Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/820D0C08155E11F19C5A76DFDAE4EC9C.roa
File: 820D0C08155E11F19C5A76DFDAE4EC9C.roa (raw, json)
Hash identifier: 5FGS+2mRknXAQedFJ/Y8oxx9boVrJcY9pzjid60rlL8=
Subject key identifier: 85:A0:14:4E:71:B9:81:99:CF:19:AD:45:D3:B2:9B:F6:24:74:AB:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC86
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/820D0C08155E11F19C5A76DFDAE4EC9C.roa
Signing time: Sun 01 Mar 2026 11:05:08 +0000
ROA not before: Sun 01 Mar 2026 11:05:03 +0000
ROA not after: Sun 05 Apr 2026 11:05:03 +0000
asID: 202656
IP address blocks: 154.219.192.0/24 maxlen: 24
154.219.195.0/24 maxlen: 24
154.219.201.0/24 maxlen: 24
154.219.202.0/24 maxlen: 24
154.219.203.0/24 maxlen: 24
154.219.208.0/24 maxlen: 24
154.219.209.0/24 maxlen: 24
154.219.210.0/24 maxlen: 24
154.219.212.0/24 maxlen: 24
154.219.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113798 (0x1bc86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 11:05:03 2026 GMT
Not After : Apr 5 11:05:03 2026 GMT
Subject: CN=69a41d64-7dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b9:fd:22:8d:2a:0e:91:a5:f6:ae:0d:8d:0f:
34:51:e3:ec:a8:71:3b:db:2f:44:f1:6c:5a:f5:11:
e3:6e:c5:f1:9a:a9:ff:2c:41:08:dc:07:4c:aa:99:
9f:91:10:2a:34:29:ea:16:04:af:4f:cb:48:3b:07:
1a:35:39:50:18:2c:45:f8:92:3b:77:9c:97:1a:e7:
0a:66:43:f1:67:34:5f:63:9e:55:7e:03:92:78:c9:
99:27:b3:14:6a:25:9a:da:7c:6d:ea:29:49:1a:11:
ac:06:ab:7a:2d:cf:80:24:82:63:89:ca:91:db:86:
92:1f:12:14:9f:6c:53:66:90:2c:ca:5f:ed:42:ae:
4c:c6:d9:18:57:18:f5:e7:94:0a:f6:48:07:b9:9b:
29:86:b2:7d:52:86:fa:d7:e8:b2:f3:85:be:72:51:
2e:73:b9:01:b6:fe:88:9f:dd:51:72:46:b3:21:b6:
22:00:14:5d:49:8e:97:bd:50:9b:bb:5f:21:4f:18:
b5:6e:de:33:88:0a:45:52:b0:82:b7:bb:65:8d:57:
88:80:07:2a:72:ad:c3:64:41:c3:21:84:41:01:4f:
14:95:1c:fb:50:25:7a:05:b8:d1:ba:c8:9c:cb:d0:
bd:4d:84:47:e9:38:2d:24:fc:0e:72:01:26:f5:eb:
6b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A0:14:4E:71:B9:81:99:CF:19:AD:45:D3:B2:9B:F6:24:74:AB:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/820D0C08155E11F19C5A76DFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.192.0/24
154.219.195.0/24
154.219.201.0-154.219.203.255
154.219.208.0-154.219.210.255
154.219.212.0/23
Signature Algorithm: sha256WithRSAEncryption
be:9b:64:b4:db:3e:16:18:e9:e0:71:33:c5:50:a8:6d:be:7d:
64:36:ce:48:17:d4:a9:b3:9f:26:80:e6:27:39:ca:37:de:a8:
59:52:40:bb:99:c8:4a:4f:65:33:db:f5:1a:be:bb:9a:10:39:
1d:ab:09:39:8f:01:5d:3d:bd:d2:29:f0:23:fe:2f:1b:3e:ff:
65:a6:e0:05:a0:bc:2e:17:ae:e1:87:14:4f:e5:01:e8:b3:0f:
47:e2:f0:45:7e:54:30:56:dc:d5:b7:71:52:4b:12:04:19:cc:
64:cc:8a:9d:5e:9d:a1:33:a0:fd:4f:26:34:25:6e:ac:3b:3c:
3a:34:00:78:83:78:a2:42:16:88:f1:e8:a3:d2:88:9a:e2:15:
98:38:28:78:83:60:17:b5:6a:38:e7:1e:3b:ea:41:89:7c:57:
1d:c9:1b:f7:23:c7:c9:45:02:6d:98:09:85:41:33:58:5f:9d:
bd:80:31:db:2d:02:f0:b6:a3:70:cf:d5:98:b5:32:77:29:1e:
1d:a2:df:4d:aa:f9:fc:aa:a5:7d:34:ba:22:08:30:bc:01:5e:
36:ae:0f:b8:a7:09:26:46:00:92:01:b7:46:a2:6d:35:07:b4:
7c:db:48:50:74:5f:fc:e0:08:70:e0:ac:64:0d:0c:8c:0d:6a:
97:1c:51:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:36 2026 by rpki-client