Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C56B5AE27BB11F19630B0E9DAE4EC9C.roa
File: 9C56B5AE27BB11F19630B0E9DAE4EC9C.roa (raw, json)
Hash identifier: jdyiMl67qvgGFKu/GtTeAfvQwdp9mzqO0+Uykr75EOo=
Subject key identifier: 01:F6:4C:8F:EA:A1:49:6E:EA:59:DF:9F:13:6D:76:96:FD:6D:10:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C0D7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C56B5AE27BB11F19630B0E9DAE4EC9C.roa
Signing time: Tue 24 Mar 2026 19:56:57 +0000
ROA not before: Tue 24 Mar 2026 19:56:51 +0000
ROA not after: Fri 01 May 2026 19:56:51 +0000
asID: 62240
IP address blocks: 154.195.118.0/24 maxlen: 24
154.195.143.0/24 maxlen: 24
154.195.144.0/24 maxlen: 24
154.195.152.0/24 maxlen: 24
154.195.153.0/24 maxlen: 24
154.195.154.0/24 maxlen: 24
154.195.155.0/24 maxlen: 24
154.195.156.0/24 maxlen: 24
154.195.157.0/24 maxlen: 24
154.195.158.0/24 maxlen: 24
154.195.159.0/24 maxlen: 24
154.195.160.0/24 maxlen: 24
154.195.161.0/24 maxlen: 24
154.195.162.0/24 maxlen: 24
154.195.163.0/24 maxlen: 24
154.195.164.0/24 maxlen: 24
154.195.165.0/24 maxlen: 24
154.195.166.0/24 maxlen: 24
154.195.167.0/24 maxlen: 24
154.196.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114903 (0x1c0d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 24 19:56:51 2026 GMT
Not After : May 1 19:56:51 2026 GMT
Subject: CN=69c2ec89-c980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8b:6a:12:70:01:cf:87:3e:ae:c3:0b:13:18:
46:cc:d4:c7:ac:4d:9f:b7:1c:d9:67:5f:48:12:55:
75:8d:7b:8c:4e:48:5a:54:b7:da:91:52:86:a5:2d:
3f:e5:e6:bd:99:b6:51:22:f8:2d:9b:03:44:48:64:
21:e9:b8:71:58:10:ed:84:f5:53:f9:45:ed:e1:98:
80:48:83:74:e7:3d:3d:a0:1c:0b:89:4b:ff:aa:ff:
99:05:9b:0f:95:f9:3c:8f:74:06:42:29:e0:1b:94:
8f:0b:af:3b:67:4a:e3:d7:bc:24:e8:dc:83:e0:c2:
8d:21:d7:95:1d:90:22:3f:23:c7:53:ed:97:e9:ae:
0d:8f:5c:90:2a:2c:4b:58:9c:18:7c:70:5e:23:1c:
f2:f2:2a:21:44:36:4f:a4:dc:fc:6d:3a:13:d5:de:
8d:67:8d:b2:0d:ab:76:fb:a8:37:ed:9f:2c:e8:1e:
06:42:fe:37:bc:54:fd:07:bf:8e:a4:e2:eb:ad:0c:
8c:fa:14:1f:aa:d5:b0:57:66:c4:f8:37:94:b6:23:
2c:c1:77:d9:44:62:a0:0c:49:79:50:1a:4d:51:a9:
4c:63:08:6e:84:98:5f:df:a8:a2:35:44:e5:b5:67:
cc:dc:d5:d7:f0:b0:ce:b6:d3:c0:bd:eb:1d:6c:c2:
10:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F6:4C:8F:EA:A1:49:6E:EA:59:DF:9F:13:6D:76:96:FD:6D:10:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C56B5AE27BB11F19630B0E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.118.0/24
154.195.143.0-154.195.144.255
154.195.152.0-154.195.167.255
154.196.30.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:ed:87:c2:57:80:66:56:58:33:3d:88:a6:71:86:68:a7:e3:
65:be:7f:35:a9:01:1b:f3:9e:fc:f3:da:16:2f:69:2d:2a:78:
c0:ee:dd:1e:3c:76:4f:6b:70:b7:d0:ef:45:7a:53:9a:59:64:
58:80:bd:07:c3:a4:b9:38:e8:23:fd:a1:06:7c:fe:85:b5:6a:
e0:6d:d2:0e:75:f6:32:cf:c2:b6:21:25:4a:eb:e5:35:2b:0b:
43:ca:16:c1:af:20:0b:2e:0c:f5:ad:64:b2:0f:a6:c2:15:5a:
cb:ca:87:5d:b6:81:8b:f7:37:f4:23:54:06:d4:1d:c4:91:5d:
c9:73:63:dd:b5:1a:9e:8a:52:12:a2:72:8a:b5:6f:a3:a5:d1:
7a:6f:55:ae:1e:f6:26:21:c5:34:57:65:43:40:15:02:35:17:
7c:4e:38:51:ed:35:7a:19:c2:7d:d8:4e:a4:60:82:56:64:74:
47:62:2b:84:0a:29:a1:14:4c:ac:04:9b:cd:0c:fa:04:7f:52:
e2:61:71:54:6d:83:7f:0e:a6:45:dc:e8:7b:44:e0:b8:50:a6:
15:82:91:36:6e:d1:86:c5:f5:1a:93:78:85:8d:1f:cf:bf:78:
69:35:ef:b1:82:71:e3:ce:d8:a9:9f:3e:2e:fd:7e:4e:33:02:
74:d4:22:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:46:34 2026 by rpki-client