Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A628F564117D11F1AA435C8EDAE4EC9C.roa
File: A628F564117D11F1AA435C8EDAE4EC9C.roa (raw, json)
Hash identifier: 4LQkwEL/v+Pj9UyrOxdSv6IJCKCJLG5GrGd7+Ny9Ghs=
Subject key identifier: 28:A5:F3:4E:21:12:8B:9D:02:7D:D5:6C:31:32:02:E2:75:10:1B:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB66
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A628F564117D11F1AA435C8EDAE4EC9C.roa
Signing time: Tue 24 Feb 2026 12:37:58 +0000
ROA not before: Tue 24 Feb 2026 12:37:54 +0000
ROA not after: Tue 31 Mar 2026 12:37:54 +0000
asID: 62240
IP address blocks: 154.195.141.0/24 maxlen: 24
154.195.142.0/24 maxlen: 24
154.196.68.0/24 maxlen: 24
154.196.70.0/24 maxlen: 24
154.196.76.0/24 maxlen: 24
154.196.77.0/24 maxlen: 24
154.196.78.0/24 maxlen: 24
154.196.79.0/24 maxlen: 24
154.196.80.0/24 maxlen: 24
154.196.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113510 (0x1bb66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 12:37:54 2026 GMT
Not After : Mar 31 12:37:54 2026 GMT
Subject: CN=699d9ba6-86ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e7:c9:ba:a9:2e:e0:54:27:a7:5a:50:aa:4c:
36:59:74:35:e4:4c:fb:48:96:02:7c:ec:d2:f0:9a:
c5:eb:1a:29:9c:f2:5f:b3:15:e3:6b:c4:54:0c:3b:
b0:4a:6d:b5:0f:40:2d:d7:c0:e9:c0:ae:3c:9d:52:
ce:bb:6e:2e:0e:46:9e:65:ad:3e:06:20:9c:20:85:
ef:a2:f1:ca:62:9f:9d:56:3e:23:0a:0a:85:ba:37:
bd:50:fd:36:58:ff:75:49:8c:70:69:de:f3:95:89:
bd:e5:80:60:e4:4a:ce:12:aa:a8:78:99:12:d9:2f:
6c:77:a8:5a:15:b5:fc:bd:20:d3:58:0a:11:1c:5f:
79:db:d4:29:97:5b:70:c5:26:90:b0:20:b5:6b:9b:
13:70:ed:fa:38:d5:ee:a2:a4:7e:d3:72:e1:63:6b:
96:1c:62:25:bf:0f:9a:19:c3:02:71:90:4e:ec:7a:
79:38:f2:dd:42:17:8b:5d:f7:83:74:11:14:41:88:
62:e0:f6:3a:bb:3b:1f:a2:be:57:bf:43:d8:bd:23:
14:e4:d6:08:29:6a:9a:f8:54:cb:50:21:47:1d:61:
a9:d8:ca:80:9a:4a:cd:8b:77:02:35:ec:bd:a3:5c:
02:5e:c5:03:ff:0a:fe:0d:b6:01:72:8c:b1:ce:a2:
f8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A5:F3:4E:21:12:8B:9D:02:7D:D5:6C:31:32:02:E2:75:10:1B:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A628F564117D11F1AA435C8EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.141.0-154.195.142.255
154.196.68.0/24
154.196.70.0/24
154.196.76.0-154.196.80.255
154.196.87.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:47:5a:ac:d8:49:2b:24:00:7f:9f:d4:91:e3:57:5c:3d:5a:
d0:d6:a6:e6:ac:87:16:4d:af:9a:71:5c:70:c9:bf:67:f3:1a:
1b:2b:48:1b:54:db:12:4a:fd:89:ed:a2:87:d9:96:9f:64:4b:
d5:fb:e6:e2:38:cc:3f:e8:e1:dd:6a:08:78:86:04:da:d4:df:
54:09:f6:96:89:27:c6:84:c6:a6:71:52:5b:6e:bd:70:ec:0c:
9d:54:4b:d4:e5:fc:26:80:fe:f8:fe:79:14:11:fe:33:12:32:
cf:62:c7:0b:7b:52:47:39:cb:4b:83:70:28:ef:cd:a2:24:a3:
5e:87:8b:c1:42:21:98:1f:54:40:44:e5:56:ae:9e:ac:77:3d:
07:fd:8e:9e:ca:e8:fc:0e:60:b1:0c:c6:18:c5:10:3b:c1:c0:
51:a6:11:9b:31:9e:5e:20:1e:3e:da:af:85:11:25:d1:bf:aa:
51:b8:89:b1:96:da:55:5d:cc:f9:c6:4f:ab:45:46:5e:db:e0:
4a:6d:f2:d5:f8:40:01:9f:8c:d2:4f:8f:3b:3a:18:9d:8e:7e:
82:fd:2e:31:56:37:2a:b3:7b:ca:66:7a:72:77:50:75:7f:44:
30:86:34:9c:a2:ce:28:06:c7:54:a8:8f:90:c7:7e:0f:d5:fd:
58:d9:df:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:52:28 2026 by rpki-client