Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/158A28A6FE7311F08DCB5390DAE4EC9C.roa
File: 158A28A6FE7311F08DCB5390DAE4EC9C.roa (raw, json)
Hash identifier: q+Qjjfb0K3rFV30UqOmhdYY6latq4B4tPfzg6MpqhkA=
Subject key identifier: 37:83:EB:CE:85:33:03:83:67:6F:77:A2:4B:D4:3F:D3:31:58:91:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B7A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/158A28A6FE7311F08DCB5390DAE4EC9C.roa
Signing time: Sat 31 Jan 2026 07:04:29 +0000
ROA not before: Sat 31 Jan 2026 07:04:23 +0000
ROA not after: Sun 08 Mar 2026 07:04:23 +0000
asID: 44559
IP address blocks: 154.209.141.0/24 maxlen: 24
154.209.142.0/24 maxlen: 24
154.209.143.0/24 maxlen: 24
154.209.147.0/24 maxlen: 24
154.209.149.0/24 maxlen: 24
154.209.150.0/24 maxlen: 24
154.209.151.0/24 maxlen: 24
154.209.156.0/24 maxlen: 24
154.209.159.0/24 maxlen: 24
154.209.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112548 (0x1b7a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 07:04:23 2026 GMT
Not After : Mar 8 07:04:23 2026 GMT
Subject: CN=697da97d-c102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f2:4d:15:b0:8e:66:76:50:4a:f3:e7:2d:2a:
15:0f:5c:e1:aa:8d:c7:9f:72:2f:6b:b0:f7:f2:14:
c1:bc:1b:8a:28:d3:62:33:2b:a0:3c:58:41:38:42:
40:2c:3d:d4:2f:13:16:48:1f:40:c2:40:4c:0f:13:
83:98:2e:88:21:a4:3d:88:a2:62:6f:b4:c6:d4:cd:
8f:75:aa:cd:69:cf:92:3c:f4:b8:84:ea:0f:5e:16:
f7:2d:61:19:76:7f:22:cb:0a:7a:10:3f:8e:9c:50:
3f:ea:0d:6b:e1:31:0f:fc:4b:59:28:04:a6:f3:8d:
ad:3a:77:16:f1:ad:7a:28:ec:86:01:65:b7:2f:64:
15:d9:a0:60:e6:a2:51:c5:61:23:14:4e:e3:71:91:
8a:94:c9:30:cc:62:ec:ba:2b:44:93:58:ed:39:13:
a1:ea:cc:12:8d:d4:0c:17:cd:b7:42:a2:80:4e:ca:
d6:0c:73:ae:ee:d0:78:9d:20:b3:ee:39:d7:ee:14:
4c:5e:61:36:7e:93:f3:af:aa:9b:44:7d:71:67:4c:
2a:51:ef:89:c9:ef:15:4a:69:95:2f:08:0b:44:bc:
8e:fb:cc:c0:8b:39:60:79:cc:4b:7d:9a:04:1f:de:
f8:35:32:41:94:d4:f9:a2:07:f4:34:d7:89:c5:42:
9e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:83:EB:CE:85:33:03:83:67:6F:77:A2:4B:D4:3F:D3:31:58:91:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/158A28A6FE7311F08DCB5390DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.141.0-154.209.143.255
154.209.147.0/24
154.209.149.0-154.209.151.255
154.209.156.0/24
154.209.159.0/24
154.209.192.0/24
Signature Algorithm: sha256WithRSAEncryption
be:15:b3:85:77:10:11:5d:69:eb:09:02:29:e4:d8:5e:cf:97:
0a:02:28:c7:81:ba:81:37:0e:70:4c:19:76:be:96:c3:22:3d:
c4:59:ce:4c:f3:56:44:69:0f:39:f6:6d:bc:00:05:11:c8:81:
78:8d:18:9a:7c:72:17:26:e0:31:2e:64:9b:9d:3e:60:47:97:
e8:87:85:86:df:6e:b5:8d:f6:97:51:6b:3c:2b:31:14:3c:8b:
53:6f:23:6f:5e:7a:d1:98:ce:50:bf:51:52:3e:74:cc:d6:5d:
48:ff:20:f6:55:79:14:db:c4:4c:75:04:0a:72:50:44:79:b7:
50:c7:74:57:d5:df:3c:71:52:c2:a2:ff:b4:68:92:a0:c2:73:
56:cf:83:48:26:0d:56:07:c1:21:7f:81:70:46:31:3c:19:da:
92:6b:a9:82:fa:d9:4e:55:d1:1c:4c:f7:e7:f0:74:8f:5c:fa:
86:94:de:63:77:c2:3a:d3:14:c6:9f:be:a6:b5:35:33:e9:c3:
fc:3f:41:f7:68:c1:95:81:4f:25:72:7e:76:c1:a3:48:3c:7e:
c1:ca:e8:36:cf:f3:d5:a1:38:3e:f1:91:2a:2f:c4:f9:d4:95:
e8:ce:19:44:75:5c:79:8b:98:22:bf:30:b6:07:cd:00:09:6f:
0b:8f:4f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:52:30 2026 by rpki-client