Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1AC44620E8F11F1ACDD048FDAE4EC9C.roa
File: C1AC44620E8F11F1ACDD048FDAE4EC9C.roa (raw, json)
Hash identifier: uIP2ETbAnyqirM2fMSn863+fi234QSn/OxuIFWDFO1U=
Subject key identifier: 51:7B:87:B6:88:D7:9F:B1:D2:8B:59:7C:2E:D8:31:0E:88:46:A8:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BAA2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1AC44620E8F11F1ACDD048FDAE4EC9C.roa
Signing time: Fri 20 Feb 2026 19:10:02 +0000
ROA not before: Fri 20 Feb 2026 19:09:57 +0000
ROA not after: Thu 04 Jun 2026 19:09:57 +0000
asID: 18229
IP address blocks: 154.210.135.0/24 maxlen: 24
154.210.136.0/24 maxlen: 24
154.210.137.0/24 maxlen: 24
154.210.138.0/24 maxlen: 24
154.210.139.0/24 maxlen: 24
154.210.140.0/24 maxlen: 24
154.210.141.0/24 maxlen: 24
154.210.142.0/24 maxlen: 24
154.210.143.0/24 maxlen: 24
154.210.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113314 (0x1baa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 19:09:57 2026 GMT
Not After : Jun 4 19:09:57 2026 GMT
Subject: CN=6998b18a-3b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:48:5f:7a:4e:cc:07:90:a7:3a:b1:d9:20:e0:
20:2c:01:cb:ea:e0:42:7a:df:f9:d7:83:55:de:65:
07:f3:a7:f9:96:73:c1:aa:c9:a9:b3:22:35:3e:51:
a8:b0:7e:15:65:29:b6:3d:b7:5f:f8:a8:47:95:98:
d2:d3:fb:86:64:0f:88:6e:fc:3f:59:4e:fc:88:e6:
9f:32:80:db:cc:ed:fb:92:d0:05:b7:6a:11:45:10:
6e:62:71:42:22:36:1a:64:df:c9:54:2b:a0:6e:ae:
ca:43:26:ac:fc:e4:d2:5c:b0:24:76:3e:e5:b4:16:
82:52:c9:ab:44:84:e9:b7:e0:27:e5:d6:e7:a4:16:
8d:2b:4a:0c:0a:2c:ac:fb:84:91:2d:7b:bc:46:e2:
5e:ef:b9:2c:f3:3b:e2:f5:40:49:f1:6f:4a:df:83:
05:19:90:b0:86:eb:13:bb:d5:85:c2:ca:63:38:bc:
c2:aa:6f:14:38:be:b1:fa:7d:5f:53:5c:d5:50:a5:
08:2f:cf:82:cb:db:2b:64:1c:89:b2:34:36:32:5d:
ac:24:f0:1d:ae:b1:38:80:c6:37:c9:35:c7:52:54:
6d:b7:45:b3:16:c8:62:76:65:39:c2:97:be:ea:d4:
3e:93:7c:6e:bd:aa:3c:52:52:39:d4:8f:71:d7:a3:
63:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7B:87:B6:88:D7:9F:B1:D2:8B:59:7C:2E:D8:31:0E:88:46:A8:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1AC44620E8F11F1ACDD048FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.135.0-154.210.144.255
Signature Algorithm: sha256WithRSAEncryption
89:30:1f:2e:83:8e:c7:b1:47:43:2b:e1:78:af:83:3e:83:52:
65:75:08:0a:de:26:0b:44:1a:d4:a6:af:37:e0:a2:d2:b9:01:
16:60:0b:91:ea:61:ea:ee:96:c4:d6:68:fa:16:84:5d:2a:d5:
b0:61:a9:8f:e5:cf:59:b9:65:c4:01:5c:36:48:c4:1a:c1:85:
29:48:6f:a8:68:70:43:b2:2a:fd:40:7b:72:5a:3f:07:e3:f0:
4b:a0:5b:e0:33:cc:fa:d6:48:1d:d8:b7:07:64:d6:2e:53:e4:
7a:cc:21:bf:c2:54:67:b4:3b:d3:07:6a:f8:22:61:55:df:4c:
b5:49:60:50:f0:41:f9:15:23:21:60:08:de:50:41:12:82:13:
95:de:22:b5:7a:c1:d9:ce:9a:1d:e8:c1:9f:3a:12:82:c4:65:
f2:1d:db:55:e9:db:1f:1d:b6:c5:21:88:3c:a3:db:df:a8:df:
fe:7d:10:9e:46:80:cf:1a:42:89:17:eb:c4:ed:c4:61:e9:aa:
bb:e8:a5:a5:f1:9e:88:6f:01:18:7e:f2:ef:c0:d4:ba:47:3d:
36:0b:e5:92:52:c5:19:2d:f6:af:f0:fb:63:3c:0d:50:9d:c4:
90:48:fd:9e:98:ac:26:ac:e3:46:9e:66:c2:06:fb:7b:9b:0b:
39:82:5e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:11:09 2026 by rpki-client