Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73DF0A060E6E11F18E2A60C5DAE4EC9C.roa
File: 73DF0A060E6E11F18E2A60C5DAE4EC9C.roa (raw, json)
Hash identifier: fJpFV73vnDtb3d+ddLnKIQ5GFZyvmE8udziUNWRUg6o=
Subject key identifier: D5:69:E1:5C:5C:D9:EC:02:C5:25:26:1A:F5:73:49:6C:AD:10:27:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA98
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73DF0A060E6E11F18E2A60C5DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 15:11:38 +0000
ROA not before: Fri 20 Feb 2026 15:11:34 +0000
ROA not after: Thu 04 Jun 2026 15:11:34 +0000
asID: 18229
IP address blocks: 154.210.155.0/24 maxlen: 24
154.210.156.0/24 maxlen: 24
154.210.157.0/24 maxlen: 24
154.210.158.0/24 maxlen: 24
154.210.159.0/24 maxlen: 24
154.210.160.0/24 maxlen: 24
154.210.161.0/24 maxlen: 24
154.210.162.0/24 maxlen: 24
154.210.163.0/24 maxlen: 24
154.210.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113304 (0x1ba98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 15:11:34 2026 GMT
Not After : Jun 4 15:11:34 2026 GMT
Subject: CN=699879aa-0b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ac:05:e7:1f:bc:9a:18:2e:e4:86:28:36:1a:
21:87:86:0c:7a:c0:d3:ca:db:b8:83:18:97:7c:31:
73:ee:d3:86:51:3d:59:7b:dc:ce:f1:9d:ea:a0:61:
14:a4:bc:1b:b4:1c:cc:f7:9d:35:32:93:4f:b8:82:
c2:33:d6:2e:d0:c3:2d:04:2d:92:12:74:32:4a:de:
57:0d:36:4a:78:bd:0a:59:c3:1e:cb:7d:11:99:cf:
6a:08:5c:3c:af:97:f7:57:c0:89:47:94:56:fd:dd:
f3:47:3a:b5:4c:81:25:c6:c4:9b:4f:21:2a:48:14:
03:2b:22:83:d9:bd:86:84:84:c3:ef:58:49:40:f9:
85:7e:e1:6a:c9:77:bb:5f:b4:c9:c1:1f:57:14:43:
54:fa:e0:c4:9b:b0:59:52:a9:be:5b:c9:0e:d4:77:
ff:ed:a3:04:1f:7f:3c:c3:7f:d2:da:3e:cf:3e:64:
9f:8c:68:5d:3f:3c:6b:b5:f3:86:41:f6:58:8e:d2:
05:2e:a5:75:1c:cf:fc:cd:c8:54:ca:ed:ee:b0:7a:
5f:4f:3b:78:d2:af:be:77:d5:87:b2:43:4b:fa:ad:
8f:bb:d9:17:3b:87:dd:4f:4b:26:e9:3e:99:9f:ef:
b1:0b:3b:ef:fa:b2:b3:47:3c:15:c5:dc:38:3a:45:
f1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:69:E1:5C:5C:D9:EC:02:C5:25:26:1A:F5:73:49:6C:AD:10:27:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73DF0A060E6E11F18E2A60C5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.155.0-154.210.164.255
Signature Algorithm: sha256WithRSAEncryption
5f:8c:51:78:2c:05:d0:d8:a4:07:94:d3:77:8e:8d:5f:2c:9d:
8c:11:78:53:27:05:34:78:2b:10:d8:44:6f:be:26:65:bb:db:
43:5a:ca:34:fc:78:7e:97:74:e5:78:32:b3:73:44:0c:62:d4:
23:82:77:a1:13:80:de:4f:9c:70:95:5e:b5:3b:38:34:92:dc:
67:b0:87:3b:23:51:d2:9a:34:8b:4f:8d:63:9d:25:12:f6:26:
6f:95:21:f7:65:01:b7:02:cc:08:79:70:0e:f7:e4:68:76:88:
2d:18:a3:52:3e:42:70:92:30:81:6a:e1:da:43:b0:46:55:ed:
ea:18:c1:18:ce:11:d9:42:0e:fa:e0:51:82:43:13:7a:12:0a:
52:d9:07:a1:51:67:80:88:21:4d:82:b5:b9:10:10:cf:76:4b:
f9:46:75:2a:40:d8:89:17:ba:c2:46:ee:40:25:ff:14:3f:38:
50:c8:a3:96:e8:03:bd:aa:63:e4:ec:de:79:90:13:a5:46:d6:
56:b4:29:d4:57:7f:05:a3:80:6a:e5:fa:3d:91:04:4e:43:98:
5d:db:ce:c6:1b:df:de:da:c5:68:b5:00:56:09:70:aa:8b:e0:
c2:f4:46:ec:dc:0f:dd:25:49:11:e6:98:af:15:32:27:f6:57:
7a:80:71:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:00 2026 by rpki-client