Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DCD60B8158011F1A3A5A5A8DAE4EC9C.roa
File: 1DCD60B8158011F1A3A5A5A8DAE4EC9C.roa (raw, json)
Hash identifier: 97xrjdwvPwYeP78k3smb3fMyPoFuszQ2s+Alh7dkyv0=
Subject key identifier: 31:AF:07:AD:2C:36:D9:36:83:89:E7:03:48:7F:00:BA:21:A6:AF:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC96
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DCD60B8158011F1A3A5A5A8DAE4EC9C.roa
Signing time: Sun 01 Mar 2026 15:05:43 +0000
ROA not before: Sun 01 Mar 2026 15:05:38 +0000
ROA not after: Wed 08 Apr 2026 15:05:38 +0000
asID: 44559
IP address blocks: 154.219.73.0/24 maxlen: 24
154.219.74.0/24 maxlen: 24
154.219.75.0/24 maxlen: 24
154.219.76.0/24 maxlen: 24
154.219.77.0/24 maxlen: 24
154.219.78.0/24 maxlen: 24
154.219.79.0/24 maxlen: 24
154.219.80.0/24 maxlen: 24
154.219.81.0/24 maxlen: 24
154.219.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113814 (0x1bc96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 15:05:38 2026 GMT
Not After : Apr 8 15:05:38 2026 GMT
Subject: CN=69a455c6-0d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:63:81:9e:3b:13:d5:0c:be:e2:57:7b:bf:3e:
c0:8b:1f:b3:00:ef:92:a1:3e:29:49:df:79:d5:c2:
c4:fb:40:68:bf:94:52:bd:5d:37:26:bc:14:7e:bb:
e1:53:6a:35:35:fa:28:a7:40:8d:ab:f8:04:59:78:
d2:11:fc:b6:49:7c:88:66:ea:04:cd:04:11:f6:b3:
cf:e6:c2:51:9b:30:59:64:e6:b6:2f:49:ab:ae:4d:
e2:bb:41:01:c4:9f:19:61:ba:ab:cb:5b:cb:28:44:
3f:14:ca:c8:4f:e0:99:4a:5e:de:ff:f8:19:36:0d:
fe:54:55:7f:6b:26:b5:18:66:88:0d:82:4d:46:bf:
d9:ea:e1:81:06:fd:b7:be:63:41:fc:c2:a4:43:38:
05:82:da:3d:b3:0e:e1:43:37:31:e2:12:2f:c5:59:
82:4b:f2:0d:28:3a:7d:ec:0e:c0:70:59:90:2f:e5:
b9:ac:8e:de:b6:a8:47:8c:6e:5c:4f:f0:8a:d5:59:
64:01:4a:bc:61:96:6c:00:f2:1b:d9:83:bb:c8:43:
fe:b9:ab:99:2d:4b:63:e9:08:ab:e7:c4:38:62:63:
ae:0f:98:29:ef:e1:21:ba:24:07:da:54:df:53:e7:
62:88:9a:bf:7f:a5:c6:62:a6:30:5c:d1:e5:9a:c2:
7b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AF:07:AD:2C:36:D9:36:83:89:E7:03:48:7F:00:BA:21:A6:AF:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DCD60B8158011F1A3A5A5A8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.73.0-154.219.82.255
Signature Algorithm: sha256WithRSAEncryption
d7:42:17:42:bb:45:27:52:98:3e:47:83:f9:02:b7:41:fc:97:
45:e2:18:16:e2:f7:30:c8:f5:d1:d7:12:16:5e:1c:58:b3:15:
8c:ad:5b:09:2e:e8:3e:21:d1:08:1e:cd:d6:14:a0:cf:98:31:
76:f3:1d:d9:6b:05:98:4f:7e:00:40:b2:d4:cb:02:72:b3:b7:
1a:64:2f:a0:fd:a5:23:2a:ff:b6:fd:b9:ab:97:f7:b4:44:f8:
22:33:76:af:66:89:b7:01:a2:5b:ad:84:67:ab:93:08:de:af:
f1:75:35:b0:52:ca:f0:5c:4b:6b:c5:00:0e:05:17:4f:7b:ff:
5a:d2:81:32:30:07:42:86:3e:08:99:00:07:85:3c:5d:39:60:
bc:9e:52:f1:2e:26:5c:74:47:b0:b8:77:1b:3d:9c:69:af:93:
09:f9:20:8a:7d:3b:5b:46:db:16:44:c4:cb:89:08:55:15:2d:
19:43:91:f3:e9:df:93:fa:c3:b0:61:90:6f:d2:53:e2:f0:27:
70:d2:a6:53:d5:08:2f:75:15:4c:a8:18:b1:fb:95:bf:98:49:
b4:99:af:d5:ad:a8:dd:29:cc:e1:b5:03:9e:8a:dd:b9:c4:3a:
98:96:eb:cd:b7:9d:b5:d4:fd:71:fe:62:b7:0e:92:4f:98:eb:
42:17:06:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:15:18 2026 by rpki-client