Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D37DD5A117D11F19BE0FD8BDAE4EC9C.roa
File: 2D37DD5A117D11F19BE0FD8BDAE4EC9C.roa (raw, json)
Hash identifier: CEstJ19OPUNG/XCaPqKNsl02tvWtnGMYxuHmZGV7YCw=
Subject key identifier: 54:A7:7C:DD:B7:2B:69:29:9E:D2:74:B6:30:8A:8D:00:8B:BF:22:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB64
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D37DD5A117D11F19BE0FD8BDAE4EC9C.roa
Signing time: Tue 24 Feb 2026 12:34:35 +0000
ROA not before: Tue 24 Feb 2026 12:34:31 +0000
ROA not after: Tue 31 Mar 2026 12:34:31 +0000
asID: 62240
IP address blocks: 154.194.59.0/24 maxlen: 24
154.194.67.0/24 maxlen: 24
154.194.109.0/24 maxlen: 24
154.194.110.0/24 maxlen: 24
154.194.111.0/24 maxlen: 24
154.194.117.0/24 maxlen: 24
154.194.207.0/24 maxlen: 24
154.195.113.0/24 maxlen: 24
154.198.63.0/24 maxlen: 24
154.198.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113508 (0x1bb64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 12:34:31 2026 GMT
Not After : Mar 31 12:34:31 2026 GMT
Subject: CN=699d9adb-5f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:ec:21:8f:90:c3:ba:ca:2e:bd:29:8a:6e:
8a:b2:40:de:2f:c8:78:0b:e4:81:4a:89:4b:33:a1:
77:dd:43:69:ac:19:21:1d:ab:11:e0:02:9b:33:1f:
c2:1e:b4:bf:58:e5:ed:b6:82:04:b0:f4:7f:d8:72:
da:cd:cc:75:8b:52:7a:ec:42:84:41:5b:19:2b:2b:
dc:a0:72:27:e1:c9:c6:5c:00:c4:c6:d2:fa:b1:dd:
fc:b7:d0:be:cc:0e:27:2e:b9:01:b3:23:fb:14:7c:
95:4d:d7:05:a1:62:9e:a6:be:a3:ef:e4:d6:06:5e:
94:24:5e:80:7c:57:ed:38:c2:d0:bc:c7:79:a3:71:
52:69:74:c8:70:4f:ed:09:a5:c8:11:a5:9d:b3:37:
67:b3:c8:87:ab:ff:32:71:ce:cd:f3:d6:74:ca:ee:
82:c6:ea:07:f8:6e:32:57:fd:62:57:45:bb:12:c3:
0d:68:de:08:74:b6:02:bd:e5:e0:cf:f2:11:4b:66:
9c:6f:4b:1f:ea:d3:a6:e0:e6:7a:c5:78:64:52:69:
64:c2:2b:93:c5:25:af:0a:4f:44:2f:a2:a5:0b:bb:
67:d0:ac:24:67:aa:68:99:d8:00:7e:3b:b1:c6:83:
4d:28:c8:22:e8:76:84:48:46:28:32:56:ed:1b:c0:
2b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A7:7C:DD:B7:2B:69:29:9E:D2:74:B6:30:8A:8D:00:8B:BF:22:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D37DD5A117D11F19BE0FD8BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.59.0/24
154.194.67.0/24
154.194.109.0-154.194.111.255
154.194.117.0/24
154.194.207.0/24
154.195.113.0/24
154.198.63.0/24
154.198.191.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:66:aa:3f:c8:d2:d7:d8:55:57:1f:e8:44:17:14:e6:c0:9e:
e6:a2:c6:d2:56:a2:ea:90:8f:16:c1:53:52:72:9f:40:be:f3:
cd:e8:4f:5e:2b:40:cb:4a:c5:d9:ea:a7:fa:aa:68:ca:b7:44:
97:59:8f:aa:79:d9:99:9c:d1:6f:35:51:39:9c:0c:b2:fd:d4:
2c:c0:1e:d8:5d:c4:91:95:1f:71:54:04:f6:f6:96:37:38:13:
a8:c4:d1:fa:fa:43:8c:f8:8d:be:4b:1b:b0:39:20:38:55:bb:
77:bf:12:6e:e7:3d:96:89:1d:89:a3:b1:8a:33:d8:80:4b:c3:
ad:3e:52:0c:c7:9f:47:bb:cf:e9:9f:e5:f2:db:fa:b6:bf:33:
1d:7e:29:5a:63:fd:10:d1:a0:f7:2b:10:34:d7:4c:e8:52:23:
2c:87:c0:62:5b:1f:7c:ec:0a:d2:7b:7d:b6:f7:c4:92:87:c1:
07:51:42:48:58:32:fa:1c:df:5e:50:c0:84:98:71:fd:31:43:
46:21:e7:9e:6d:23:4f:f8:f4:89:69:bc:8b:27:ee:d2:41:b8:
b8:20:e7:b5:27:92:bb:73:fd:9a:c6:bc:6a:20:4a:74:e8:67:
56:e7:8f:65:1c:8b:60:9c:44:9f:6f:de:25:fb:0a:6c:34:f4:
98:11:25:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:18 2026 by rpki-client