Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B814DEE155111F1A3717B8EDAE4EC9C.roa
File: 1B814DEE155111F1A3717B8EDAE4EC9C.roa (raw, json)
Hash identifier: 39IfLA+0ZJmLW5cn1Pk1qxcU2kkKofibwm3ONalNHZA=
Subject key identifier: 38:ED:60:48:93:74:78:84:21:FB:7B:6B:00:91:93:BE:93:8E:5F:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC6A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B814DEE155111F1A3717B8EDAE4EC9C.roa
Signing time: Sun 01 Mar 2026 09:29:12 +0000
ROA not before: Sun 01 Mar 2026 09:29:08 +0000
ROA not after: Sun 05 Apr 2026 09:29:08 +0000
asID: 44559
IP address blocks: 154.209.141.0/24 maxlen: 24
154.209.142.0/24 maxlen: 24
154.209.143.0/24 maxlen: 24
154.209.147.0/24 maxlen: 24
154.209.149.0/24 maxlen: 24
154.209.150.0/24 maxlen: 24
154.209.151.0/24 maxlen: 24
154.209.156.0/24 maxlen: 24
154.209.159.0/24 maxlen: 24
154.209.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113770 (0x1bc6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 09:29:08 2026 GMT
Not After : Apr 5 09:29:08 2026 GMT
Subject: CN=69a406e8-85b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9c:5a:ab:a2:67:5a:ca:00:2c:56:1f:a0:8b:
9f:b9:0e:c5:e8:ba:d2:4b:54:6f:a4:33:a9:c8:48:
df:fc:78:1e:27:be:3e:18:b4:97:05:9d:4d:1f:89:
64:44:81:40:3c:99:ce:b4:af:97:c0:6e:e2:17:b8:
a2:cf:96:8a:9d:f3:bb:5a:91:a2:29:8e:a1:e9:f3:
6e:a1:6a:28:76:a1:54:0f:57:9b:3a:2e:d3:e8:af:
5f:f0:83:22:b1:6b:de:fd:b0:5a:fa:89:4a:87:a1:
83:75:c1:17:98:c8:f7:4f:37:47:b1:98:c9:5b:63:
02:2f:30:85:a4:d3:c8:43:30:62:92:a0:75:10:f4:
7f:80:17:a6:25:8a:bd:f6:3e:86:7a:79:f6:42:ff:
dc:0d:e4:ee:0e:ee:9a:72:43:06:d7:a5:e8:50:17:
92:40:26:38:95:55:86:79:f0:1c:a7:43:81:dd:9f:
39:68:5b:78:ec:28:95:05:a2:1a:c8:93:d8:41:c3:
4c:b0:22:72:67:14:24:70:bf:56:72:31:5f:c0:d4:
8f:eb:3d:9d:44:37:9a:a3:b6:c7:54:4b:c0:ab:f7:
4c:b9:5b:ca:83:60:86:de:67:34:be:b8:45:a8:df:
b3:52:96:1b:4d:15:c4:24:d2:9e:bb:24:a1:b8:8b:
35:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:ED:60:48:93:74:78:84:21:FB:7B:6B:00:91:93:BE:93:8E:5F:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B814DEE155111F1A3717B8EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.141.0-154.209.143.255
154.209.147.0/24
154.209.149.0-154.209.151.255
154.209.156.0/24
154.209.159.0/24
154.209.192.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:aa:36:59:a4:da:b9:87:12:7f:8c:b1:8a:61:09:3b:b9:70:
b9:94:a7:09:c8:f3:90:88:ad:f4:c4:5d:5c:a5:0a:48:09:cf:
33:90:b4:68:6d:f1:60:dd:97:a2:46:ac:92:65:09:4c:e1:77:
1c:f5:c7:1a:b3:b4:8d:3c:44:52:8e:4a:a9:79:ca:18:35:20:
e0:87:41:23:c3:21:2b:51:11:bd:5f:90:00:5e:f6:2a:7e:16:
97:6c:a2:01:ce:4a:47:75:1a:41:89:4d:f1:91:ea:e3:ee:c9:
d7:8e:a0:25:25:c3:35:13:77:72:0c:8d:40:be:71:ad:32:20:
2d:6b:cb:f2:57:0a:74:5a:fe:40:04:5d:bd:1b:25:18:67:da:
d4:97:bd:76:c2:a9:30:0b:ca:f2:80:0d:d6:2d:5e:2c:8e:71:
41:e0:24:f9:e3:11:75:94:1a:3e:42:d8:42:19:93:20:98:f7:
fd:ae:57:8e:00:75:0f:b6:07:2c:80:95:f9:d5:d4:9a:47:66:
a9:fa:a6:ef:17:37:43:3b:ce:ad:9d:5a:f9:1b:a6:82:c7:1d:
44:57:e1:16:72:a4:8d:06:d7:25:0d:69:04:f9:21:c0:4b:19:
31:88:b9:75:5e:d3:88:af:ea:63:46:14:f4:53:cb:1a:49:aa:
3a:e5:04:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:31:52 2026 by rpki-client