Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CC037C4FE7C11F08300D8C5DAE4EC9C.roa
File: 1CC037C4FE7C11F08300D8C5DAE4EC9C.roa (raw, json)
Hash identifier: vlCu4EQcsHc96DrQq3jraO/Fi/BCd1pF3sp5dnzi17A=
Subject key identifier: C7:AD:8B:9A:76:E5:71:F2:18:67:C5:F9:43:B7:F2:DC:E2:42:66:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B7BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CC037C4FE7C11F08300D8C5DAE4EC9C.roa
Signing time: Sat 31 Jan 2026 08:09:06 +0000
ROA not before: Sat 31 Jan 2026 08:09:02 +0000
ROA not after: Sun 08 Mar 2026 08:09:02 +0000
asID: 202656
IP address blocks: 154.219.1.0/24 maxlen: 24
154.219.4.0/24 maxlen: 24
154.219.17.0/24 maxlen: 24
154.219.18.0/24 maxlen: 24
154.219.19.0/24 maxlen: 24
154.219.20.0/24 maxlen: 24
154.219.21.0/24 maxlen: 24
154.219.22.0/24 maxlen: 24
154.219.26.0/24 maxlen: 24
154.219.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112574 (0x1b7be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 08:09:02 2026 GMT
Not After : Mar 8 08:09:02 2026 GMT
Subject: CN=697db8a2-9a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:02:a8:84:11:12:88:8f:97:22:b9:8c:cf:69:
10:5d:f1:81:d0:92:66:44:1e:de:56:2b:ab:95:bb:
ab:5f:6b:bd:41:9c:ca:75:89:b4:45:8b:8f:ca:4e:
c6:f6:ad:7e:1c:9e:b6:d6:d5:3b:72:da:3c:42:79:
22:6c:f0:54:77:79:49:8f:2a:b4:2b:2d:1e:a6:78:
0f:01:25:86:61:a5:84:18:3e:50:0a:ec:24:a1:be:
4e:cc:75:30:dc:7a:64:2c:1e:8f:87:eb:03:c1:5a:
f4:54:6a:05:ee:ec:cd:3a:eb:eb:7d:01:26:00:e8:
1c:ee:00:ae:6f:3c:af:3f:00:0a:c5:c7:8d:c1:62:
37:8e:fa:f9:ac:3b:83:0e:70:c6:21:37:1d:94:b9:
ac:ea:20:a2:aa:9d:50:78:03:73:6e:8a:bc:ff:6c:
0f:4f:c3:54:e1:ad:a4:83:3a:f8:0f:6f:dd:fc:67:
6e:96:d4:16:89:23:bc:68:97:52:0d:aa:22:df:9a:
ce:cc:d3:12:89:1b:13:dc:2b:52:ba:63:10:6c:ca:
00:02:53:13:8c:41:e2:3e:14:6e:f9:e7:fa:24:e3:
51:9b:b3:bd:40:aa:eb:0c:77:da:8e:d4:64:a9:62:
99:28:df:94:ff:f5:e4:75:9f:26:81:26:1e:25:11:
b2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AD:8B:9A:76:E5:71:F2:18:67:C5:F9:43:B7:F2:DC:E2:42:66:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CC037C4FE7C11F08300D8C5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.1.0/24
154.219.4.0/24
154.219.17.0-154.219.22.255
154.219.26.0/23
Signature Algorithm: sha256WithRSAEncryption
54:31:04:77:6f:03:2e:70:c1:03:ba:e6:98:29:40:61:84:33:
a5:99:1a:5e:ff:a1:49:3e:16:b6:fb:d8:47:d9:34:bd:05:4d:
9a:02:cf:f5:93:e3:92:36:4c:15:2f:15:16:05:61:45:0c:92:
91:e5:e6:19:e5:57:3e:69:d3:19:8a:51:fb:31:30:b4:01:65:
e8:76:14:3e:ce:70:0c:2a:04:9b:51:04:47:ff:ad:98:75:35:
a4:c1:10:87:84:2d:3a:16:bc:f1:b3:62:f2:cc:8d:4d:77:b1:
53:db:db:9b:54:54:ef:7d:1e:dd:73:c3:3e:ed:27:0d:9d:7e:
03:e6:3d:0e:a1:63:db:ef:dc:81:d8:55:80:e7:10:16:8d:df:
56:c8:91:58:df:cf:88:2d:bf:92:e9:9e:d7:58:4e:78:21:f3:
69:3e:d6:f8:d0:c0:86:17:5a:92:44:ee:15:b4:ac:f1:ed:b9:
ad:fd:71:06:e3:49:71:fa:57:63:55:e7:a6:aa:dc:c5:3f:9d:
38:9d:03:b0:ec:6c:36:b6:7b:44:44:85:80:ea:cf:2a:7a:18:
f2:1a:9b:a3:54:0d:22:df:0e:a3:68:eb:b5:09:f6:2b:76:00:
1a:6a:2e:42:60:33:fe:0c:ef:de:96:c5:2e:3e:cd:78:78:27:
0e:a5:34:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:04 2026 by rpki-client