Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0D1EB0A117A11F1BF709D7DDAE4EC9C.roa
File: A0D1EB0A117A11F1BF709D7DDAE4EC9C.roa (raw, json)
Hash identifier: xGCnBmYHT0cGySdX6zxVwhuYKWrzryMKYJEmb7xCK2Q=
Subject key identifier: 1E:CC:E9:3C:79:A0:22:4A:96:8B:A0:34:34:9E:6A:BA:7F:9A:40:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB5E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0D1EB0A117A11F1BF709D7DDAE4EC9C.roa
Signing time: Tue 24 Feb 2026 12:16:21 +0000
ROA not before: Tue 24 Feb 2026 12:16:15 +0000
ROA not after: Tue 31 Mar 2026 12:16:15 +0000
asID: 62240
IP address blocks: 154.194.79.0/24 maxlen: 24
154.196.55.0/24 maxlen: 24
154.196.56.0/24 maxlen: 24
154.196.57.0/24 maxlen: 24
154.196.58.0/24 maxlen: 24
154.196.59.0/24 maxlen: 24
154.196.60.0/24 maxlen: 24
154.196.61.0/24 maxlen: 24
154.196.62.0/24 maxlen: 24
154.196.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113502 (0x1bb5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 12:16:15 2026 GMT
Not After : Mar 31 12:16:15 2026 GMT
Subject: CN=699d9695-be92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:75:22:6c:f6:bc:e7:b6:f4:dd:c3:ec:fc:d9:
ba:1a:47:8e:e7:18:aa:8d:b6:bf:97:24:38:4d:09:
c1:83:24:6e:d7:0f:17:b7:43:53:ff:2f:48:ad:bf:
39:ee:a6:07:ff:8d:6c:38:0e:34:6a:7e:65:36:d0:
51:4b:4f:a3:00:d1:77:fc:2c:16:fa:b4:3e:87:ce:
86:82:78:72:f9:61:07:9e:d4:29:25:96:89:ee:30:
2a:5f:8e:0f:f7:b3:c1:60:17:64:ae:80:4b:38:29:
a9:89:2f:8a:3b:eb:f7:80:97:89:8a:9d:f4:ca:69:
48:f9:ae:45:1c:30:c5:1d:42:61:ed:16:b9:bf:8b:
1a:17:b7:39:54:20:49:8c:37:d6:0b:b6:0a:af:27:
76:01:86:28:0d:ff:11:c0:a1:5d:ed:b0:d0:77:cf:
8c:93:09:64:6e:67:e4:00:d1:b0:ac:31:1a:df:a7:
93:0d:c8:ea:9c:ee:56:29:17:50:30:f4:1a:ce:62:
5a:11:22:cd:e3:bc:a1:9f:54:53:5a:8e:ae:92:94:
bd:0b:a3:b1:f2:1d:78:d5:10:a9:a3:f1:a8:e7:e0:
fe:5f:2f:9c:3a:77:93:23:45:87:fb:76:6f:b5:73:
8b:58:99:ad:fa:ad:9b:13:25:34:4c:87:7e:8d:f5:
f4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CC:E9:3C:79:A0:22:4A:96:8B:A0:34:34:9E:6A:BA:7F:9A:40:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0D1EB0A117A11F1BF709D7DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.79.0/24
154.196.55.0-154.196.62.255
154.196.64.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:c3:9d:bc:32:f6:ec:97:75:52:38:ea:fa:6b:fc:04:f7:2a:
9c:68:b8:3e:67:25:0a:ba:74:f4:6b:3f:59:2f:82:1a:80:35:
f1:c6:d3:c8:1e:bd:d2:47:88:ae:2b:23:bc:ea:4a:83:eb:b2:
5b:96:d5:cf:27:55:a1:61:e2:02:4f:1d:df:78:cf:8c:be:7e:
90:ad:90:c2:5a:68:80:f3:2d:43:a3:d5:c3:74:77:a2:65:c1:
71:d8:eb:f0:b0:cb:99:5b:fc:6b:af:5e:fd:37:ad:f3:67:69:
7b:30:1b:81:d3:c2:35:ae:82:84:69:f7:e7:e0:60:a1:41:c0:
e1:af:ec:0e:1c:93:e0:4c:d5:42:c5:45:a4:8a:91:e9:c6:b5:
75:9f:f7:df:54:5d:3e:9b:0e:ff:00:a1:77:6f:ad:7f:5b:26:
d7:f5:1f:32:6d:6b:f1:ea:8f:5c:22:42:6e:76:30:d1:ad:c0:
20:83:73:a5:d5:96:3c:9a:a8:fd:d7:40:63:e1:44:d8:b0:c3:
06:47:0b:3d:f4:39:1e:fe:e4:78:a6:27:0b:3a:cb:0e:66:d1:
f6:b0:6c:0a:e8:a1:20:b0:b5:a7:88:25:f0:0b:2a:b0:57:e1:
07:1d:cc:06:95:d9:93:4a:b6:96:6b:6e:94:2d:6b:4c:dc:b9:
af:92:56:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:08:39 2026 by rpki-client