Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB2399FC2A8711F1B02431CADAE4EC9C.roa
File: FB2399FC2A8711F1B02431CADAE4EC9C.roa (raw, json)
Hash identifier: WQw4tt6CnEkzIN+tEU3g62tx7DbLYMYZ6puz11lOXQQ=
Subject key identifier: 9F:A9:9E:03:4F:BF:D2:F6:7F:A6:29:1E:C0:07:D3:AB:CD:B7:9F:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C149
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB2399FC2A8711F1B02431CADAE4EC9C.roa
Signing time: Sat 28 Mar 2026 09:24:55 +0000
ROA not before: Sat 28 Mar 2026 09:24:49 +0000
ROA not after: Sat 02 May 2026 09:24:49 +0000
asID: 44559
IP address blocks: 154.81.41.0/24 maxlen: 24
154.81.42.0/24 maxlen: 24
154.81.43.0/24 maxlen: 24
154.81.44.0/24 maxlen: 24
154.81.45.0/24 maxlen: 24
154.81.46.0/24 maxlen: 24
154.81.47.0/24 maxlen: 24
154.81.52.0/24 maxlen: 24
154.81.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115017 (0x1c149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 28 09:24:49 2026 GMT
Not After : May 2 09:24:49 2026 GMT
Subject: CN=69c79e67-5e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8f:23:db:99:8c:a2:f8:10:25:18:07:d7:f5:
0d:0b:d3:a9:83:84:1e:62:07:76:5f:7d:e9:8d:65:
15:99:f9:ae:df:ff:6d:f9:90:57:36:f0:af:d4:43:
74:20:e2:f1:ce:eb:7e:32:fd:0b:f7:df:e7:0f:75:
5d:e5:d4:42:4e:20:bb:a0:6a:2c:cb:68:b9:63:ca:
93:6e:42:d8:36:31:ac:e3:94:42:88:20:b3:73:e1:
50:a1:9c:7e:f3:94:e0:50:4a:d1:50:53:a5:12:98:
50:cb:c4:38:3e:e7:f0:54:35:74:95:f5:fd:d7:e9:
0e:42:61:ca:ca:2f:7b:e9:eb:dd:d2:36:3b:a3:67:
5e:cc:7d:08:2e:1a:6c:17:ad:9c:d1:7d:e6:0f:ad:
da:ea:03:78:7a:ed:88:3e:c8:1b:36:8b:db:e4:7f:
af:c6:d6:c2:9d:65:ac:f1:6b:46:61:ef:38:06:5a:
72:12:17:79:44:87:21:77:d3:b0:13:46:e4:1c:20:
a7:3b:cc:80:f7:9f:7e:74:9a:a2:ab:87:7c:8c:09:
d5:bd:52:64:ca:15:34:a4:2c:79:92:62:7e:0f:52:
d8:35:80:1d:a2:7e:8d:3e:80:db:58:70:e7:a5:4a:
c1:5c:f8:80:6d:de:27:0a:35:78:a9:b2:b3:2e:ab:
a8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A9:9E:03:4F:BF:D2:F6:7F:A6:29:1E:C0:07:D3:AB:CD:B7:9F:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB2399FC2A8711F1B02431CADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.41.0-154.81.47.255
154.81.52.0/24
154.81.194.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:e2:f4:76:b0:4f:c2:77:6a:f9:5b:e6:0b:b8:50:4f:82:9a:
1a:10:85:7a:9f:42:87:3e:fc:39:81:8c:9d:28:73:fb:e7:a1:
e2:3b:71:d7:b4:72:75:01:88:0d:d3:3d:a8:95:b4:64:e9:64:
68:3c:24:51:1d:0d:25:10:67:6a:bc:0f:88:b6:08:23:9b:59:
83:ac:73:3f:63:cf:af:df:e7:15:21:59:3c:f5:17:9c:bc:85:
46:73:d3:2b:88:9b:79:91:9c:5d:dd:f6:61:f9:cc:b8:2c:c4:
61:ac:c1:07:d4:ab:ee:77:6d:15:9a:e8:5e:4d:46:67:b8:58:
8a:92:8b:a4:a8:b1:a2:52:84:2a:ac:3f:0c:38:3d:ff:24:6d:
fc:74:df:e5:f3:1f:5b:e9:d1:e7:b5:35:ac:b0:9d:56:31:59:
d6:fe:13:54:f7:a4:66:ee:05:53:1f:fc:23:ca:37:bd:92:b0:
be:32:ab:bf:0e:c4:88:b4:9c:52:6e:82:66:6d:da:1f:07:8c:
78:25:7a:6d:67:57:0d:e7:1c:f7:75:f8:dd:8d:36:62:c0:6f:
6e:aa:9c:4b:e9:b5:a2:b6:d4:68:4c:ea:e5:35:d3:7c:6b:6c:
ac:71:25:51:d7:93:86:36:7b:b1:d8:d8:02:76:f4:34:1d:2d:
c5:00:18:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:44:29 2026 by rpki-client