Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CBF67F2157C11F199061290DAE4EC9C.roa
File: 0CBF67F2157C11F199061290DAE4EC9C.roa (raw, json)
Hash identifier: 2Ya+JhahVguHMi/sKSBUIfc5iVI1EB6kuE0rCqqDNQ4=
Subject key identifier: 4B:3C:8E:E7:45:04:9E:19:78:35:9A:A9:72:48:73:24:E7:8E:8D:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC92
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CBF67F2157C11F199061290DAE4EC9C.roa
Signing time: Sun 01 Mar 2026 14:36:36 +0000
ROA not before: Sun 01 Mar 2026 14:36:32 +0000
ROA not after: Sun 05 Apr 2026 14:36:32 +0000
asID: 48031
IP address blocks: 154.218.20.0/24 maxlen: 24
154.218.21.0/24 maxlen: 24
154.218.23.0/24 maxlen: 24
154.218.24.0/24 maxlen: 24
154.222.207.0/24 maxlen: 24
154.222.208.0/24 maxlen: 24
154.222.209.0/24 maxlen: 24
154.222.210.0/24 maxlen: 24
154.222.211.0/24 maxlen: 24
154.222.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113810 (0x1bc92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 14:36:32 2026 GMT
Not After : Apr 5 14:36:32 2026 GMT
Subject: CN=69a44ef4-7cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:82:c9:3c:94:90:7b:71:4d:96:b1:6c:59:f0:
83:b7:f5:ab:0d:07:ce:0f:05:ec:85:1f:99:8b:29:
13:61:d3:34:b3:5a:3f:2d:98:fe:6f:92:95:ff:8f:
eb:2e:0e:44:28:5a:68:3d:d7:ad:aa:d3:0e:0b:38:
e2:8f:b6:75:1c:65:54:77:d2:3d:1f:a7:9f:90:c1:
41:29:ee:ba:b7:1b:3d:d5:21:c5:e0:41:81:4e:15:
1a:a8:8e:b2:fa:02:4b:68:27:79:5c:1e:29:9d:f7:
1d:41:b5:31:85:5c:4e:cc:6c:0f:8e:3c:74:fe:98:
4b:a6:bd:cb:77:a1:78:77:f6:7f:6b:f4:58:7a:77:
66:d8:68:b8:59:48:5c:e6:4d:f6:78:b9:c7:4a:12:
79:a9:8a:33:ea:b0:2b:4a:4f:b7:bd:8e:8c:1a:8d:
5c:a1:9d:66:36:db:53:ce:81:84:3c:34:74:89:0a:
44:29:e3:a0:82:47:9c:aa:44:ef:3c:84:fb:2c:ef:
38:d1:e9:ea:fb:86:51:0a:37:bd:c5:bb:53:41:1d:
d2:56:3b:4c:a1:34:d1:6b:f4:45:1b:41:c1:2c:3a:
79:29:9a:a3:b0:f0:1f:d3:7e:a0:6b:a8:f3:6b:b6:
ac:d8:7c:8e:cb:c1:91:09:09:d6:6e:7b:84:16:6b:
19:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3C:8E:E7:45:04:9E:19:78:35:9A:A9:72:48:73:24:E7:8E:8D:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CBF67F2157C11F199061290DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.20.0/23
154.218.23.0-154.218.24.255
154.222.207.0-154.222.212.255
Signature Algorithm: sha256WithRSAEncryption
76:06:48:85:b0:4a:d6:36:82:6b:e5:51:79:4a:68:68:00:db:
e6:5a:f7:ee:2b:5f:21:b9:cf:08:5d:73:23:ad:3b:3a:f7:11:
71:91:0e:8a:3d:e6:a7:c7:17:8d:0d:fb:d7:e4:76:6d:a9:67:
92:64:ff:a7:cd:6e:09:33:a1:1d:47:2b:b5:b8:e9:8e:ca:aa:
9c:4e:72:7a:ce:b0:74:c9:5d:ea:27:ea:3d:be:7b:28:69:00:
b4:9e:3d:a4:a7:94:cd:fb:11:5f:8e:38:58:70:7f:aa:21:0d:
10:e3:99:e9:05:d9:2c:fe:db:3c:33:02:73:93:cf:df:e8:04:
7a:5c:ce:75:c9:b9:48:bc:f8:06:cf:d7:d2:47:38:6b:c7:91:
6a:9e:06:e8:34:eb:5c:9e:5d:e2:90:35:4f:f0:5f:2d:9d:4f:
24:ce:39:63:65:81:e8:82:30:1d:ec:02:15:e8:d5:21:e3:5a:
4c:6f:31:20:d4:34:5b:79:fe:91:fd:3b:f5:da:74:78:ce:fc:
00:88:5d:ab:50:c8:c7:6c:89:75:1c:b1:98:c4:b0:15:47:10:
f1:37:a9:0a:0d:dd:6f:f0:5b:87:0e:b6:0f:9b:44:e9:a2:8e:
b4:f2:91:08:d5:7d:ae:18:6e:0f:44:a5:05:cd:ce:3c:6e:6b:
f5:6a:9b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:34 2026 by rpki-client