Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52F6584C117C11F1AE5F2486DAE4EC9C.roa
File: 52F6584C117C11F1AE5F2486DAE4EC9C.roa (raw, json)
Hash identifier: 0SgjWahcpSaSK92UalGdP+m5ynYMWGZSYrudKAnZ91E=
Subject key identifier: 1A:ED:B6:23:D0:91:B1:38:F1:21:AF:24:8D:5A:D2:6B:E4:62:43:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB62
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52F6584C117C11F1AE5F2486DAE4EC9C.roa
Signing time: Tue 24 Feb 2026 12:28:29 +0000
ROA not before: Tue 24 Feb 2026 12:28:24 +0000
ROA not after: Tue 31 Mar 2026 12:28:24 +0000
asID: 62240
IP address blocks: 154.194.36.0/24 maxlen: 24
154.196.65.0/24 maxlen: 24
154.196.66.0/24 maxlen: 24
154.196.67.0/24 maxlen: 24
154.196.69.0/24 maxlen: 24
154.196.71.0/24 maxlen: 24
154.196.72.0/24 maxlen: 24
154.196.73.0/24 maxlen: 24
154.196.74.0/24 maxlen: 24
154.196.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113506 (0x1bb62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 12:28:24 2026 GMT
Not After : Mar 31 12:28:24 2026 GMT
Subject: CN=699d996d-23ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7b:12:d3:83:1c:a8:7b:f0:c1:2a:3a:13:d6:
24:57:ff:05:c6:5e:d2:bd:8f:77:5f:ba:fe:b2:66:
50:0a:36:0e:7f:a5:d1:26:94:cc:c1:1a:dc:8e:98:
cf:e9:9f:53:4d:e6:c4:c4:5f:f7:5e:f4:0a:ba:1f:
bb:c3:bd:59:38:4d:92:cf:24:25:a0:73:19:c1:5c:
c0:c8:de:24:af:63:58:6f:a9:81:06:6c:24:eb:22:
de:84:f7:7f:ac:0d:ca:21:eb:0f:c9:2d:71:f3:30:
c0:a2:9f:56:b0:22:3e:a2:84:59:bf:fa:cf:7d:24:
8b:7a:a8:52:4f:14:5a:98:ec:50:14:d4:19:d0:a5:
a6:ac:62:18:24:83:b3:c2:5a:da:dc:df:e6:da:9a:
fa:40:9c:09:50:0f:9c:f2:47:c6:87:2c:0d:bc:65:
6b:3d:45:54:e7:0f:fe:e9:62:4e:86:5e:4d:54:b9:
31:1d:40:76:83:df:94:15:66:e9:4d:d0:70:f7:4e:
de:28:76:ef:58:9b:68:31:b7:e9:20:88:d5:50:4b:
e7:f3:b1:09:cb:3d:b0:43:cb:0a:f7:70:d1:d7:6a:
c3:ad:ed:ef:9d:1a:23:1a:0c:50:90:03:72:8a:e9:
d2:6c:43:71:cd:54:8d:a1:bb:c2:44:2d:60:17:89:
1c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:ED:B6:23:D0:91:B1:38:F1:21:AF:24:8D:5A:D2:6B:E4:62:43:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52F6584C117C11F1AE5F2486DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.36.0/24
154.196.65.0-154.196.67.255
154.196.69.0/24
154.196.71.0-154.196.75.255
Signature Algorithm: sha256WithRSAEncryption
c7:30:06:04:dd:2e:dd:0b:6c:0e:48:7b:47:30:1f:59:2c:4c:
7a:27:31:b1:13:fe:c2:31:a6:61:47:83:b6:50:fc:a3:0f:87:
7c:1e:cf:25:9b:82:46:e4:fe:7b:47:17:34:18:7e:da:ca:d8:
a4:22:39:f8:66:6b:18:4d:d1:1e:b3:66:d1:6f:84:f1:52:04:
00:41:8f:65:ea:24:dc:f4:2c:b9:93:b4:08:99:79:34:ca:6a:
ba:d3:d2:06:8c:d0:9e:12:23:32:03:e1:03:ea:0e:0b:d0:3c:
ac:76:d4:f1:e0:02:9a:0e:08:be:95:cc:71:31:5c:da:01:18:
b2:8c:17:01:7d:1c:e9:3a:34:0d:0b:57:db:ad:29:91:81:82:
b2:44:2a:48:17:d7:77:fe:00:8b:ac:45:76:c2:89:e7:1d:21:
6d:44:d3:7f:15:4d:d7:02:fc:f0:92:7e:6a:3d:8d:b0:39:8b:
54:21:22:0d:4c:62:24:4d:8a:d3:61:ee:a6:75:c8:5d:25:f2:
f4:52:d6:03:60:f8:a5:69:5c:30:bb:7c:80:1a:15:30:e2:04:
14:ee:97:fd:d5:6e:0b:00:2b:97:26:50:4a:87:b4:cc:fb:ac:
b9:1e:08:de:76:a9:c2:44:97:b5:59:54:8b:da:49:9c:6f:dd:
2e:3a:7b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:16:48 2026 by rpki-client