Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E6AD54E0E4B11F1B810AAF3DAE4EC9C.roa
File: 8E6AD54E0E4B11F1B810AAF3DAE4EC9C.roa (raw, json)
Hash identifier: s1DlwInqVCnT6Df9Zd7cSYESq0twuJec6duruYhWr9A=
Subject key identifier: CF:77:4D:43:62:66:76:5E:31:F2:5E:EE:C6:9F:2B:12:EF:8F:8B:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BA62
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E6AD54E0E4B11F1B810AAF3DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 11:01:50 +0000
ROA not before: Fri 20 Feb 2026 11:01:45 +0000
ROA not after: Fri 27 Mar 2026 11:01:45 +0000
asID: 63139
IP address blocks: 154.194.68.0/24 maxlen: 24
154.203.160.0/24 maxlen: 24
154.203.161.0/24 maxlen: 24
154.203.162.0/24 maxlen: 24
154.203.163.0/24 maxlen: 24
154.203.164.0/24 maxlen: 24
154.203.165.0/24 maxlen: 24
154.203.166.0/24 maxlen: 24
154.203.167.0/24 maxlen: 24
154.203.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113250 (0x1ba62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 11:01:45 2026 GMT
Not After : Mar 27 11:01:45 2026 GMT
Subject: CN=69983f1e-c694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:07:1b:9d:65:d5:6c:a7:11:ac:f1:8e:81:fc:
39:c8:cb:67:a8:b0:35:89:7e:24:f6:00:8a:88:fa:
f8:0d:84:15:1b:86:e1:ef:09:0c:1b:8e:20:b0:f2:
30:f7:5c:3b:e5:f4:da:8a:d4:a3:3a:3f:e5:20:5a:
45:e9:88:9e:b8:14:b2:86:a3:06:d3:4c:ab:44:8a:
05:cd:15:5e:aa:43:3d:65:2c:c2:9d:5e:30:2f:c5:
10:5f:71:e9:55:4e:9f:d5:c7:2c:08:8d:2c:27:54:
e3:7e:be:6d:f0:6e:f6:b0:f7:68:a7:31:c8:c1:1c:
c7:06:5d:97:5d:b8:7b:ab:8b:3b:fe:c8:8f:7e:cd:
4a:57:b0:cd:85:8d:a0:48:fc:7b:65:42:24:1f:7e:
d5:f2:d6:63:e1:7d:d4:3c:1b:79:54:bb:d5:da:2f:
1d:16:b6:1e:69:ee:27:f0:f5:c3:07:db:df:0c:50:
12:42:44:e7:0a:cc:19:e7:00:a5:e2:c2:aa:b0:7d:
e4:98:42:df:8e:cb:ae:a8:3b:47:bc:51:f5:15:12:
95:27:93:75:d7:16:81:70:ef:5c:c6:7d:ba:e3:5f:
98:0d:10:ee:c3:1d:ab:82:55:7e:0b:73:32:fc:c1:
20:59:ac:84:e2:ca:39:3a:97:8f:af:17:33:5d:af:
79:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:77:4D:43:62:66:76:5E:31:F2:5E:EE:C6:9F:2B:12:EF:8F:8B:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E6AD54E0E4B11F1B810AAF3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.68.0/24
154.203.160.0-154.203.168.255
Signature Algorithm: sha256WithRSAEncryption
b4:ae:21:b4:5c:df:06:f2:8c:46:38:db:3e:53:62:2a:3b:a7:
d9:a3:76:e9:08:8a:de:69:fd:e7:57:ad:90:dd:28:37:d8:7b:
01:8d:2d:c1:56:41:9d:99:6c:de:dc:09:4d:a2:be:eb:78:a8:
7a:a1:eb:c6:e4:a0:88:f0:0f:ea:72:99:53:bf:23:01:e4:7a:
69:0d:f5:1c:34:7e:f3:cf:4f:9a:ca:41:0e:0d:dc:d2:ed:2e:
a4:40:b2:a3:c6:42:e6:72:f7:c7:90:85:95:0e:cc:bf:78:02:
a4:c0:9d:d3:11:43:6b:07:94:b5:17:de:0a:e9:c4:db:8b:28:
d9:35:2e:cc:58:f1:05:df:d8:f4:f9:75:9f:52:b2:c8:06:d9:
14:90:49:a5:b2:10:5d:52:aa:0d:96:f4:10:42:9e:54:e7:a1:
85:bc:77:87:0d:13:8d:ab:7b:af:71:64:ac:d6:2c:34:19:96:
bb:e5:89:5c:d3:2f:65:22:26:fb:89:2b:f4:cd:34:02:6e:8b:
bd:c5:c9:d9:93:61:2a:56:c1:3d:b4:11:4c:0b:f9:7c:63:8e:
64:ba:82:6f:e5:b8:70:bf:b9:8e:b3:23:dc:8d:04:e3:1d:de:
d1:b5:c6:2c:5e:73:78:f3:cf:76:a1:c4:7f:21:4c:b1:95:f3:
41:2a:bd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:42 2026 by rpki-client