Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A689E0F4158D11F1B01A0D79DAE4EC9C.roa
File: A689E0F4158D11F1B01A0D79DAE4EC9C.roa (raw, json)
Hash identifier: bX3ozjeWEs2cqgV3ha6FG5TL/NTgGF9Nrssi3lLCcVM=
Subject key identifier: AA:4E:BB:C1:C4:41:B9:97:5D:FD:E5:BC:BB:71:FC:ED:10:7B:A6:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC9C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A689E0F4158D11F1B01A0D79DAE4EC9C.roa
Signing time: Sun 01 Mar 2026 16:42:35 +0000
ROA not before: Sun 01 Mar 2026 16:42:31 +0000
ROA not after: Wed 08 Apr 2026 16:42:31 +0000
asID: 44559
IP address blocks: 154.219.64.0/24 maxlen: 24
154.219.65.0/24 maxlen: 24
154.219.66.0/24 maxlen: 24
154.219.67.0/24 maxlen: 24
154.219.68.0/24 maxlen: 24
154.219.69.0/24 maxlen: 24
154.219.70.0/24 maxlen: 24
154.219.71.0/24 maxlen: 24
154.219.72.0/24 maxlen: 24
154.219.83.0/24 maxlen: 24
154.219.84.0/24 maxlen: 24
154.219.85.0/24 maxlen: 24
154.219.86.0/24 maxlen: 24
154.219.87.0/24 maxlen: 24
154.219.88.0/24 maxlen: 24
154.219.89.0/24 maxlen: 24
154.219.90.0/24 maxlen: 24
154.219.91.0/24 maxlen: 24
154.219.92.0/24 maxlen: 24
154.219.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113820 (0x1bc9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 16:42:31 2026 GMT
Not After : Apr 8 16:42:31 2026 GMT
Subject: CN=69a46c7b-3a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:56:13:b8:b7:e8:cd:f8:23:bd:93:b8:0d:37:
3a:2b:34:83:ee:cf:3b:e2:77:1d:9c:ff:b4:71:49:
01:3d:38:9a:29:91:00:e0:d9:5c:36:39:02:9e:17:
32:42:e1:84:14:74:06:82:e8:56:78:f3:3a:5a:b5:
58:81:9e:a7:b1:28:4b:92:d5:fa:2c:e6:1a:b3:5d:
fb:9c:fb:ef:98:3e:29:ad:e4:a7:bb:61:44:1f:c4:
e8:31:ad:88:07:79:a5:90:03:e4:c4:23:dc:f1:29:
0d:4b:dd:45:1e:3d:fe:a8:4a:6c:6b:5b:d5:72:6c:
5a:80:ea:5d:0d:13:c4:ad:ad:65:93:5c:d3:19:0a:
05:1d:f4:72:96:96:0c:fd:e7:0f:51:a0:39:94:45:
d0:e8:60:96:66:db:b5:97:2f:19:f8:7c:29:b6:73:
49:95:9b:f3:d1:0c:4a:51:6c:2f:9b:91:69:ad:1f:
79:fe:e6:41:35:e5:0b:84:a0:68:21:fa:eb:75:19:
78:f3:39:6e:99:d8:1d:12:fe:c8:c0:62:a5:ec:98:
7b:5d:bd:06:1f:81:e6:ce:1a:5b:3e:10:14:e2:6e:
b6:6f:3a:12:b4:5c:1b:67:9d:25:58:24:90:23:16:
5f:1d:43:e6:92:1a:fe:91:d6:a8:6b:d3:cb:68:06:
82:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4E:BB:C1:C4:41:B9:97:5D:FD:E5:BC:BB:71:FC:ED:10:7B:A6:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A689E0F4158D11F1B01A0D79DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.64.0-154.219.72.255
154.219.83.0-154.219.93.255
Signature Algorithm: sha256WithRSAEncryption
c6:88:b2:5c:3b:6b:19:9a:84:77:82:47:86:b6:08:d4:2f:d1:
d5:5c:5a:2a:ec:2b:40:02:86:64:df:07:1e:f4:ee:35:cf:88:
9f:7c:a6:21:13:d4:b1:26:19:af:7a:bc:52:6a:18:75:38:cb:
39:9c:19:03:39:2f:d7:1c:13:c3:83:f3:d7:63:15:4c:28:08:
20:43:5b:52:01:19:18:fd:15:a8:f5:69:57:80:cb:9e:50:5f:
4f:2f:2c:cf:29:b8:69:5c:bd:92:67:55:87:8e:c4:73:6e:ef:
b1:c2:ca:b2:62:47:ae:c4:e7:fc:fe:c9:89:1d:3b:42:21:c3:
aa:26:86:87:b6:e6:cb:e2:2a:dc:a3:0d:cc:ba:ae:0d:17:86:
65:9f:41:16:45:fc:48:f1:62:9e:e7:20:75:81:d7:92:74:86:
f4:16:15:48:16:02:49:8a:a4:82:5a:d1:9a:e3:dc:5d:6d:0d:
c9:d3:78:e0:1e:16:72:ae:e2:4e:1e:bb:5d:ac:bb:80:05:43:
35:ae:41:5c:43:00:29:fa:fb:e4:66:ed:ba:d9:76:e3:d5:6a:
2c:51:9a:ae:53:e4:5c:2a:2f:fa:27:44:2d:e1:7b:2e:0b:fc:
b2:aa:99:ba:af:6a:b3:71:9c:2b:dd:9b:0c:12:b7:29:0a:9c:
b7:db:60:b2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:33:39 2026 by rpki-client