Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27D01F9A12F311F1AB5D3487DAE4EC9C.roa
File: 27D01F9A12F311F1AB5D3487DAE4EC9C.roa (raw, json)
Hash identifier: yblJnH4EjdlNQ76jRU9P4AVt2kL/Jl6ZrEZnjzSAFHI=
Subject key identifier: AC:3D:A3:53:01:D4:7B:FD:17:EB:FB:04:E1:43:AD:88:82:54:05:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC01
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27D01F9A12F311F1AB5D3487DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 09:11:38 +0000
ROA not before: Thu 26 Feb 2026 09:11:34 +0000
ROA not after: Mon 30 Mar 2026 09:11:34 +0000
asID: 401783
IP address blocks: 154.193.35.0/24 maxlen: 24
154.196.179.0/24 maxlen: 24
154.196.180.0/24 maxlen: 24
154.200.26.0/24 maxlen: 24
154.200.43.0/24 maxlen: 24
154.200.51.0/24 maxlen: 24
154.200.52.0/24 maxlen: 24
154.200.140.0/24 maxlen: 24
154.200.142.0/24 maxlen: 24
154.200.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113665 (0x1bc01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 26 09:11:34 2026 GMT
Not After : Mar 30 09:11:34 2026 GMT
Subject: CN=69a00e4a-e8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9f:53:f1:34:2d:16:47:b8:6d:35:a0:00:a5:
79:5c:99:2b:c6:8f:be:be:a2:04:13:7f:f4:25:cc:
de:d9:60:70:71:b0:9c:52:44:a5:b8:30:50:96:90:
33:b0:1f:3a:f0:f7:08:99:d4:8d:35:a4:a1:64:1f:
46:2e:98:46:72:99:ce:ef:1c:f2:c3:9d:00:22:73:
ab:ad:9c:7e:16:54:da:ed:5c:86:79:05:c5:f1:3a:
8b:63:28:f0:91:0c:c2:05:67:72:e2:48:48:db:df:
80:9a:94:e3:08:60:41:54:1a:91:c4:3c:c1:a5:02:
c6:47:b3:5d:f9:b4:47:8d:b5:65:09:00:06:6b:24:
cf:75:ba:33:7a:89:28:9c:89:d2:21:7c:06:ed:e8:
08:45:3a:09:a2:00:dd:f5:a7:98:91:52:8d:56:94:
97:0e:0b:06:39:d7:a3:08:35:8e:41:ec:94:dc:ff:
8f:ce:25:54:f4:82:80:43:7a:31:59:08:0a:e9:ff:
bb:41:bd:f7:0a:56:88:2b:a9:df:84:67:22:82:0c:
ba:4d:d0:2b:13:36:d1:b9:d8:93:c4:15:2a:25:e6:
eb:77:d3:fe:fd:ad:ee:14:ad:87:ee:dc:df:85:5f:
64:6c:fe:0b:60:ef:c2:d1:71:e6:41:5e:ec:e2:48:
7b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3D:A3:53:01:D4:7B:FD:17:EB:FB:04:E1:43:AD:88:82:54:05:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27D01F9A12F311F1AB5D3487DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.35.0/24
154.196.179.0-154.196.180.255
154.200.26.0/24
154.200.43.0/24
154.200.51.0-154.200.52.255
154.200.140.0/24
154.200.142.0/24
154.200.191.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:a4:84:bd:33:e1:a5:fe:84:fe:84:27:14:9f:dc:7f:c8:ec:
bd:ad:90:10:21:cd:42:3b:cd:ea:2d:88:2a:ea:bc:20:dd:c3:
52:ef:29:94:4a:ca:ae:eb:e5:98:15:c2:23:b4:df:c5:16:36:
1b:2d:80:45:db:14:8b:ba:91:89:af:fe:82:be:69:d8:fa:d6:
61:0e:27:b1:43:b1:4b:65:99:4a:a6:a0:5a:b3:17:67:46:65:
b2:c1:9f:73:a1:5b:a4:85:cd:f7:99:1b:ea:b9:61:e0:e5:ef:
fa:72:db:83:81:b7:c4:42:31:78:6f:e0:06:9d:55:9d:0b:67:
fb:02:8a:48:53:b0:ef:16:64:ed:c4:7e:a5:92:04:e1:f8:3e:
1d:46:04:8a:3e:67:0f:7a:2c:c4:a0:ca:cf:11:92:54:50:5b:
65:a4:63:8b:f2:ef:92:16:f9:d2:e4:64:5e:2a:3c:2a:2b:d0:
3d:a6:a0:56:82:66:c7:47:74:d1:f5:e9:6b:8a:d0:a1:69:58:
82:f3:98:fc:c1:9e:51:0b:13:20:53:92:79:1a:96:21:69:e5:
40:77:f5:94:f0:16:6c:2f:0c:25:89:33:3c:15:42:95:25:44:
57:b5:95:7f:8e:e7:07:48:f2:6d:fc:90:d3:51:42:87:43:4b:
1c:26:e8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:43:20 2026 by rpki-client