Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8F8EB54278411F1BB7A8EB3DAE4EC9C.roa
File: C8F8EB54278411F1BB7A8EB3DAE4EC9C.roa (raw, json)
Hash identifier: R12mcYRwfrcfXF3++F33tsBksi5jwO2WH4nCFf5LHaM=
Subject key identifier: 55:BB:97:D7:BD:4F:47:40:B8:DA:EF:7B:EB:1C:47:45:A6:2A:C2:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C091
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8F8EB54278411F1BB7A8EB3DAE4EC9C.roa
Signing time: Tue 24 Mar 2026 13:24:29 +0000
ROA not before: Tue 24 Mar 2026 13:24:24 +0000
ROA not after: Fri 01 May 2026 13:24:24 +0000
asID: 62240
IP address blocks: 154.194.59.0/24 maxlen: 24
154.194.67.0/24 maxlen: 24
154.196.66.0/24 maxlen: 24
154.196.67.0/24 maxlen: 24
154.196.69.0/24 maxlen: 24
154.196.71.0/24 maxlen: 24
154.196.72.0/24 maxlen: 24
154.196.73.0/24 maxlen: 24
154.196.74.0/24 maxlen: 24
154.196.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114833 (0x1c091)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 24 13:24:24 2026 GMT
Not After : May 1 13:24:24 2026 GMT
Subject: CN=69c2908d-553b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:48:cf:86:82:68:c1:78:12:e2:5e:87:3c:d6:
41:4c:20:47:63:be:28:f5:af:ab:69:dd:aa:d8:7b:
a2:c6:ea:0d:62:9f:54:71:10:a4:e4:1e:1a:fc:8d:
f3:2a:4e:60:de:b6:b1:bb:fe:dd:c7:1a:fc:e4:b8:
58:9d:76:7f:11:3b:86:43:c2:d0:17:71:33:c7:ef:
1d:20:ac:87:a5:2f:fc:a1:df:d5:8f:fd:3d:57:6c:
b1:e8:11:9c:5c:87:13:37:d4:ee:1b:ad:9a:45:88:
6b:0d:18:b9:40:fd:8f:e3:bc:71:53:4c:39:64:17:
8c:27:74:18:42:55:fb:5b:f3:c8:51:48:dd:7f:08:
b7:9a:74:eb:b6:7f:4f:e2:54:cc:a5:f6:85:0a:76:
d7:c3:09:da:3a:0b:dd:20:cf:ef:dd:2f:8d:90:27:
dc:54:0a:72:bd:32:b7:9f:2c:ff:3d:17:af:35:c0:
71:d5:70:ea:15:bb:65:47:46:dc:46:b2:ee:df:7e:
4f:6f:dd:cd:3d:c5:48:8a:de:67:97:b4:a0:21:f2:
c4:40:5a:b7:1a:14:e8:98:cc:29:28:8a:f2:1e:e6:
63:4c:16:c2:be:ab:fb:42:00:e5:f8:2a:ad:97:53:
51:6e:d3:aa:c0:8a:89:5e:98:a3:d7:4e:5b:99:4f:
83:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BB:97:D7:BD:4F:47:40:B8:DA:EF:7B:EB:1C:47:45:A6:2A:C2:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8F8EB54278411F1BB7A8EB3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.59.0/24
154.194.67.0/24
154.196.66.0/23
154.196.69.0/24
154.196.71.0-154.196.75.255
Signature Algorithm: sha256WithRSAEncryption
82:11:ff:46:0c:3f:16:2a:ad:99:0c:b8:e5:50:a1:19:44:72:
f5:e2:d5:4a:e0:45:08:2d:2d:b4:87:ad:63:9f:a9:45:9b:2a:
f0:76:4a:4e:19:b7:9a:71:4e:03:70:43:bb:b1:a6:31:e7:2b:
c8:06:e9:d2:06:cf:f9:c0:f8:09:dc:51:90:4d:3b:44:b8:6b:
cd:13:a0:15:bf:03:7d:28:ae:77:c5:5f:9e:c8:d8:03:e2:cd:
f5:57:22:07:83:57:de:d9:9c:18:c1:cd:df:1a:95:f0:5c:b2:
a4:d1:e0:82:e3:ff:3a:e8:a6:9e:3f:82:18:df:86:13:72:26:
dc:39:47:75:84:1a:a3:78:ab:b6:b9:35:51:3d:92:a4:67:db:
72:15:1c:37:a4:9a:56:b7:39:21:f1:18:05:01:f7:a7:a8:60:
e1:30:41:8d:b1:c3:6e:c3:9e:c8:b1:e3:b9:27:8a:a1:5f:d8:
5c:ea:08:9f:03:1f:d8:f3:cb:ca:23:37:61:5a:86:4e:57:19:
70:f2:3e:69:90:e5:0e:cb:d1:e9:d4:9a:ca:ce:24:e6:90:d5:
74:0a:16:c0:02:e7:7a:31:8a:90:3a:ed:c3:d8:80:62:82:bd:
a4:d5:9f:ef:88:44:9d:4a:13:7f:c5:73:e7:c0:28:6e:d8:a0:
ce:80:e6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:32:14 2026 by rpki-client