Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5894B0DC12EE11F19EE3C6E8DAE4EC9C.roa
File: 5894B0DC12EE11F19EE3C6E8DAE4EC9C.roa (raw, json)
Hash identifier: ZQw8OISuetdVf1oOsaIkX+HwxjK3ZTROFW9Z/xS1ZZ4=
Subject key identifier: 81:3E:08:F6:9E:7D:AF:D1:F4:2E:A0:4A:05:EF:67:E5:77:CE:0E:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BBF9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5894B0DC12EE11F19EE3C6E8DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 08:37:12 +0000
ROA not before: Thu 26 Feb 2026 08:37:08 +0000
ROA not after: Mon 30 Mar 2026 08:37:08 +0000
asID: 401783
IP address blocks: 154.82.158.0/24 maxlen: 24
154.82.196.0/24 maxlen: 24
154.82.197.0/24 maxlen: 24
154.82.198.0/24 maxlen: 24
154.82.199.0/24 maxlen: 24
154.83.65.0/24 maxlen: 24
154.83.67.0/24 maxlen: 24
154.90.128.0/24 maxlen: 24
154.90.136.0/24 maxlen: 24
154.90.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113657 (0x1bbf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 26 08:37:08 2026 GMT
Not After : Mar 30 08:37:08 2026 GMT
Subject: CN=69a00638-c6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4b:09:a6:b5:20:66:94:a7:b9:26:f5:8a:da:
99:76:0d:a8:36:ca:4b:1b:42:8e:d8:11:9c:e3:76:
99:1e:c8:4b:6a:fa:96:6e:23:a8:90:e1:8d:01:ef:
97:0b:20:96:c9:2e:7d:8f:7e:a7:18:0b:89:ee:3f:
bb:2e:6a:fe:ae:cf:34:de:52:83:c1:c4:ad:fe:15:
ea:f4:cb:ec:af:aa:f9:de:a5:b4:a6:bd:9c:33:19:
e1:61:8b:2f:e2:bc:36:8d:d7:2a:73:50:c2:43:b4:
18:8a:75:3f:ba:ee:27:02:6d:85:94:df:05:a9:a5:
1a:6d:7a:f4:74:04:65:78:23:75:52:93:dd:20:e0:
06:fd:c2:af:6a:1e:e2:fd:a9:2f:9b:ab:5a:70:eb:
e0:e7:28:1f:38:56:c6:7f:5c:f9:ce:49:8b:42:13:
76:e5:68:6e:61:ba:a0:ff:47:f4:2e:7c:ce:01:50:
01:ba:33:8a:40:b1:2f:57:13:4c:94:1a:22:46:26:
2f:e3:4e:59:51:2e:e4:d2:d4:4d:b3:00:ce:5d:2a:
92:24:09:6c:a7:04:bd:41:1b:13:90:d2:69:a6:c2:
82:0c:08:2c:89:ee:7b:81:c1:db:30:7b:ea:ff:dc:
5c:d6:d5:bc:65:a6:23:5f:ee:43:7b:20:eb:4f:8e:
a3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3E:08:F6:9E:7D:AF:D1:F4:2E:A0:4A:05:EF:67:E5:77:CE:0E:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5894B0DC12EE11F19EE3C6E8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.158.0/24
154.82.196.0/22
154.83.65.0/24
154.83.67.0/24
154.90.128.0/24
154.90.136.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:ba:0f:3c:19:d7:d9:73:24:6b:56:ae:a4:d4:eb:2a:d5:82:
6c:61:2c:1a:57:be:c6:9b:5b:cb:9d:ef:f2:50:ab:6f:c5:52:
de:74:68:d6:0a:51:05:31:ba:1a:72:7e:59:e8:66:1b:17:d1:
11:6d:f2:1a:6f:a0:30:77:14:c5:ce:f8:b3:71:34:1c:3f:f3:
37:22:df:31:9b:8c:02:97:c3:c8:50:e3:c1:93:51:93:ce:e5:
85:6d:79:3a:d1:25:06:7f:cc:49:cd:0e:e5:3a:56:8a:2d:69:
aa:8e:1c:b4:31:af:1f:1b:4f:be:09:3b:5c:fc:20:b4:09:83:
9d:53:44:e1:4a:42:56:03:27:89:1e:ef:22:27:54:5b:4d:0d:
c1:76:5c:56:f8:43:c7:48:ca:04:30:a5:79:00:f4:b9:6b:99:
d2:2e:51:0b:cf:db:f0:35:0c:9f:c5:bc:7d:7c:78:71:f7:92:
8a:ae:91:92:49:b5:4f:fa:8a:b2:a0:59:5b:f1:9d:e2:09:06:
b2:4e:a9:75:82:4c:a9:34:4e:b3:6a:2a:5c:32:64:d4:c5:1a:
c8:50:d8:b6:02:0a:f7:06:ba:24:9b:0f:68:18:49:d0:27:59:
e8:30:42:e1:b9:cb:5f:83:0e:eb:49:d1:f5:05:e2:ca:34:fb:
55:1f:62:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:22 2026 by rpki-client