Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B36F5BC27C811F1967781B6DAE4EC9C.roa
File: 6B36F5BC27C811F1967781B6DAE4EC9C.roa (raw, json)
Hash identifier: kABmF8o8pYntgl1gdlsTQfIuSIa4DSUFFFIDaGECI9k=
Subject key identifier: CB:AD:5B:AE:F4:9A:02:36:E0:FB:5E:87:E7:D3:75:81:62:3D:CD:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C0E5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B36F5BC27C811F1967781B6DAE4EC9C.roa
Signing time: Tue 24 Mar 2026 21:28:37 +0000
ROA not before: Tue 24 Mar 2026 21:28:32 +0000
ROA not after: Thu 27 Aug 2026 21:28:32 +0000
asID: 45669
IP address blocks: 154.80.96.0/24 maxlen: 24
154.80.97.0/24 maxlen: 24
154.80.98.0/24 maxlen: 24
154.80.99.0/24 maxlen: 24
154.80.100.0/24 maxlen: 24
154.80.101.0/24 maxlen: 24
154.80.102.0/24 maxlen: 24
154.80.103.0/24 maxlen: 24
154.80.104.0/24 maxlen: 24
154.80.105.0/24 maxlen: 24
154.80.106.0/24 maxlen: 24
154.80.107.0/24 maxlen: 24
154.80.108.0/24 maxlen: 24
154.80.109.0/24 maxlen: 24
154.80.110.0/24 maxlen: 24
154.80.111.0/24 maxlen: 24
154.80.112.0/24 maxlen: 24
154.80.113.0/24 maxlen: 24
154.80.114.0/24 maxlen: 24
154.80.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114917 (0x1c0e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 24 21:28:32 2026 GMT
Not After : Aug 27 21:28:32 2026 GMT
Subject: CN=69c30205-921d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:60:af:18:8c:85:ca:e5:0f:68:85:c1:15:f1:
5a:85:7f:ac:8f:57:ca:dc:7a:ab:28:0b:42:d9:e3:
ed:63:62:ab:f6:da:72:c2:00:88:e6:e6:87:58:5f:
96:73:b3:c8:8a:e4:f0:9d:4a:7c:df:a0:fc:95:b4:
d1:36:9d:0b:44:86:1c:1d:b4:bf:81:a9:24:42:ba:
5f:3b:03:b4:79:10:da:ac:fb:58:7d:ba:33:03:8e:
a0:28:15:12:5c:f8:95:c3:11:0e:e1:a8:18:ce:d5:
41:51:ac:92:19:fd:07:af:21:98:7a:58:17:64:6d:
04:bc:bf:9b:6f:89:d7:a7:f0:3c:bd:38:0f:f0:52:
b6:ec:17:1f:60:2e:00:ed:72:06:30:5b:e4:60:34:
ad:ea:ef:15:95:4e:7d:01:1d:13:e2:b1:e5:83:da:
cd:02:9a:e2:4e:4d:64:9b:7b:e6:db:bc:ae:38:d9:
a2:2a:7c:00:a3:e1:50:0c:3d:eb:85:bd:67:46:dc:
22:8a:53:bb:87:d8:81:25:3d:df:6a:47:86:43:91:
19:b4:c0:dc:c3:fe:d8:cf:e7:95:6e:56:de:ed:6a:
30:a2:bf:21:0c:c0:b5:c7:16:2d:3d:3f:62:05:21:
93:19:fc:3c:c8:15:65:dd:0c:8a:01:0e:04:f6:00:
f6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AD:5B:AE:F4:9A:02:36:E0:FB:5E:87:E7:D3:75:81:62:3D:CD:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B36F5BC27C811F1967781B6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.96.0-154.80.115.255
Signature Algorithm: sha256WithRSAEncryption
0a:99:48:83:d3:df:c0:5c:46:49:0b:d6:1f:6f:06:b5:23:b1:
dd:49:40:78:0f:f1:6b:d0:b8:0c:e3:5b:0c:7c:64:f6:fc:42:
e5:7b:26:5b:8f:3c:80:91:0c:10:6f:3d:e5:43:59:db:f1:12:
07:c8:9a:6c:f5:52:84:94:24:b7:c6:7c:25:29:71:d0:c2:19:
01:39:9f:27:a5:e2:ef:26:06:d3:fb:7c:84:8a:41:8d:8a:7f:
b3:ab:68:cb:b6:f0:2d:ab:2e:57:ad:5b:1f:16:33:17:bb:07:
a4:5b:32:4c:18:56:56:5d:96:f1:6e:04:05:4e:6e:9b:2a:29:
17:a9:e0:89:38:ec:fb:1c:3b:ad:91:01:41:41:96:06:0f:ac:
74:9f:bd:b5:f1:11:0e:4a:aa:d0:ac:a5:73:0f:52:54:db:0c:
32:a8:0f:1f:66:2b:1c:02:87:71:77:1e:bd:0f:b1:f8:b9:ea:
8c:73:e1:5c:fb:7e:11:5f:c2:d4:4d:e8:80:01:66:7a:f3:46:
3c:6a:a2:78:9e:7d:6f:d5:db:21:c8:fa:67:1f:fd:c9:43:cb:
9d:36:f3:8d:93:03:89:de:e4:ad:77:b0:39:df:5c:63:c2:ab:
91:08:63:72:b0:fe:90:63:61:16:cd:fb:11:6e:aa:68:13:58:
a5:0c:99:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:18:42 2026 by rpki-client