Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66B37FB612EB11F1A53E61D8DAE4EC9C.roa
File: 66B37FB612EB11F1A53E61D8DAE4EC9C.roa (raw, json)
Hash identifier: 6sHhp5t/zrx8Lq87E69x/idGYeLkn2DDXph64pEuX5A=
Subject key identifier: 5C:B0:CF:F4:44:E6:2D:EC:38:0C:19:EA:29:0D:EE:D2:31:F8:E3:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BBF7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66B37FB612EB11F1A53E61D8DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 08:16:07 +0000
ROA not before: Thu 26 Feb 2026 08:16:02 +0000
ROA not after: Mon 30 Mar 2026 08:16:02 +0000
asID: 401783
IP address blocks: 154.82.134.0/24 maxlen: 24
154.82.148.0/24 maxlen: 24
154.90.134.0/24 maxlen: 24
154.90.140.0/24 maxlen: 24
154.90.189.0/24 maxlen: 24
154.92.210.0/24 maxlen: 24
154.92.211.0/24 maxlen: 24
154.92.212.0/24 maxlen: 24
154.92.213.0/24 maxlen: 24
154.92.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113655 (0x1bbf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 26 08:16:02 2026 GMT
Not After : Mar 30 08:16:02 2026 GMT
Subject: CN=69a00147-a157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c8:58:8a:0c:36:57:62:15:53:f3:1a:20:80:
7b:d1:3a:e8:53:51:ca:20:51:14:3b:0d:f8:99:95:
3e:a2:1b:97:7d:a4:61:49:3b:ee:49:f5:e6:cd:19:
b6:cb:0c:43:ea:a6:9a:78:e1:80:f0:c3:e6:6d:fe:
22:c1:a8:e2:15:57:3c:d7:23:5f:d5:ff:95:42:64:
a6:e6:24:b1:39:02:1b:25:bd:6f:12:e5:fa:ca:2b:
46:18:d6:8c:d5:d6:8b:2f:b5:ad:e7:75:4d:4c:90:
32:86:6d:e7:a3:5f:89:e6:6c:77:5b:a8:55:e1:94:
5d:03:8e:40:62:84:a8:d1:82:58:16:18:37:83:45:
4b:8f:69:37:4f:73:55:e6:75:e2:94:6a:ad:54:0a:
f1:35:6b:82:26:e8:f2:a8:0e:1a:4f:77:3d:15:61:
bc:5f:d2:47:f2:37:24:82:ed:b9:83:3c:4f:83:06:
2d:36:e3:6a:f0:8c:35:2f:59:0f:f1:0e:a8:c5:c4:
4a:02:26:5b:b0:3f:55:1b:34:4a:06:90:4c:b8:84:
ec:4c:23:cb:0b:16:f3:2a:d3:d8:17:fe:f3:c6:07:
d9:b3:08:b8:4c:e9:1e:03:14:1a:30:37:71:66:4a:
7a:d4:fb:26:5f:d8:c6:3c:89:23:a8:fc:a4:39:5c:
0d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B0:CF:F4:44:E6:2D:EC:38:0C:19:EA:29:0D:EE:D2:31:F8:E3:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66B37FB612EB11F1A53E61D8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.134.0/24
154.82.148.0/24
154.90.134.0/24
154.90.140.0/24
154.90.189.0/24
154.92.210.0-154.92.214.255
Signature Algorithm: sha256WithRSAEncryption
56:1b:8f:6a:fa:7b:f7:46:12:a1:de:ce:77:4b:9d:a7:a3:91:
df:15:75:e6:f6:6b:20:b8:10:b6:7b:11:37:d2:12:7c:bf:f2:
69:3a:49:34:4b:2b:64:5e:34:a9:89:62:34:94:7a:37:aa:fe:
ce:b9:bc:a0:d2:29:e5:a1:ff:32:d2:6d:e1:29:83:84:47:6a:
b5:fd:5f:ab:73:fc:a6:3d:16:91:41:66:f7:1c:60:f9:d8:dc:
bf:e0:0d:c2:0a:f0:e7:f5:3e:5c:d3:4d:d4:7f:bd:bc:7c:4e:
02:5d:49:1d:e3:dd:c6:94:9f:4e:1c:59:62:ac:b9:f9:a4:f7:
f0:69:d1:0e:03:3d:95:0d:c3:77:ca:48:1e:14:ac:7f:e1:84:
72:10:da:c0:d2:e6:83:bd:03:85:c3:fc:62:d3:8e:bc:4e:ab:
ec:f9:49:7b:c4:33:5e:f0:ff:f7:e3:69:67:02:ad:0f:bf:3c:
8c:25:32:71:07:f7:3a:9b:7e:e4:85:e5:68:76:e8:ce:4b:04:
89:c4:86:7d:dc:fb:51:e8:06:06:bc:d1:d8:29:b9:45:0b:90:
b8:ae:09:04:4a:3a:17:11:57:91:cf:ac:97:e4:f0:7f:2f:df:
5d:9e:bf:86:df:65:bc:7b:1a:6e:8b:4d:b8:73:f4:d0:7f:41:
b6:04:db:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:52:37 2026 by rpki-client