Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3332E97600CE11F1A7DE5C8EDAE4EC9C.roa
File: 3332E97600CE11F1A7DE5C8EDAE4EC9C.roa (raw, json)
Hash identifier: HXNoPVzufLTI8LrnwvwprRYY9lwM/r+EWe6s1fxjfzU=
Subject key identifier: 47:8D:D6:21:30:0B:37:23:A2:B2:B2:83:79:26:0A:49:26:C7:3C:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B85E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3332E97600CE11F1A7DE5C8EDAE4EC9C.roa
Signing time: Tue 03 Feb 2026 07:01:45 +0000
ROA not before: Tue 03 Feb 2026 07:01:34 +0000
ROA not after: Sun 08 Mar 2026 07:01:34 +0000
asID: 45194
IP address blocks: 154.84.192.0/24 maxlen: 24
154.84.194.0/24 maxlen: 24
154.84.195.0/24 maxlen: 24
154.84.196.0/24 maxlen: 24
154.84.197.0/24 maxlen: 24
154.84.198.0/24 maxlen: 24
154.84.240.0/24 maxlen: 24
154.84.241.0/24 maxlen: 24
154.84.242.0/24 maxlen: 24
154.84.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112734 (0x1b85e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 3 07:01:34 2026 GMT
Not After : Mar 8 07:01:34 2026 GMT
Subject: CN=69819d59-4ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e9:0c:31:f2:56:1b:52:44:34:6c:8d:0f:fd:
c0:02:d3:59:4a:c4:5a:8e:cd:97:8c:d6:93:e4:e7:
14:e0:08:b0:ae:e2:45:98:36:45:ef:c7:dc:b7:df:
59:35:e5:32:a7:82:0e:23:81:b0:75:76:b4:cd:f9:
c1:77:4e:58:90:2c:b2:e4:ae:7c:46:2f:a8:63:d3:
6c:cd:0d:76:ee:40:d4:c0:98:f5:4d:fa:8b:e1:f2:
4c:36:cd:a0:a1:71:40:e7:ea:14:da:6e:af:2d:75:
99:3e:8d:99:5d:01:f1:31:b2:0a:b2:ff:dc:2d:df:
b8:3d:ea:a4:48:77:af:8b:f0:0f:c7:4f:69:ac:5d:
19:e9:16:8a:af:b0:5e:b3:7c:0e:6e:36:a2:66:04:
27:34:07:1c:a3:f7:d7:64:d7:bc:d9:c3:99:01:69:
69:74:81:3b:80:0d:5e:0e:e4:80:b5:ca:8c:95:4d:
d6:5d:3f:82:b7:7f:b6:e5:bd:85:86:10:83:26:5d:
ae:56:c9:95:44:08:d2:00:d2:32:83:ab:9c:b5:7d:
ac:9c:15:ee:bd:d5:e5:2a:22:b3:dc:a0:a8:0c:ef:
7e:a6:2b:61:f8:28:19:b0:59:46:bc:cb:e0:8a:80:
fc:63:c1:17:f9:10:4b:17:fe:a3:9d:38:4e:81:11:
73:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8D:D6:21:30:0B:37:23:A2:B2:B2:83:79:26:0A:49:26:C7:3C:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3332E97600CE11F1A7DE5C8EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.192.0/24
154.84.194.0-154.84.198.255
154.84.240.0/22
Signature Algorithm: sha256WithRSAEncryption
43:63:f4:1b:47:ce:2a:2c:50:6c:97:23:9d:d3:be:a7:02:ca:
7d:2e:52:48:ff:17:5f:22:50:4f:0b:9d:0d:bd:f7:e1:7d:0b:
7a:75:fd:06:8c:19:7f:ff:38:e3:34:d1:85:5d:c4:5a:13:a8:
9f:7f:68:bd:ba:cd:58:bb:7e:f1:f8:26:64:99:81:c0:0f:77:
6a:64:1f:30:5e:9c:51:42:3f:0d:d0:42:40:45:ca:d2:07:be:
d4:57:b0:19:f4:e0:c6:96:76:6d:8f:7f:22:57:b0:09:46:16:
dd:c7:5f:47:f9:c1:00:de:c8:d1:5c:7f:6a:16:cc:47:b5:f7:
0a:aa:b6:e2:4c:05:63:9e:aa:27:26:13:ed:9a:43:ef:71:47:
dd:da:7e:ae:ce:46:9f:99:d3:5f:2a:15:31:1a:e7:93:85:14:
50:84:9e:d2:d4:12:9c:80:1e:23:06:24:25:20:6c:0a:97:28:
2f:73:46:4d:a0:50:cd:71:d3:5c:f9:90:6e:ab:e3:29:4a:6e:
64:d5:71:a4:f0:f8:98:c6:48:ae:d8:93:e5:88:0e:d7:78:e4:
ed:34:ce:26:11:45:c2:ee:c5:2e:de:82:49:fb:6b:e5:b5:f0:
a8:c7:b5:81:c9:81:e1:27:e0:66:b2:9a:1e:30:2c:74:5a:2b:
69:21:7b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:44:57 2026 by rpki-client