Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06F701F22EAB11F195DBB39FDAE4EC9C.roa
File: 06F701F22EAB11F195DBB39FDAE4EC9C.roa (raw, json)
Hash identifier: OEhO7CwJj652EkATTYotWjXicLZk9kkuecdAzIiyTPo=
Subject key identifier: 58:3B:36:A3:0D:E3:83:E5:CB:70:A9:6D:AD:39:83:C0:D7:F1:73:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C263
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06F701F22EAB11F195DBB39FDAE4EC9C.roa
Signing time: Thu 02 Apr 2026 15:45:52 +0000
ROA not before: Thu 02 Apr 2026 15:45:46 +0000
ROA not after: Sun 10 May 2026 15:45:46 +0000
asID: 138915
IP address blocks: 154.223.27.0/24 maxlen: 24
154.223.30.0/24 maxlen: 24
154.223.32.0/24 maxlen: 24
154.223.33.0/24 maxlen: 24
154.223.34.0/23 maxlen: 24
154.223.37.0/24 maxlen: 24
154.223.40.0/23 maxlen: 24
154.223.42.0/24 maxlen: 24
154.223.43.0/24 maxlen: 24
154.223.78.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Apr 2026 00:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115299 (0x1c263)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 15:45:46 2026 GMT
Not After : May 10 15:45:46 2026 GMT
Subject: CN=69ce8f30-25f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b8:b6:15:2a:0a:47:f5:28:1c:e9:78:2e:fc:
07:fe:0c:1a:05:45:8e:8e:29:52:03:39:a2:b9:37:
47:95:71:18:47:3c:bf:0e:71:ef:da:a7:56:18:8f:
46:7d:3c:6d:fa:bb:45:6e:d2:26:e3:47:66:bb:2e:
63:d6:35:00:2d:2f:6e:a5:f8:9d:a3:10:44:e4:ba:
a0:24:0f:52:d7:99:fc:d3:bd:ac:e7:c1:e9:9b:44:
d4:e1:fa:10:84:55:41:f4:72:17:5a:bc:eb:5b:70:
02:8e:2a:73:30:8f:f5:75:b7:f4:88:91:04:d0:67:
a1:ae:92:4b:f1:d2:d7:af:92:f2:26:b4:0b:2e:fd:
37:30:0b:fc:88:a4:91:a0:95:3b:22:39:ba:e2:86:
68:e0:9b:25:77:f9:bd:e9:e8:cf:d1:a6:56:bb:d5:
54:6d:be:41:c3:c6:39:7b:c9:7a:55:69:ef:a3:cd:
fd:1e:cf:fd:d0:30:f7:4f:ac:d4:98:98:89:6f:bd:
77:49:0d:1d:34:d2:bb:f5:0e:8a:de:09:04:ff:9f:
03:f9:20:af:41:e2:5e:be:31:09:1e:30:b9:6d:b2:
89:64:7b:db:51:d7:19:4f:44:42:79:7c:38:33:d9:
af:38:aa:1e:b4:f4:7d:62:0e:c8:f6:65:b7:47:14:
c1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3B:36:A3:0D:E3:83:E5:CB:70:A9:6D:AD:39:83:C0:D7:F1:73:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06F701F22EAB11F195DBB39FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.27.0/24
154.223.30.0/24
154.223.32.0/22
154.223.37.0/24
154.223.40.0/22
154.223.78.0/23
Signature Algorithm: sha256WithRSAEncryption
d2:f8:9d:75:6d:06:ee:f4:2a:d2:bd:7a:4b:4c:b3:26:c7:87:
dc:65:48:0f:96:63:86:4a:58:51:cc:f8:5a:17:0a:f5:a3:a6:
9e:9c:bb:a6:98:a8:3a:8d:0b:5d:c1:de:dc:b9:b5:25:15:73:
13:f9:7f:5c:4d:f1:73:ce:f4:2b:c1:e6:79:e5:74:2c:9b:e4:
60:39:3e:af:4c:99:a3:dd:2c:14:7d:23:7d:8e:13:ce:67:cf:
6b:9c:1f:28:5c:6b:78:fc:d9:be:00:35:23:96:6c:2e:ba:bb:
59:0f:98:32:b9:b8:2c:db:6d:91:67:c4:b8:fe:2b:90:45:a1:
e7:44:e1:c9:54:9e:85:ac:32:74:9a:2c:9a:a6:49:22:a1:7b:
f2:fa:14:e1:cb:95:3c:44:1e:d4:e0:d9:6e:36:f7:f3:f3:6d:
bf:b4:77:04:96:97:0d:c7:f4:c9:a6:6f:05:67:82:71:71:6d:
6d:8f:ed:d2:a2:08:e4:27:3b:b0:52:ab:66:3f:b8:9a:6b:12:
47:f8:94:81:84:43:cf:79:43:69:2b:8d:7a:5b:d4:a9:09:5a:
dd:20:44:cf:96:95:5c:00:1b:6e:e4:d4:63:1d:1e:a5:8a:24:
e7:16:4b:25:22:25:fc:be:43:aa:d6:15:66:fe:e0:29:d3:44:
46:53:05:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:33:04 2026 by rpki-client