Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F57A2BBC1E5011F1830B3484DAE4EC9C.roa
File: F57A2BBC1E5011F1830B3484DAE4EC9C.roa (raw, json)
Hash identifier: qH4Zomw6v9ESb7icLQSGQqBXIa0uN+OGWpqX4vBTqOU=
Subject key identifier: 80:B0:74:26:3A:82:36:24:63:8A:48:20:21:E0:0E:D9:FA:82:36:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BF34
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F57A2BBC1E5011F1830B3484DAE4EC9C.roa
Signing time: Thu 12 Mar 2026 20:20:49 +0000
ROA not before: Thu 12 Mar 2026 20:20:44 +0000
ROA not after: Thu 16 Apr 2026 20:20:44 +0000
asID: 22773
IP address blocks: 154.198.29.0/24 maxlen: 24
154.198.30.0/24 maxlen: 24
154.198.31.0/24 maxlen: 24
154.198.44.0/24 maxlen: 24
154.198.45.0/24 maxlen: 24
154.198.46.0/24 maxlen: 24
154.198.47.0/24 maxlen: 24
154.202.2.0/24 maxlen: 24
154.202.5.0/24 maxlen: 24
154.202.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114484 (0x1bf34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 12 20:20:44 2026 GMT
Not After : Apr 16 20:20:44 2026 GMT
Subject: CN=69b32021-2072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6d:5b:e8:86:95:30:81:a9:9e:52:12:9a:a6:
55:de:83:2d:81:b1:f1:6d:eb:21:7c:40:ec:05:fc:
88:79:4a:62:6b:c3:3a:e9:94:07:88:56:17:7c:8c:
9d:ff:7d:d0:90:f1:b0:fb:ea:6d:84:49:b0:98:b6:
ed:7c:4d:47:33:2f:d4:2e:5d:71:8e:10:cd:c4:a2:
70:bb:4e:5a:9e:1a:e1:54:72:58:9f:2f:db:59:7f:
4b:a1:50:bb:91:38:34:e9:35:9e:bc:3d:21:a2:e4:
93:36:ea:58:03:f4:3d:82:82:b1:e1:8d:c6:9f:61:
c3:65:3a:27:77:7e:78:de:13:3f:8a:9f:e0:c5:8a:
58:81:cb:67:91:a4:65:93:84:c8:69:55:1a:f2:6a:
73:22:e0:7f:d8:03:50:f1:67:4a:af:b8:d4:14:52:
34:b9:40:a6:53:25:e8:e7:22:f1:54:eb:67:ea:76:
dd:86:b0:56:16:55:db:63:00:f7:d1:ac:a7:d3:f1:
08:da:50:54:73:dd:9e:e3:98:cb:7c:31:eb:cd:37:
dd:68:e6:58:be:b9:fb:61:0e:20:ca:be:ef:61:fa:
f9:9e:cb:34:a4:83:5e:a5:ee:0d:23:7d:6c:db:10:
07:aa:f7:d4:24:3f:2d:3e:f4:16:39:d1:a9:fa:f7:
86:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B0:74:26:3A:82:36:24:63:8A:48:20:21:E0:0E:D9:FA:82:36:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F57A2BBC1E5011F1830B3484DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.29.0-154.198.31.255
154.198.44.0/22
154.202.2.0/24
154.202.5.0/24
154.202.12.0/24
Signature Algorithm: sha256WithRSAEncryption
43:6e:00:52:ba:f6:08:82:0a:69:b7:66:03:b0:2e:e7:3a:cd:
af:0e:d4:2e:c7:c8:09:ef:b1:c3:db:b2:35:4e:27:6c:fb:fc:
63:8e:55:f4:ea:2b:8c:3a:00:c7:ff:11:59:a4:99:48:6c:ea:
4c:73:79:c9:0f:8d:76:9b:73:d0:ed:18:b8:99:79:35:d9:07:
23:48:74:cf:af:64:3c:2b:14:3b:06:3b:06:af:69:3d:dd:f8:
16:69:6b:af:78:5f:fe:a9:23:f1:30:a6:0b:5c:c1:6d:62:01:
ee:fd:d8:36:30:e2:bd:ef:dd:84:b9:7d:88:d7:c6:08:3b:80:
d4:e6:ec:82:17:b4:69:87:0e:81:ee:18:72:71:4b:45:52:3f:
87:16:dd:b5:7b:c1:24:91:ae:38:54:0f:c8:87:1a:93:86:72:
d3:ee:57:ed:92:c5:fc:40:09:67:9e:b4:4f:54:f0:f5:cf:71:
b4:8d:29:77:1f:07:24:e8:54:9a:91:97:28:86:b0:7c:e0:6a:
4d:e6:f2:f0:6f:8c:7e:ef:e2:28:01:9f:77:94:30:18:5f:9f:
8d:fa:e3:19:a3:47:ea:a7:5e:8e:c7:4d:d1:f1:04:d1:e5:99:
14:80:94:21:cf:22:13:f9:1b:39:e2:3a:a9:9f:53:c7:87:70:
5c:18:ae:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:20:34 2026 by rpki-client