Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DB370CE12EF11F1B72FF3ECDAE4EC9C.roa
File: 1DB370CE12EF11F1B72FF3ECDAE4EC9C.roa (raw, json)
Hash identifier: LpmYSH6SMsSDXl1VOmqgIneoQ8490lgJMzeI/ODMSpU=
Subject key identifier: 96:17:33:E2:70:99:AE:D6:D9:60:68:4F:FD:AF:79:CD:A8:9E:BD:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BBFB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DB370CE12EF11F1B72FF3ECDAE4EC9C.roa
Signing time: Thu 26 Feb 2026 08:42:43 +0000
ROA not before: Thu 26 Feb 2026 08:42:38 +0000
ROA not after: Thu 09 Apr 2026 08:42:38 +0000
asID: 401783
IP address blocks: 154.82.153.0/24 maxlen: 24
154.82.181.0/24 maxlen: 24
154.83.10.0/24 maxlen: 24
154.83.24.0/24 maxlen: 24
154.89.132.0/24 maxlen: 24
154.90.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113659 (0x1bbfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 26 08:42:38 2026 GMT
Not After : Apr 9 08:42:38 2026 GMT
Subject: CN=69a00783-4182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:62:2d:5f:96:6b:4c:a4:77:3f:56:f1:f7:89:
a7:13:87:ad:09:dd:db:19:44:74:f9:b6:f4:9a:98:
93:bb:d8:e0:fd:ce:70:89:b4:5f:fe:b0:86:f2:23:
2b:04:01:b7:b5:01:0c:80:6d:d8:84:8d:3e:08:fc:
4d:d8:37:8b:01:5e:15:7c:14:8c:7c:50:ef:a5:65:
08:fb:1b:2c:57:67:78:49:c3:43:a5:d3:db:4a:a8:
11:f8:10:d6:6d:2e:67:38:79:d7:be:b9:92:0d:7e:
ea:eb:b7:20:e7:41:92:56:51:d2:d1:9b:22:88:1b:
3d:93:4e:5c:dc:ae:e9:ed:eb:44:f5:29:1f:65:79:
ec:e1:a9:9f:a6:f3:7d:5d:32:bf:ae:f2:a6:dd:5c:
dc:e4:c8:e4:13:a8:88:44:ad:25:28:1c:42:b4:db:
19:bc:c4:10:1e:78:f7:f0:b3:13:96:57:a1:0f:2d:
dd:6b:65:62:92:5c:77:b9:1e:cd:32:6f:db:ea:43:
df:74:31:12:59:af:e3:61:92:a2:28:26:35:aa:ab:
d1:3e:51:50:4b:b3:d8:e3:44:32:03:f8:8c:53:72:
01:06:9b:41:73:b4:f6:25:a9:4b:7b:df:9c:71:12:
d4:c5:b9:34:11:ef:3a:82:52:af:11:f5:4a:02:3e:
e5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:17:33:E2:70:99:AE:D6:D9:60:68:4F:FD:AF:79:CD:A8:9E:BD:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DB370CE12EF11F1B72FF3ECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.153.0/24
154.82.181.0/24
154.83.10.0/24
154.83.24.0/24
154.89.132.0/24
154.90.65.0/24
Signature Algorithm: sha256WithRSAEncryption
91:e8:22:7e:16:95:08:6d:42:a9:71:1a:d1:c2:01:9e:65:25:
0d:80:a1:90:ba:03:8a:ad:87:3a:39:2c:cb:69:42:ea:21:7f:
70:73:7d:21:27:e7:b0:50:bb:11:61:ef:24:6a:63:07:49:14:
63:76:e4:a8:3f:e2:30:ac:f3:cd:df:ab:57:d0:05:21:18:b4:
aa:89:c6:10:75:4f:07:d8:e6:48:b5:ac:52:e3:b3:5d:f0:98:
50:1f:43:0e:81:2b:0f:b9:9e:3c:bd:0c:81:ac:df:b0:a0:62:
0c:6a:9c:c0:d7:aa:ee:6b:70:f4:1f:39:81:a2:ab:ed:e5:c6:
0a:fc:f6:74:a4:b7:e2:9e:c8:ea:35:b3:3e:21:bf:f4:ab:fe:
09:b3:80:4b:f6:e3:30:9e:2f:69:84:77:f5:e9:99:89:29:56:
27:78:65:7f:77:6b:49:fe:e1:b5:aa:db:df:99:18:6f:af:49:
13:26:bb:59:07:b7:01:8d:1d:ab:ab:c7:6c:8c:21:37:98:48:
f0:fd:5e:1f:0b:bc:5c:e6:c8:94:80:a1:eb:21:4e:ff:c3:17:
35:24:c3:07:fb:4a:7c:c1:f0:9e:0c:d9:fd:23:4a:80:d4:4c:
58:65:1d:ab:60:9f:bf:29:34:85:9e:c0:9f:11:d6:f2:19:d8:
5f:aa:04:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:19:13 2026 by rpki-client