Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59B549A827C111F1B3735F8EDAE4EC9C.roa
File: 59B549A827C111F1B3735F8EDAE4EC9C.roa (raw, json)
Hash identifier: 620oGwm65nV2/I/fd7DEceCG/CViUtmQnNqGyJt1bIc=
Subject key identifier: C1:B9:7D:F0:60:21:13:C7:0B:59:1F:6C:0D:83:75:9E:21:6B:19:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C0E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59B549A827C111F1B3735F8EDAE4EC9C.roa
Signing time: Tue 24 Mar 2026 20:38:02 +0000
ROA not before: Tue 24 Mar 2026 20:37:57 +0000
ROA not after: Fri 01 May 2026 20:37:57 +0000
asID: 62240
IP address blocks: 154.85.26.0/24 maxlen: 24
154.85.97.0/24 maxlen: 24
154.85.99.0/24 maxlen: 24
154.90.1.0/24 maxlen: 24
154.90.129.0/24 maxlen: 24
154.90.130.0/24 maxlen: 24
154.90.131.0/24 maxlen: 24
154.90.142.0/24 maxlen: 24
154.90.143.0/24 maxlen: 24
154.90.172.0/24 maxlen: 24
154.90.173.0/24 maxlen: 24
154.94.34.0/24 maxlen: 24
154.94.39.0/24 maxlen: 24
154.94.42.0/24 maxlen: 24
154.94.45.0/24 maxlen: 24
154.94.57.0/24 maxlen: 24
154.94.58.0/24 maxlen: 24
154.94.61.0/24 maxlen: 24
154.94.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114915 (0x1c0e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 24 20:37:57 2026 GMT
Not After : May 1 20:37:57 2026 GMT
Subject: CN=69c2f62a-f91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:18:71:dc:1d:ea:38:e4:38:1c:87:13:2b:dc:
21:0e:7b:e3:81:e8:26:58:78:8e:4d:a9:26:16:22:
d5:f8:cd:d8:c8:64:4e:c1:3a:f2:1b:de:e1:e5:a8:
ed:35:17:d0:92:56:13:0d:4c:63:65:17:0f:1b:88:
cd:49:99:0c:1e:55:32:6b:c2:7c:7a:d8:c5:a5:89:
2e:2b:83:98:a3:c7:2c:76:a3:40:3e:48:5a:0e:96:
ef:31:95:b0:bf:2a:d6:88:31:80:32:a8:1c:a5:12:
23:a7:24:d9:c2:b6:39:5f:97:c4:6c:c0:e7:be:6f:
eb:f6:b8:c2:a2:ad:3e:6c:06:1c:f3:33:99:ea:ae:
8e:4e:60:df:b5:1d:55:86:f8:70:45:9e:0b:c2:df:
86:0e:05:d9:72:36:81:99:15:fe:0d:ba:5c:96:86:
1d:36:10:c6:b5:3e:e6:b2:92:91:9d:ab:20:e7:b8:
cb:b2:62:1f:5b:1f:3c:1c:27:08:b7:8f:e6:ac:bf:
a5:21:a5:79:12:b2:ef:e3:ca:5f:83:d2:7a:38:b4:
2e:cd:ac:cf:17:04:d9:a7:63:a2:ad:bf:3d:ab:5c:
2a:e7:5e:8b:9e:24:ba:61:eb:58:3c:ef:14:53:8f:
b8:2a:fe:9b:f3:a6:ca:65:85:ed:64:be:30:c0:c9:
20:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B9:7D:F0:60:21:13:C7:0B:59:1F:6C:0D:83:75:9E:21:6B:19:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59B549A827C111F1B3735F8EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.26.0/24
154.85.97.0/24
154.85.99.0/24
154.90.1.0/24
154.90.129.0-154.90.131.255
154.90.142.0/23
154.90.172.0/23
154.94.34.0/24
154.94.39.0/24
154.94.42.0/24
154.94.45.0/24
154.94.57.0-154.94.58.255
154.94.61.0-154.94.62.255
Signature Algorithm: sha256WithRSAEncryption
64:3d:2e:6c:0a:e9:f9:6d:b1:5f:c1:7e:22:ab:bd:fe:f1:b8:
0a:78:29:b7:ac:3d:e2:f1:bb:cc:88:64:d1:b9:c2:ec:89:6b:
50:ea:cc:9f:02:62:23:15:12:f9:98:dc:3f:df:cd:26:a4:e3:
a0:0d:44:d6:7c:4f:1b:85:ed:c2:5a:b1:f3:05:b1:fd:55:aa:
31:d4:7e:bd:59:03:6e:f1:bd:af:af:c5:98:85:1c:a4:ce:f1:
37:27:e6:ea:83:58:c1:5b:ad:85:51:e9:62:d7:72:97:a0:fb:
c0:c5:b5:d3:90:f1:da:74:6a:81:cb:ab:58:16:1b:22:11:83:
33:21:2c:23:1e:5d:3a:68:11:ba:5a:f6:d3:fc:a8:64:dc:42:
84:5e:24:0f:7b:4d:af:48:33:fb:12:03:14:46:98:c8:98:79:
94:97:a3:1a:c1:73:7d:85:6c:0e:9d:3e:d8:63:ef:4a:d3:3b:
2d:5d:31:bf:4d:e2:f3:9d:3c:3f:3f:3f:35:c2:a9:66:ae:28:
dd:b3:54:35:63:2d:79:36:4d:ff:bf:cb:14:08:78:16:8e:c3:
ee:a3:12:b3:7b:c3:d0:8d:e8:26:e6:af:4e:89:a8:d6:1f:41:
7e:e7:12:72:89:83:7d:e1:3c:0c:84:70:9b:43:bc:73:f5:79:
f9:8a:69:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:46:35 2026 by rpki-client