:d7:e2:17:2b:43:ef:
87:39:93:0d:b5:16:42:15:41:d2:3d:b0:e5:d3:e6:
39:50:52:72:af:59:7d:f5:aa:5f:52:75:58:22:75:
fe:64:a4:d1:23:36:af:eb:57:20:62:dd:4e:ec:2b:
fd:19:86:f0:bc:9a:07:69:00:78:eb:ea:b5:fb:85:
87:fb:08:bb:a4:b7:0f:4f:08:a0:e7:53:f1:6c:a6:
bc:8d:45:7e:75:2c:c5:9d:96:72:94:42:c0:75:8c:
74:87:04:28:2d:62:a9:70:2b:d5:78:31:ed:b3:65:
05:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:39:0D:4E:B6:E9:66:A7:7D:D3:E7:9A:A0:CB:D9:0A:CD:1A:51:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E93B151E1AB811F1A0A583D1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.61.0-154.203.62.255
154.206.20.0/24
154.211.181.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:74:14:cd:26:6b:2c:75:2c:3b:97:a6:d7:21:3e:f9:15:14:
47:a7:d3:f6:54:b6:e3:a3:ea:e1:36:2f:0f:c5:52:cb:3f:91:
23:10:df:42:a5:9e:2c:c8:66:f5:25:4f:1c:a7:7b:1e:08:55:
8f:e9:fc:8b:6d:41:65:77:e1:28:15:bd:a9:a2:8a:fc:7c:4a:
7b:25:06:da:39:9e:87:b9:86:74:70:a3:9b:da:de:fc:be:6c:
bc:68:6a:b8:9e:58:b6:f2:b3:a5:d4:38:90:eb:24:57:9e:d3:
3a:28:b6:3e:02:7c:a6:f7:d9:71:94:90:7c:dc:d3:a2:17:99:
39:ef:67:be:81:62:0d:30:0c:49:51:ba:28:08:59:a4:9e:c2:
35:2b:b5:0a:ef:0a:7a:77:0f:41:20:57:80:e7:b8:4a:7d:16:
b2:bd:ed:2d:21:5f:a3:f6:2d:be:50:f8:aa:1b:10:90:69:69:
70:7f:5f:cd:49:b7:0f:4a:1e:e1:c2:fe:39:c8:7d:41:d0:d1:
b5:72:85:83:05:a3:9a:7d:7e:84:31:d8:83:b2:c5:3c:07:4c:
85:5b:73:75:f3:35:98:7a:f0:b5:22:5e:a1:41:a8:6f:c1:b3:
78:5e:af:50:d2:ef:cb:a2:ff:17:05:02:46:57:61:e3:61:85:
53:2a:70:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:16:08 2026 by rpki-client