Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C76555CA279811F18A154FA7DAE4EC9C.roa
File: C76555CA279811F18A154FA7DAE4EC9C.roa (raw, json)
Hash identifier: Im+RpIty8L6X5AJpwfYGdkFUDrc/ghjf/OSnKhxL6pM=
Subject key identifier: 78:3E:A7:C3:8B:E9:6E:C0:92:62:02:09:F1:B7:06:E1:23:17:42:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C0A9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C76555CA279811F18A154FA7DAE4EC9C.roa
Signing time: Tue 24 Mar 2026 15:47:36 +0000
ROA not before: Tue 24 Mar 2026 15:47:31 +0000
ROA not after: Thu 27 Aug 2026 15:47:31 +0000
asID: 45669
IP address blocks: 154.80.0.0/24 maxlen: 24
154.80.1.0/24 maxlen: 24
154.80.2.0/24 maxlen: 24
154.80.3.0/24 maxlen: 24
154.80.4.0/24 maxlen: 24
154.80.5.0/24 maxlen: 24
154.80.6.0/24 maxlen: 24
154.80.7.0/24 maxlen: 24
154.80.8.0/24 maxlen: 24
154.80.9.0/24 maxlen: 24
154.80.10.0/24 maxlen: 24
154.80.11.0/24 maxlen: 24
154.80.12.0/24 maxlen: 24
154.80.13.0/24 maxlen: 24
154.80.14.0/24 maxlen: 24
154.80.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114857 (0x1c0a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 24 15:47:31 2026 GMT
Not After : Aug 27 15:47:31 2026 GMT
Subject: CN=69c2b218-11a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8a:bd:a1:72:88:77:24:b3:a1:53:b1:d6:a5:
ee:d8:8b:a4:73:1d:99:4f:f0:ab:cb:9a:61:df:a1:
71:f0:f1:03:ed:83:b0:80:d5:57:65:ec:e7:6d:c3:
8f:a0:2f:94:2e:99:21:99:b2:ab:f3:21:9c:be:bf:
d6:24:fb:ff:00:4b:c5:39:53:f6:45:d2:62:d1:d8:
e0:9d:4a:a5:21:5c:fd:96:66:3b:bc:38:ee:2c:b0:
58:12:01:aa:86:6b:4c:4c:5d:66:31:99:4d:cf:42:
65:66:f3:98:69:d9:cc:a9:7d:e6:4b:37:a3:45:bd:
97:6d:21:0b:15:71:3c:4f:72:2c:b0:f6:15:b5:50:
b9:99:80:88:89:c2:de:74:d6:90:6c:05:81:4b:92:
5c:64:e0:8c:82:f6:7e:a5:3b:49:d7:de:07:0b:41:
38:a2:0b:c8:1e:9e:5d:d9:21:f0:75:aa:7d:85:6f:
e8:a3:b7:a6:66:7c:05:9f:91:93:fc:c6:47:65:cf:
4a:97:1e:c7:2c:7b:c9:fe:6d:f3:af:7d:c8:51:78:
02:ae:15:b9:7b:77:60:71:9c:63:87:06:52:42:86:
cc:b7:06:67:08:37:a4:6a:4c:fc:2b:14:68:8d:04:
aa:00:06:a5:f9:8d:af:92:9a:68:3d:d2:1b:52:1b:
89:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3E:A7:C3:8B:E9:6E:C0:92:62:02:09:F1:B7:06:E1:23:17:42:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C76555CA279811F18A154FA7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.0.0/20
Signature Algorithm: sha256WithRSAEncryption
5d:b4:45:e7:de:a5:77:c7:66:64:3d:d3:5b:21:04:87:78:c9:
5b:f7:da:c8:b0:f8:72:f3:4f:39:58:1e:3e:d1:fa:92:83:82:
e6:01:42:be:ad:a7:79:c1:55:86:6e:bb:84:eb:bc:ca:77:94:
84:a7:24:20:a8:ed:b8:54:10:1f:03:82:ff:4d:5b:c0:59:c3:
eb:5f:bf:06:81:fd:f9:e2:79:3c:c9:45:4e:38:9d:5d:e1:83:
0b:49:cb:47:70:36:07:fc:f2:09:75:ec:a2:14:ec:57:c9:e9:
91:00:b8:f5:d1:0c:7a:7e:73:30:e7:c3:7a:9a:04:46:b1:b3:
5a:7c:73:c7:10:ed:ed:72:af:9b:a7:32:88:79:a1:22:58:c1:
e1:5a:f6:37:c9:66:d0:73:f8:6e:bc:7e:c3:be:4c:d8:54:b3:
3d:9e:69:b6:0c:70:3b:f0:41:42:2e:7c:e1:d4:aa:77:43:92:
74:a8:2e:e3:aa:50:fe:99:f7:8e:b1:e3:00:76:d6:08:0e:78:
9d:68:6b:ce:63:d8:71:10:5b:9c:41:84:71:15:fe:b9:4d:ed:
17:bc:fa:72:5a:a6:36:b1:5d:f3:05:a6:6e:f7:ec:1b:99:e3:
96:e1:ba:51:f5:03:d3:f5:7d:d3:c8:1c:9c:b4:79:c7:78:95:
b0:c0:c1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:29:25 2026 by rpki-client