Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC8434DC243311F1A84693E5DAE4EC9C.roa
File: FC8434DC243311F1A84693E5DAE4EC9C.roa (raw, json)
Hash identifier: nrYCKdkTsf9dvG+jZinLDLi/uqkKUQRCYboiwMaQ0Yg=
Subject key identifier: 4B:D8:A7:98:D5:74:D9:7A:B0:6D:07:62:65:BE:1B:A3:36:84:EA:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BFFE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC8434DC243311F1A84693E5DAE4EC9C.roa
Signing time: Fri 20 Mar 2026 08:08:33 +0000
ROA not before: Fri 20 Mar 2026 08:08:27 +0000
ROA not after: Sun 26 Apr 2026 08:08:27 +0000
asID: 63139
IP address blocks: 154.94.69.0/24 maxlen: 24
154.94.70.0/24 maxlen: 24
154.94.71.0/24 maxlen: 24
154.94.72.0/24 maxlen: 24
154.94.73.0/24 maxlen: 24
154.94.74.0/24 maxlen: 24
154.94.75.0/24 maxlen: 24
154.94.76.0/24 maxlen: 24
154.94.77.0/24 maxlen: 24
154.94.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114686 (0x1bffe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 20 08:08:27 2026 GMT
Not After : Apr 26 08:08:27 2026 GMT
Subject: CN=69bd0081-9093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:77:77:80:1c:fa:b5:1d:76:64:50:a1:65:6a:
28:25:00:f1:0d:8a:6f:8f:08:6f:52:3f:40:79:b9:
ae:1a:26:c1:04:f4:48:25:cf:3d:38:11:b8:2b:11:
e8:9d:37:e9:65:fa:99:15:94:06:58:b7:b1:44:db:
9b:90:bf:5b:cd:69:cc:75:b7:7c:d1:06:24:cb:b3:
7b:66:63:9e:27:ad:9a:f2:17:e4:84:9c:cd:23:84:
b7:27:6a:16:20:49:db:fa:2f:59:40:44:d5:88:01:
c3:30:95:6d:89:7a:3d:85:6c:67:a8:5c:4d:59:e4:
b6:0f:b8:3c:50:cd:df:0c:92:82:59:f7:73:16:22:
83:de:6c:f0:b2:00:cf:ee:d6:87:14:2e:c3:d9:00:
7a:fa:72:83:0b:5e:54:98:a6:a8:9d:ae:7b:dd:be:
7b:e4:45:dd:17:5a:74:17:99:1e:f8:8c:87:15:ce:
00:db:42:3a:ee:36:06:75:47:f6:10:1a:ef:10:cc:
91:fd:10:9b:f3:21:6a:03:c6:af:29:0c:01:ce:a2:
e1:3e:2a:2c:9e:8b:28:09:9d:33:3d:e5:9a:d6:f7:
07:44:99:ed:76:3f:53:24:cd:35:14:0c:e9:d5:a3:
20:e6:e5:6c:ca:63:46:0b:9d:74:20:14:0c:24:c9:
c7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D8:A7:98:D5:74:D9:7A:B0:6D:07:62:65:BE:1B:A3:36:84:EA:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC8434DC243311F1A84693E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.69.0-154.94.78.255
Signature Algorithm: sha256WithRSAEncryption
a5:22:a5:8a:a8:1e:c7:48:c1:28:b7:cb:6a:68:0c:50:b2:de:
57:f0:4d:81:d3:7a:52:cf:e4:60:44:62:cd:f9:5b:3e:01:d5:
ec:06:75:67:62:ba:a4:50:bf:5f:46:fb:37:66:15:11:45:06:
fb:27:a0:24:9c:cb:3a:b0:06:05:58:00:0e:aa:de:4f:32:cf:
e7:61:0e:23:09:a7:19:22:a6:75:68:be:a5:c0:81:9c:98:ce:
25:67:ac:55:3a:47:83:d3:d2:1a:40:5e:4f:d2:d4:a5:db:38:
c7:d0:df:ac:5c:4d:eb:d3:59:53:3e:e1:38:f0:5b:9e:5d:fb:
ea:2a:0c:5c:90:f7:00:c6:1d:70:f4:d7:d0:30:1f:0c:65:d3:
9d:35:d1:97:c6:d1:0b:d0:da:9c:2a:00:b6:e4:d4:75:c9:1c:
6e:fb:5b:8b:9c:78:d8:b1:ce:b5:28:57:6f:5d:04:ca:d7:2a:
e1:34:01:04:71:66:07:cd:63:55:46:c8:33:7a:2f:5f:8d:98:
94:87:aa:09:a0:18:cd:80:80:1a:59:37:2e:18:68:11:e1:97:
47:36:5f:75:20:73:a5:5a:7b:35:cf:1f:61:a4:52:8c:23:0a:
ed:10:f6:44:1f:c8:8e:62:60:70:c8:66:10:22:52:3c:9f:71:
7a:61:3f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:48 2026 by rpki-client