Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B742D170122811F1B21CA5AFDAE4EC9C.roa
File: B742D170122811F1B21CA5AFDAE4EC9C.roa (raw, json)
Hash identifier: d3kmHY9GQ1q0qFIkvZGQYTn/hI6GOLTghgrLoqIT3IE=
Subject key identifier: 91:AC:A4:6A:42:73:05:AD:50:0E:08:24:F6:B6:83:D4:31:63:2B:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BB9B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B742D170122811F1B21CA5AFDAE4EC9C.roa
Signing time: Wed 25 Feb 2026 09:02:31 +0000
ROA not before: Wed 25 Feb 2026 09:02:26 +0000
ROA not after: Wed 01 Apr 2026 09:02:26 +0000
asID: 44559
IP address blocks: 154.198.36.0/24 maxlen: 24
154.203.251.0/24 maxlen: 24
154.205.226.0/24 maxlen: 24
154.205.227.0/24 maxlen: 24
154.205.228.0/24 maxlen: 24
154.205.229.0/24 maxlen: 24
154.205.230.0/24 maxlen: 24
154.205.231.0/24 maxlen: 24
154.205.232.0/24 maxlen: 24
154.205.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113563 (0x1bb9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 09:02:26 2026 GMT
Not After : Apr 1 09:02:26 2026 GMT
Subject: CN=699ebaa7-8c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4b:2a:1d:43:cb:13:2f:f9:1d:af:7e:77:e5:
66:6f:c1:c5:84:be:f6:07:25:b3:a3:01:75:70:d8:
f3:64:8a:ea:61:b5:88:93:6a:4f:3f:a5:9a:de:e7:
21:e9:c3:ee:ec:70:55:7d:ff:32:8e:33:fe:62:b4:
80:41:1f:6f:05:1a:13:86:1a:6e:96:c3:29:10:d4:
eb:a1:44:82:49:8a:04:db:d6:3c:c5:f8:91:73:9f:
91:49:33:00:48:95:1d:98:0c:c4:cd:73:df:26:75:
84:38:21:5f:fd:37:dd:de:d1:ad:4a:d1:bc:dd:4d:
b6:17:ef:28:7e:1f:4a:d9:7c:bf:54:38:57:06:73:
2e:d4:c9:e3:1a:3f:dc:63:f1:a6:a9:f8:3e:99:6d:
38:ad:ef:17:da:bf:85:56:2c:e3:9c:9a:cf:1b:c0:
2b:8c:13:b0:dd:a3:fe:ab:00:e8:da:8e:22:2b:96:
a4:0c:c1:72:3a:b0:4e:76:38:9e:cd:6e:59:3c:85:
7e:38:54:a3:a3:46:dc:44:6e:b4:77:08:1f:20:59:
a1:e0:63:9f:4e:72:f7:b8:d5:22:9f:57:97:53:b0:
dc:09:82:fd:39:76:a7:09:0c:ce:1d:af:aa:2c:45:
21:ee:dc:2b:2e:44:96:e3:ae:94:f9:dd:c5:eb:23:
cd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AC:A4:6A:42:73:05:AD:50:0E:08:24:F6:B6:83:D4:31:63:2B:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B742D170122811F1B21CA5AFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.36.0/24
154.203.251.0/24
154.205.226.0-154.205.233.255
Signature Algorithm: sha256WithRSAEncryption
c6:39:b3:a8:71:21:70:e6:7c:41:a3:93:b4:07:63:73:ef:39:
14:6a:30:da:a2:60:55:a7:7a:c0:ac:a5:ae:e8:f0:19:40:f6:
3b:d3:57:aa:34:eb:47:08:f7:09:80:ef:c4:78:c1:1b:61:c9:
5a:c7:8a:bf:04:5f:9c:da:53:53:6f:65:90:40:76:2d:8a:16:
1f:07:73:68:25:e0:ca:e1:8f:92:16:fa:3e:ba:6f:90:86:f2:
2a:2d:b1:0c:77:95:3f:0d:d4:29:9d:a0:26:8f:f4:7d:7d:b0:
bf:4b:ff:03:ab:06:33:9b:63:3c:0f:d7:ae:0a:2e:a2:10:a2:
28:b0:80:a8:39:bc:bc:eb:cb:a9:87:a4:4f:27:28:68:b3:05:
dc:e7:40:c3:8a:2b:16:fb:ec:cd:2e:0c:fd:15:93:41:b9:df:
4d:ba:83:5c:2e:ea:a8:ec:77:82:b7:d8:a2:0d:de:a6:ac:48:
23:e1:2a:ce:f8:62:98:67:3b:23:33:89:21:b1:40:9d:2f:3a:
e2:f6:e1:f3:10:8d:74:ad:66:a1:bd:3f:07:de:4f:cb:42:d5:
3f:1c:c0:50:27:93:b7:b6:c2:45:e5:7a:db:eb:6b:98:1a:3a:
b2:f2:8f:1d:79:c7:3e:66:8e:32:16:db:43:4c:7b:cd:b8:73:
bc:56:20:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:10:03 2026 by rpki-client