Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/327D0E840E6211F198D08A7BDAE4EC9C.roa
File: 327D0E840E6211F198D08A7BDAE4EC9C.roa (raw, json)
Hash identifier: qlytQNcwCJ+CmVNaqStPz9FWouhOzlZxcvH2APWG1m8=
Subject key identifier: 86:D3:44:4E:FD:93:22:49:37:E8:B1:0F:7B:F4:46:8F:5B:DA:0B:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA80
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/327D0E840E6211F198D08A7BDAE4EC9C.roa
Signing time: Fri 20 Feb 2026 13:43:54 +0000
ROA not before: Fri 20 Feb 2026 13:43:50 +0000
ROA not after: Fri 27 Mar 2026 13:43:50 +0000
asID: 138915
IP address blocks: 154.93.72.0/24 maxlen: 24
154.93.74.0/24 maxlen: 24
154.93.96.0/24 maxlen: 24
154.93.97.0/24 maxlen: 24
154.93.98.0/24 maxlen: 24
154.94.86.0/24 maxlen: 24
154.94.87.0/24 maxlen: 24
154.94.100.0/24 maxlen: 24
154.94.116.0/24 maxlen: 24
154.94.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113280 (0x1ba80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 13:43:50 2026 GMT
Not After : Mar 27 13:43:50 2026 GMT
Subject: CN=6998651a-0f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:af:6f:e0:dd:6d:8d:61:e1:fa:a0:a3:de:04:
bf:94:b1:4f:b2:da:75:88:55:ba:83:98:9f:43:ad:
5f:cb:41:4b:04:38:60:19:9d:c5:26:4c:ad:6b:4c:
5e:63:a3:d8:b5:54:98:c7:73:23:81:56:78:bf:90:
84:67:a0:d2:cb:6f:a0:03:74:a8:bb:33:af:e6:52:
20:d0:ec:03:94:40:f7:77:dd:10:fb:21:1a:57:cc:
fe:89:20:3e:90:68:e2:ee:67:54:03:be:b9:2a:cb:
ce:d9:bd:f1:af:43:a2:3f:05:8b:04:31:0b:1e:b9:
58:ba:60:fc:19:a9:36:11:9f:cc:b4:e2:b6:21:7b:
b7:f3:3d:1e:4b:0a:08:0d:f7:d9:be:29:12:f6:a7:
e9:99:2c:13:56:91:23:96:dd:ff:bd:e6:cd:d3:b6:
b7:03:ec:fe:98:eb:47:38:7c:f6:8c:70:79:e9:5d:
bb:a4:83:f1:48:42:c6:97:96:1a:84:f4:ac:f7:98:
e2:5c:7b:84:0a:2a:6c:5d:80:a4:f5:cf:ef:6c:87:
5e:f7:53:56:27:36:ef:0c:bb:74:f7:ad:e1:2c:58:
57:23:75:fd:91:4c:3d:8a:d7:90:e2:00:83:01:dd:
60:e1:21:97:6c:98:6a:60:8a:d1:7b:ad:a9:ea:3a:
26:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D3:44:4E:FD:93:22:49:37:E8:B1:0F:7B:F4:46:8F:5B:DA:0B:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/327D0E840E6211F198D08A7BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.72.0/24
154.93.74.0/24
154.93.96.0-154.93.98.255
154.94.86.0/23
154.94.100.0/24
154.94.116.0/24
154.94.123.0/24
Signature Algorithm: sha256WithRSAEncryption
65:a3:9d:52:32:1d:ef:a6:52:c5:d2:a6:4a:04:66:71:05:2a:
9e:ff:f1:12:97:9a:d9:36:db:9e:b9:ff:6d:aa:eb:a9:90:3c:
97:5a:74:22:69:c4:2b:cd:23:7e:e8:01:0b:5d:72:d5:8b:d3:
f5:13:fd:d8:0b:d0:3e:5c:4e:6a:e1:cb:ae:19:6d:03:68:29:
42:7b:2c:37:24:3c:78:b9:0c:1e:80:83:dc:a6:33:5d:d0:89:
e5:b6:75:29:23:fa:81:0b:4e:3a:85:74:49:e4:40:72:cf:82:
e1:af:2b:e4:1b:a4:14:95:0d:6b:64:aa:12:6c:81:34:62:36:
51:07:bf:c5:cc:d3:65:4b:46:bd:ae:15:4d:8e:36:98:65:57:
9b:22:30:7f:50:75:73:4a:54:1e:23:5f:82:1e:28:a4:c4:b6:
44:ff:47:a3:14:df:48:bd:64:a8:b1:5d:64:48:d3:7f:49:b6:
a1:0e:e6:30:fe:6a:54:16:68:93:86:41:19:8e:e8:28:bc:c7:
f1:ea:12:1f:79:4a:4b:8d:aa:7d:d0:69:4a:f2:26:36:ef:89:
c0:52:29:db:fe:f9:bc:56:d0:6b:02:42:71:1e:03:b3:9e:55:
d4:47:8a:f1:1d:22:ce:ed:d1:18:0e:88:88:a5:21:f6:e1:68:
59:ff:dc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:03:23 2026 by rpki-client