Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/818D1E4013D711F18AEF8A7FDAE4EC9C.roa
File: 818D1E4013D711F18AEF8A7FDAE4EC9C.roa (raw, json)
Hash identifier: BMLO+TN07xU3wwASmkJ47qEcPwnMmSg/tIhZehJDVlM=
Subject key identifier: 1C:1D:91:EB:FA:16:DF:FC:10:D7:30:4E:67:AC:C6:67:76:E3:CF:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC54
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/818D1E4013D711F18AEF8A7FDAE4EC9C.roa
Signing time: Fri 27 Feb 2026 12:26:14 +0000
ROA not before: Fri 27 Feb 2026 12:26:10 +0000
ROA not after: Tue 27 Feb 2029 12:26:10 +0000
asID: 17561
IP address blocks: 154.196.128.0/24 maxlen: 24
154.196.152.0/24 maxlen: 24
154.196.153.0/24 maxlen: 24
154.196.154.0/24 maxlen: 24
154.196.155.0/24 maxlen: 24
154.196.156.0/24 maxlen: 24
154.196.157.0/24 maxlen: 24
154.196.158.0/24 maxlen: 24
154.196.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113748 (0x1bc54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 12:26:10 2026 GMT
Not After : Feb 27 12:26:10 2029 GMT
Subject: CN=69a18d66-ae5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:04:69:47:f5:1a:7b:3c:93:67:e0:e9:a5:95:
50:69:91:e3:01:f3:ec:09:b5:45:0f:de:25:b3:3c:
72:47:ec:25:6b:50:0c:ab:e4:37:87:5d:6d:11:05:
7a:50:b2:9e:fd:20:8b:31:c2:3e:d0:45:6d:95:70:
40:da:26:77:41:53:86:fc:d1:37:83:cf:f6:cb:4d:
b9:d1:ef:8e:29:83:93:9b:ed:64:74:f5:78:10:a7:
f5:c1:f3:fc:bc:dd:86:7e:06:9c:41:ba:0a:c2:d2:
eb:49:f2:27:fa:17:ca:cc:2c:8b:b1:e2:27:a4:0c:
06:93:1c:ba:bb:74:86:da:ca:96:39:b7:fe:9c:5c:
6b:03:a4:17:5a:a6:ab:af:a7:21:53:ae:b4:b0:a4:
20:5a:a9:02:73:c5:a2:43:90:a1:52:b4:19:de:eb:
2a:cd:88:0a:43:f7:8a:78:08:bf:d1:11:9c:1c:0f:
b9:29:db:3f:52:e7:2b:63:ab:c2:c6:39:3e:af:fc:
7d:5d:f4:e5:da:92:6c:ae:e7:0f:54:81:92:b8:df:
dc:23:0d:9c:62:16:26:9d:e3:ee:c1:f4:2c:cc:23:
63:52:91:cc:6c:6e:bc:03:c8:82:01:06:fa:5b:f7:
8d:14:f1:9c:bd:7a:a8:da:6e:61:91:d7:4b:4e:e9:
3f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1D:91:EB:FA:16:DF:FC:10:D7:30:4E:67:AC:C6:67:76:E3:CF:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/818D1E4013D711F18AEF8A7FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.128.0/24
154.196.152.0/21
Signature Algorithm: sha256WithRSAEncryption
62:52:cf:69:51:6a:37:c2:67:9f:b9:ff:a5:c9:bd:99:9b:b5:
ae:f4:95:ed:23:ee:e7:88:a1:b3:d4:bb:95:81:07:2c:f4:78:
41:ae:36:1c:84:00:41:1f:8a:fd:59:9f:7a:ce:e5:0e:5c:e8:
7d:e1:1f:8c:b6:cc:8f:44:9b:5c:0d:a5:e3:33:a7:f8:b6:08:
73:d9:09:ac:bc:bd:26:ec:8c:54:9f:e9:0e:f6:6a:3c:81:1d:
b6:0e:13:df:46:cf:05:52:8f:37:f5:91:54:c1:7a:0b:48:16:
ef:20:5e:c1:4b:1b:63:ea:23:5a:49:30:31:9c:f3:d1:07:a6:
72:bd:0b:02:cf:2c:5c:83:16:db:a4:e4:33:92:75:c3:a6:f8:
9e:30:c9:84:bd:b1:d6:60:be:95:74:db:71:c3:d8:0f:3b:43:
79:54:d5:b2:df:4f:8a:c7:3a:ae:11:ab:fe:1b:b9:5a:89:66:
bb:f4:5e:10:c3:94:7e:3c:ad:6f:b6:22:8f:27:64:4b:83:d1:
33:fa:11:bd:fe:8a:56:2a:a7:dc:57:b2:29:23:ea:21:1f:5c:
b0:5c:95:a5:d2:3f:0d:96:5f:c4:bc:8e:1a:6e:3c:16:10:97:
4c:0c:95:b1:92:02:6e:76:42:36:08:d2:e2:ad:46:d5:a7:81:
7b:5c:55:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:21 2026 by rpki-client