Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D20978827B911F1881108DEDAE4EC9C.roa
File: 7D20978827B911F1881108DEDAE4EC9C.roa (raw, json)
Hash identifier: 0OvWWsb4G5jLA3LyRwMN0AiLLNZCJHEsfxTG7eBRIyM=
Subject key identifier: F1:4D:95:24:BD:86:BF:74:61:FD:13:A5:EF:9E:3E:BF:28:CE:FD:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C0D3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D20978827B911F1881108DEDAE4EC9C.roa
Signing time: Tue 24 Mar 2026 19:41:45 +0000
ROA not before: Tue 24 Mar 2026 19:41:40 +0000
ROA not after: Fri 01 May 2026 19:41:40 +0000
asID: 62240
IP address blocks: 154.194.33.0/24 maxlen: 24
154.194.82.0/24 maxlen: 24
154.194.119.0/24 maxlen: 24
154.194.120.0/24 maxlen: 24
154.194.121.0/24 maxlen: 24
154.194.122.0/24 maxlen: 24
154.194.123.0/24 maxlen: 24
154.194.124.0/24 maxlen: 24
154.194.125.0/24 maxlen: 24
154.194.127.0/24 maxlen: 24
154.195.127.0/24 maxlen: 24
154.195.128.0/24 maxlen: 24
154.195.129.0/24 maxlen: 24
154.195.130.0/24 maxlen: 24
154.195.131.0/24 maxlen: 24
154.195.132.0/24 maxlen: 24
154.195.133.0/24 maxlen: 24
154.195.134.0/24 maxlen: 24
154.195.135.0/24 maxlen: 24
154.196.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114899 (0x1c0d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 24 19:41:40 2026 GMT
Not After : May 1 19:41:40 2026 GMT
Subject: CN=69c2e8f9-0927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7b:f6:f8:ab:1f:cd:e8:30:20:04:53:b6:2e:
16:44:4b:32:a5:ff:a5:b9:2c:b4:06:cd:8d:9d:ff:
62:6f:35:39:f3:ec:27:41:55:6f:38:c3:ee:73:c7:
b1:dc:c5:5a:d9:e7:8a:f1:ba:3c:19:5d:5c:72:2a:
e7:b7:90:d0:85:bf:6f:42:d6:ec:ce:f4:02:f1:1a:
14:f2:08:b5:f2:bb:8c:91:48:7d:e9:18:f2:95:5f:
1e:f3:1e:81:9c:2c:ea:71:b6:b8:80:20:be:49:ee:
ad:b3:71:6c:ab:9f:6b:02:6f:2b:0b:03:a8:ae:af:
5d:e5:4b:e8:70:dc:0d:af:f7:bd:cc:0f:cf:4d:36:
c7:e1:eb:7e:1d:00:6d:dc:36:ba:81:69:5a:97:69:
29:56:b9:40:32:82:95:51:bc:39:9d:db:49:16:e4:
16:61:3b:f2:5f:af:4c:0a:18:fa:63:c3:b0:4c:0e:
45:28:ba:96:e4:a9:8b:03:6d:68:00:6c:b5:13:ec:
eb:be:1d:27:84:59:65:50:c3:f2:38:ce:d1:a3:10:
48:81:da:40:27:7b:d5:2f:ac:7b:10:a6:53:3d:ac:
ed:5e:58:31:58:1c:0a:bc:23:0c:5c:29:69:a8:8f:
f4:a6:a5:37:1e:24:00:c8:0b:78:59:c0:81:d9:0a:
0c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4D:95:24:BD:86:BF:74:61:FD:13:A5:EF:9E:3E:BF:28:CE:FD:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D20978827B911F1881108DEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.33.0/24
154.194.82.0/24
154.194.119.0-154.194.125.255
154.194.127.0/24
154.195.127.0-154.195.135.255
154.196.29.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:f2:b2:02:5f:cc:e4:25:b7:f8:03:b3:e0:c9:4c:67:e7:a3:
53:44:14:24:c2:a9:b9:80:fc:68:53:ef:59:77:a5:30:29:06:
53:80:06:0e:f8:92:1e:6b:80:67:32:8d:9b:62:21:3f:d0:08:
70:1a:4a:95:34:05:29:c7:89:ce:6b:cf:9e:f0:d7:96:9f:ab:
41:e2:a1:ad:2f:2e:46:63:3c:15:25:77:89:16:6a:2a:5a:45:
d6:db:28:bb:9c:6a:d4:c2:86:e7:b8:47:ba:f9:3a:e6:90:e7:
58:ba:c1:15:3c:a1:27:56:f6:6d:15:86:4f:5b:db:98:a1:c5:
b9:e4:53:bf:9a:99:a2:18:2c:a0:dc:49:be:12:07:69:1a:c1:
03:84:8f:52:0d:64:c8:ab:32:c4:09:fe:90:6c:cb:63:f8:e1:
c2:d6:2a:47:c3:dc:2c:14:34:e9:49:0b:09:de:63:a4:82:52:
c9:6e:e0:18:b5:76:29:d6:cc:70:6b:2b:4d:aa:06:b4:be:6e:
ff:db:fb:35:d0:67:b1:e5:38:e3:50:de:9c:57:bd:ae:93:bf:
f4:d3:d8:90:b2:45:88:c2:1b:52:7e:da:a9:60:a2:18:b4:17:
d0:f7:58:5a:db:fb:37:a6:10:e2:f5:84:62:d8:9d:b8:08:ff:
86:41:82:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:41:06 2026 by rpki-client