Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1424032A117811F18BA7B3EBDAE4EC9C.roa
File: 1424032A117811F18BA7B3EBDAE4EC9C.roa (raw, json)
Hash identifier: O4dvD0kdSZjRkg8XixC4NXZSNo/MQCb37POwrkRi4nk=
Subject key identifier: 7C:3F:57:6F:BD:8E:42:DD:D2:C0:68:D7:2C:4B:00:4C:10:E7:28:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB58
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1424032A117811F18BA7B3EBDAE4EC9C.roa
Signing time: Tue 24 Feb 2026 11:58:06 +0000
ROA not before: Tue 24 Feb 2026 11:58:01 +0000
ROA not after: Tue 31 Mar 2026 11:58:01 +0000
asID: 62240
IP address blocks: 154.194.76.0/24 maxlen: 24
154.194.77.0/24 maxlen: 24
154.194.78.0/24 maxlen: 24
154.194.94.0/24 maxlen: 24
154.194.95.0/24 maxlen: 24
154.194.96.0/24 maxlen: 24
154.194.97.0/24 maxlen: 24
154.194.103.0/24 maxlen: 24
154.196.20.0/24 maxlen: 24
154.196.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113496 (0x1bb58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 11:58:01 2026 GMT
Not After : Mar 31 11:58:01 2026 GMT
Subject: CN=699d924e-8624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:60:ed:0a:b7:65:6f:09:d2:ba:3e:a2:e4:
da:e3:4d:eb:41:12:f2:12:55:c2:89:a8:99:a4:f1:
1f:9a:ec:03:11:9a:b3:93:46:4a:2f:34:c4:7e:0e:
36:e1:16:ea:8e:c5:10:92:f2:77:ba:3a:99:bf:b1:
38:b1:d7:f8:6f:41:fc:d5:0a:83:71:83:58:34:08:
92:3d:4a:80:c6:a7:30:9d:a5:9d:b7:a1:78:04:0a:
04:09:a3:46:1b:dd:b5:8d:88:07:7c:a8:e8:b7:2e:
03:9c:17:47:2a:83:f7:51:cb:6d:f4:fb:3d:17:51:
15:b9:fa:72:38:e6:28:2f:ba:7a:0c:34:8e:d9:d7:
d9:73:9d:b8:3e:3c:fb:0f:3c:df:02:29:3c:b3:a3:
0d:d0:80:3f:17:f2:a9:90:8f:89:c7:cf:05:e4:66:
0c:61:c1:d0:6f:96:47:2d:f9:0a:62:03:f7:46:3f:
1e:1f:62:a1:d8:5e:bd:17:e7:e5:50:8c:fd:f8:3b:
d6:4f:d4:91:aa:54:93:ee:af:bc:dd:b9:ae:75:3a:
f2:39:aa:d8:3b:dd:f9:09:2f:af:e5:9b:10:73:31:
64:81:d2:9e:6c:6f:45:07:b2:a6:1c:e6:30:d5:2e:
25:f7:4c:29:08:d7:50:16:02:a4:22:1c:4b:3e:46:
e5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3F:57:6F:BD:8E:42:DD:D2:C0:68:D7:2C:4B:00:4C:10:E7:28:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1424032A117811F18BA7B3EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.76.0-154.194.78.255
154.194.94.0-154.194.97.255
154.194.103.0/24
154.196.20.0/23
Signature Algorithm: sha256WithRSAEncryption
28:b4:8a:bf:de:6f:ef:1f:84:da:e3:c4:29:59:91:cb:fb:27:
dc:bb:3c:ae:d0:09:87:d0:28:5e:46:c3:2a:53:9b:dd:45:7f:
51:1d:7b:b0:c9:4c:40:d2:be:b6:a0:f0:f2:43:55:67:fc:eb:
7d:52:9c:89:c3:cb:9f:d1:40:1f:29:f6:80:d3:7b:e5:13:07:
ba:90:30:c7:13:8b:82:84:04:c7:5b:fa:12:6e:81:a7:af:9a:
cd:fd:ad:01:b0:86:7d:04:ca:bd:7e:a0:c1:2f:a7:9f:21:b0:
e8:17:40:29:43:ce:04:dd:78:ea:bb:1b:b6:e7:cd:a0:83:d4:
05:e3:d0:c7:53:d4:03:2e:74:c6:e2:6e:80:c6:07:d4:06:7f:
ab:71:e3:82:0b:e3:cc:86:79:6f:b6:66:58:24:76:e5:2a:39:
a3:4f:1e:4f:7b:60:99:6a:79:2a:d0:be:0b:2a:17:3b:94:32:
3d:45:b8:49:a4:55:be:47:18:2c:a9:5e:49:e2:ea:5a:d2:7f:
69:7a:f7:46:aa:65:0b:94:c5:58:dc:82:0f:48:ff:74:54:5a:
25:6e:65:b8:a2:70:37:6c:bf:31:4b:72:f6:36:0d:0b:ec:fc:
58:95:39:f7:1b:68:6f:29:ae:a3:d2:8f:4f:a2:ca:bc:22:8c:
4d:54:5d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:46:47 2026 by rpki-client