Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1F4044AFE7511F0A6A9FC9EDAE4EC9C.roa
File: A1F4044AFE7511F0A6A9FC9EDAE4EC9C.roa (raw, json)
Hash identifier: Wj+teftHE8rfqp/LpdzfA61CllGo2ljAhAove54r88M=
Subject key identifier: B2:E4:2A:9B:D8:26:A6:E2:49:4C:40:4D:F9:66:B3:D7:F2:93:E6:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B7B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1F4044AFE7511F0A6A9FC9EDAE4EC9C.roa
Signing time: Sat 31 Jan 2026 07:22:43 +0000
ROA not before: Sat 31 Jan 2026 07:22:39 +0000
ROA not after: Sun 08 Mar 2026 07:22:39 +0000
asID: 44559
IP address blocks: 154.209.144.0/24 maxlen: 24
154.209.145.0/24 maxlen: 24
154.209.152.0/24 maxlen: 24
154.209.153.0/24 maxlen: 24
154.209.154.0/24 maxlen: 24
154.209.155.0/24 maxlen: 24
154.209.157.0/24 maxlen: 24
154.209.158.0/24 maxlen: 24
154.209.195.0/24 maxlen: 24
154.209.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112560 (0x1b7b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 07:22:39 2026 GMT
Not After : Mar 8 07:22:39 2026 GMT
Subject: CN=697dadc3-2518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c0:10:32:3a:21:85:61:ac:38:0d:76:75:7d:
56:f3:90:7e:e2:66:45:28:d8:b4:68:e1:cc:d7:0d:
e3:5d:bf:94:73:4f:82:03:34:a6:95:76:2b:eb:ba:
25:01:86:ec:aa:f5:ca:94:1b:15:a7:7a:32:da:2e:
6a:99:16:05:07:ec:36:d3:d2:3d:6d:65:67:57:6c:
81:fb:70:9f:94:8a:0b:d5:ad:54:0b:60:0e:6e:13:
79:01:1b:65:06:9e:35:5d:48:eb:0d:a7:0a:34:4a:
f6:4f:4e:42:c9:77:bb:ed:db:fa:c6:3c:0c:2e:00:
aa:c6:be:1c:d3:5e:5a:6a:4f:4a:d4:af:37:cc:78:
31:a9:f7:eb:a8:d5:b3:cd:5a:fb:02:42:89:10:b0:
d6:15:d7:bd:2c:28:a1:dd:ff:28:2d:f2:b7:7e:d7:
8e:ee:28:8e:2d:b6:47:e4:db:59:99:94:14:6c:95:
30:35:48:28:60:fe:0d:7e:2a:09:c5:5c:35:19:81:
81:6d:3e:0f:86:c0:31:e5:b3:0f:52:91:10:f1:b9:
03:08:2e:4f:25:03:a3:b9:d3:27:2d:02:ca:a8:ae:
c8:99:67:bc:8a:f5:f0:ad:39:ca:0d:a6:5e:a0:88:
8b:7f:44:99:48:0b:da:c4:81:2f:0f:fc:e6:89:3d:
22:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E4:2A:9B:D8:26:A6:E2:49:4C:40:4D:F9:66:B3:D7:F2:93:E6:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1F4044AFE7511F0A6A9FC9EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.144.0/23
154.209.152.0/22
154.209.157.0-154.209.158.255
154.209.195.0-154.209.196.255
Signature Algorithm: sha256WithRSAEncryption
66:11:6f:15:d7:4d:9f:a1:5e:4b:15:d8:41:d6:fa:80:d1:4c:
ad:e3:ca:23:04:40:28:0d:e8:51:d2:7d:58:df:8b:7f:15:02:
31:a0:6c:39:c1:e5:88:e5:30:b7:d6:fc:37:56:ae:40:99:14:
3e:a7:44:39:52:fb:50:53:31:4e:8d:c9:ce:bc:18:65:94:4a:
e2:64:76:02:36:0c:ff:83:de:94:41:59:d9:cf:cf:cb:63:14:
3f:bb:26:81:c5:cb:17:20:4e:85:3b:58:c4:4a:28:00:ff:89:
cc:3d:99:7a:9d:f3:d7:a0:c8:02:7c:b7:3e:55:fb:41:03:2b:
4c:81:1b:6d:cc:f4:28:90:41:0c:b5:f0:8e:ec:f4:9d:e2:07:
35:19:10:0f:d9:ce:01:0a:4b:55:ef:00:65:6f:1f:04:38:d9:
02:fe:7c:d7:a0:85:03:3b:1f:65:bf:57:ad:74:32:a2:c0:a6:
fb:5c:30:62:3a:a7:e0:e4:77:f0:b5:8e:09:47:9c:6b:a8:43:
58:73:f0:06:a8:c8:6a:dd:3a:55:6c:fc:bb:e0:e7:90:f1:d5:
96:5a:cb:32:75:13:82:8b:4b:63:18:a9:c5:57:9b:ce:ce:d4:
72:e9:ad:3f:40:42:23:31:ff:21:c7:87:22:d8:1a:5e:5c:f3:
a9:2d:ea:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:16:59 2026 by rpki-client