Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/667D9C1E0EFB11F18F0091B0DAE4EC9C.roa
File: 667D9C1E0EFB11F18F0091B0DAE4EC9C.roa (raw, json)
Hash identifier: ZASftwrx9Z8d0hum4nhR3HyCyfjRmZBqQlvCj0d1fQY=
Subject key identifier: E7:65:06:46:46:5C:06:2C:EF:A9:60:3B:63:58:1C:6B:5F:7A:CD:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BAC7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/667D9C1E0EFB11F18F0091B0DAE4EC9C.roa
Signing time: Sat 21 Feb 2026 08:00:35 +0000
ROA not before: Sat 21 Feb 2026 08:00:30 +0000
ROA not after: Fri 27 Mar 2026 08:00:30 +0000
asID: 138915
IP address blocks: 154.203.165.0/24 maxlen: 24
154.203.178.0/24 maxlen: 24
154.203.181.0/24 maxlen: 24
154.203.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113351 (0x1bac7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 21 08:00:30 2026 GMT
Not After : Mar 27 08:00:30 2026 GMT
Subject: CN=69996622-18bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:e2:e9:12:a7:30:77:96:1e:7d:8b:55:0b:
ab:94:98:1c:0f:5f:d0:47:ff:43:d0:c8:b8:36:a3:
e7:4e:5a:3e:fd:61:b5:a1:87:15:dc:63:b5:54:0b:
0c:2d:ff:62:5c:a6:6f:b8:ca:c8:48:f2:c5:2e:10:
6a:10:d7:22:30:12:93:d7:66:0a:ca:de:69:4a:aa:
cf:93:61:fc:9b:89:91:d8:20:3f:f5:df:cd:f5:fd:
1d:8f:77:ac:1d:bd:d7:cb:84:74:01:e3:39:04:55:
eb:88:57:25:60:22:6d:49:19:77:7d:8e:bf:65:9a:
d1:23:34:4a:1f:e8:2a:56:96:be:e2:dc:d7:c9:38:
44:d7:78:ad:b7:87:21:27:45:9f:29:7a:58:3a:f6:
3a:e7:0c:83:16:89:35:b7:08:d1:d0:ff:be:20:6f:
71:b8:49:db:fe:e4:a2:32:e1:6d:4b:5d:89:6d:8b:
08:4b:29:79:16:ad:92:3b:5b:cf:e4:c4:b3:81:a5:
2b:c2:cc:2e:db:b1:b6:70:8c:0e:8d:95:53:16:8b:
4a:94:83:bd:a0:01:d0:43:fe:7a:06:35:b4:af:b8:
83:93:51:cf:87:75:1c:95:6c:39:19:a0:d8:b2:10:
ad:1f:21:f1:78:be:62:c1:4d:15:67:d1:4f:18:01:
7f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:65:06:46:46:5C:06:2C:EF:A9:60:3B:63:58:1C:6B:5F:7A:CD:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/667D9C1E0EFB11F18F0091B0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.165.0/24
154.203.178.0/24
154.203.181.0/24
154.203.191.0/24
Signature Algorithm: sha256WithRSAEncryption
17:79:bf:58:de:13:da:db:9b:f4:d5:3a:d9:11:1e:de:4b:8d:
e4:e0:c5:85:1e:14:dd:eb:86:b5:bd:9e:3f:35:01:22:94:6f:
49:4b:e9:07:d1:bd:c7:ca:3f:d8:32:48:7a:d9:59:f7:85:8c:
79:31:bf:a3:70:27:52:5d:1f:d3:1f:f5:15:d0:37:0d:40:49:
bc:35:52:da:aa:90:e2:27:2e:52:9d:8f:f1:b7:c5:d4:82:79:
88:f0:4f:24:77:41:e5:b9:3a:6d:1b:88:f8:cf:53:1e:55:2e:
35:ff:bd:f1:32:49:59:00:07:ea:ad:11:b6:cf:01:ee:b1:99:
4a:e6:0b:d6:6a:7c:71:bb:70:80:ae:50:79:ab:72:2f:99:6a:
94:32:7c:00:d2:54:9d:33:b0:81:bf:d0:79:9a:c3:db:71:d5:
5c:85:d8:b6:a7:4d:b8:a7:9a:14:bb:3a:03:42:48:ad:f3:71:
0a:1e:22:fd:12:f9:34:82:8e:97:8a:92:ac:a8:3b:c7:1f:47:
f1:9d:95:6f:10:b8:e6:28:81:04:4b:39:92:0b:72:b5:e6:73:
c4:db:07:d9:a2:42:b4:a6:8f:1e:fc:47:a9:cd:5d:5b:1f:99:
4b:3f:87:1a:56:23:f6:fa:3d:cf:4d:cd:4f:64:06:0d:a7:d9:
ea:57:2f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:56:19 2026 by rpki-client