Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C4649C401A811F19CE613C8DAE4EC9C.roa
File: 8C4649C401A811F19CE613C8DAE4EC9C.roa (raw, json)
Hash identifier: O/FjPqDS95tWPhWXDKaPxqP+6ZeBnkrAr5MwRLmvNjw=
Subject key identifier: 88:A8:DB:D4:2A:5F:9F:F3:DB:C7:A1:D4:5E:4B:B9:E6:A6:A0:67:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B881
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C4649C401A811F19CE613C8DAE4EC9C.roa
Signing time: Wed 04 Feb 2026 09:04:45 +0000
ROA not before: Wed 04 Feb 2026 09:04:40 +0000
ROA not after: Thu 12 Mar 2026 09:04:40 +0000
asID: 138915
IP address blocks: 154.223.44.0/24 maxlen: 24
154.223.45.0/24 maxlen: 24
154.223.46.0/24 maxlen: 24
154.223.47.0/24 maxlen: 24
154.223.48.0/24 maxlen: 24
154.223.49.0/24 maxlen: 24
154.223.51.0/24 maxlen: 24
154.223.52.0/23 maxlen: 24
154.223.54.0/23 maxlen: 24
154.223.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112769 (0x1b881)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 4 09:04:40 2026 GMT
Not After : Mar 12 09:04:40 2026 GMT
Subject: CN=69830bad-4405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2a:7e:34:d6:58:e5:2b:b4:78:2c:83:da:d3:
93:06:fe:b2:70:d8:8a:4c:e9:37:9f:0c:d3:0d:fc:
4c:22:39:50:a9:73:94:fd:38:a8:bd:c3:51:93:b8:
f0:3a:f9:fb:9b:e3:1f:6e:9f:22:f2:39:8c:26:85:
3c:a7:c0:98:7e:34:7d:0e:73:c7:87:14:f9:12:6e:
1e:ca:08:d1:bf:b1:03:d4:ed:24:f2:8f:2b:9f:ea:
9f:4c:cc:e7:1a:00:db:6e:56:c2:bf:c4:b1:5c:c3:
ea:5d:f9:a3:7f:80:a1:54:e1:26:cc:9d:24:50:a8:
b7:1e:69:cb:c1:04:7a:95:ec:93:64:d5:85:82:b4:
13:73:05:b2:48:99:17:d3:20:63:2b:e2:99:bf:e5:
b4:ea:09:fe:98:b0:42:cc:99:27:37:97:cd:ab:28:
b6:73:c1:86:7f:e4:35:c1:31:63:3e:48:53:77:28:
1f:37:09:04:ed:a0:eb:14:4b:9a:b4:5e:5c:a6:c9:
65:28:00:71:99:42:d4:07:f1:78:94:41:fa:67:57:
a5:f0:8e:50:fc:28:f6:d3:bb:ee:c1:36:9d:23:1c:
c3:4e:90:08:ba:09:25:89:52:d8:95:7d:42:3b:65:
27:24:0e:b5:06:f8:89:ba:e7:82:26:3e:b0:2f:1e:
c3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A8:DB:D4:2A:5F:9F:F3:DB:C7:A1:D4:5E:4B:B9:E6:A6:A0:67:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C4649C401A811F19CE613C8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.44.0-154.223.49.255
154.223.51.0-154.223.57.255
Signature Algorithm: sha256WithRSAEncryption
76:b8:8c:ce:bd:26:8f:4d:1c:38:5e:f4:f3:49:ae:b7:f6:ae:
18:0f:67:0f:66:90:d1:a5:9a:d7:40:b0:c4:ca:c0:6c:c1:93:
ed:59:6d:e1:1c:16:96:bd:c8:2e:36:8b:a6:35:16:fe:05:e3:
b3:74:0e:b3:0c:22:2a:c4:79:f8:04:5c:90:3f:02:c8:84:92:
72:26:10:df:e5:23:68:9b:32:be:a8:c9:17:83:41:fe:ca:fe:
58:e5:4c:2f:88:62:05:62:5e:a9:b6:8a:b1:00:61:18:7a:fc:
36:f6:ae:12:6b:15:95:20:c9:c1:60:ca:78:01:df:e8:82:24:
e0:d3:ca:6f:12:c4:a1:6a:29:ef:b4:7f:c8:65:3f:10:97:e9:
be:31:c5:a8:62:cc:8f:2a:77:4f:be:c6:d7:37:43:3b:ab:22:
40:e5:fc:59:c0:2b:aa:d5:55:87:60:71:7f:08:0c:c0:af:1d:
45:16:db:33:39:57:73:a8:61:f1:12:b8:13:55:b9:06:53:77:
f0:ce:73:6a:7b:72:e7:2b:96:bc:c0:18:94:7f:16:73:35:25:
f6:39:70:58:62:75:ff:54:1f:28:d9:3d:5e:46:d8:23:20:09:
d2:b7:35:85:55:c2:00:a7:05:d6:60:ed:1f:80:b3:25:1f:e0:
e1:d3:03:f7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:08:28 2026 by rpki-client