Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C4DD66A13CC11F1A03C3EBCDAE4EC9C.roa
File: 6C4DD66A13CC11F1A03C3EBCDAE4EC9C.roa (raw, json)
Hash identifier: tMDkKiSDPHMLvEjBte3NDWFa5U/5pEHxDULBwx9JzdU=
Subject key identifier: 72:DB:FD:98:33:79:EA:64:B8:89:62:3B:1E:5B:17:9E:04:19:84:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC4C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C4DD66A13CC11F1A03C3EBCDAE4EC9C.roa
Signing time: Fri 27 Feb 2026 11:06:54 +0000
ROA not before: Fri 27 Feb 2026 11:06:48 +0000
ROA not after: Sun 08 Mar 2026 11:06:48 +0000
asID: 6079
IP address blocks: 154.199.49.0/24 maxlen: 24
154.199.50.0/24 maxlen: 24
154.199.51.0/24 maxlen: 24
154.199.52.0/24 maxlen: 24
154.199.53.0/24 maxlen: 24
154.199.54.0/24 maxlen: 24
154.199.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113740 (0x1bc4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 11:06:48 2026 GMT
Not After : Mar 8 11:06:48 2026 GMT
Subject: CN=69a17ace-540e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0e:ad:10:f5:b9:e5:86:d8:5b:ee:90:8a:68:
23:c5:a8:fa:00:b2:94:05:c0:47:a5:f3:b6:4a:95:
de:14:1b:32:47:e8:fa:4a:a6:2c:e1:99:c4:40:4c:
01:ea:59:69:a2:56:d7:78:bd:99:7e:c4:e1:61:a4:
c9:73:29:28:63:26:88:5e:6c:d6:bc:ae:06:96:0c:
f6:e9:d2:82:d9:1f:18:0d:83:a4:f7:4a:1b:b6:2f:
be:4d:24:26:ae:91:32:3f:8b:a9:59:03:c1:82:00:
e0:4e:be:29:b0:1d:68:2a:30:59:f9:77:62:7a:df:
94:dd:d6:1a:1c:a2:07:f8:79:ad:84:87:7e:58:6b:
d4:3b:ed:a8:ff:53:c9:36:fa:80:21:93:49:d7:66:
b8:16:83:47:1e:f4:f1:ba:88:08:66:01:24:bb:ff:
14:9e:90:ad:a0:25:8e:8b:85:aa:8a:3e:94:db:be:
dc:d0:ec:38:ee:1f:7b:73:ed:9d:1e:fb:46:7e:bb:
d4:4a:d1:48:3a:48:85:60:45:39:06:ff:d4:97:66:
88:c0:b0:b0:b3:c4:20:7b:12:4f:97:3f:45:93:55:
93:21:b6:cc:28:15:f6:c8:89:c7:6b:ca:04:6f:d7:
ac:e6:03:bb:cc:68:2f:98:50:22:d3:98:14:a7:cc:
dd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DB:FD:98:33:79:EA:64:B8:89:62:3B:1E:5B:17:9E:04:19:84:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C4DD66A13CC11F1A03C3EBCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.49.0-154.199.55.255
Signature Algorithm: sha256WithRSAEncryption
25:e4:ec:63:3b:d7:37:fc:08:be:e6:88:c6:04:47:14:85:a9:
27:e9:63:9f:17:52:2b:26:80:4f:ac:b8:12:0b:2b:0d:c3:a2:
5c:0c:06:de:b9:25:ae:57:6a:81:e7:be:85:a9:15:a6:23:4a:
b8:ab:f6:59:08:b0:c1:b9:82:3c:23:72:47:a2:ac:32:11:45:
4c:cc:47:87:cf:cf:74:da:56:22:3f:42:91:85:e9:89:ed:f7:
7c:1b:02:4f:7f:da:e0:0b:6b:49:a8:2c:49:bb:10:19:4c:37:
3d:28:2b:64:fb:96:97:a8:30:56:e4:f4:26:cf:b8:76:e0:ae:
5e:0e:38:fb:e7:dd:f9:cb:39:b7:30:ca:2f:72:ed:8b:f9:87:
a9:46:10:e4:bf:93:c3:55:89:39:9f:68:1f:5b:f9:90:cf:78:
36:ae:bd:f4:b5:7f:60:ac:9c:74:00:2a:27:64:d2:13:5a:93:
a3:d0:4a:26:77:ca:70:28:a3:99:19:ce:69:05:be:a8:c6:fe:
d8:f1:80:52:1c:48:6d:07:9a:3d:02:c1:05:ae:03:b9:8e:09:
14:ae:a8:48:85:72:c0:55:f0:31:ed:76:d0:ca:07:64:ac:54:
49:0a:f9:87:de:8e:44:2b:ca:cb:85:04:ed:de:1b:9b:4a:06:
de:b2:c2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:46:46 2026 by rpki-client