Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/027F36E2364B11F18AA4E907CF1D38B0.roa
File: 027F36E2364B11F18AA4E907CF1D38B0.roa (raw, json)
Hash identifier: FIOb9M9xwc9V4VS6bMev+Wg62bpb9L78YkoGzce+3Mg=
Subject key identifier: B5:99:02:5C:F3:01:30:A0:33:47:AC:7F:2E:90:8A:50:D9:C6:D1:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C4B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/027F36E2364B11F18AA4E907CF1D38B0.roa
Signing time: Sun 12 Apr 2026 08:38:42 +0000
ROA not before: Sun 12 Apr 2026 08:38:37 +0000
ROA not after: Thu 12 Apr 2029 08:38:37 +0000
asID: 17561
IP address blocks: 154.208.193.0/24 maxlen: 24
154.208.194.0/24 maxlen: 24
154.208.195.0/24 maxlen: 24
154.208.196.0/24 maxlen: 24
154.208.197.0/24 maxlen: 24
154.208.198.0/24 maxlen: 24
154.208.199.0/24 maxlen: 24
154.208.200.0/24 maxlen: 24
154.208.201.0/24 maxlen: 24
154.208.202.0/24 maxlen: 24
154.208.203.0/24 maxlen: 24
154.208.204.0/24 maxlen: 24
154.208.205.0/24 maxlen: 24
154.208.206.0/24 maxlen: 24
154.208.207.0/24 maxlen: 24
154.208.208.0/24 maxlen: 24
154.208.209.0/24 maxlen: 24
154.208.210.0/24 maxlen: 24
154.208.211.0/24 maxlen: 24
154.208.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115888 (0x1c4b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 08:38:37 2026 GMT
Not After : Apr 12 08:38:37 2029 GMT
Subject: CN=69db5a12-962b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:e0:95:fd:09:7e:f6:6b:90:f9:c7:56:89:
b3:08:4c:5d:35:95:b7:1b:96:ca:c4:0d:01:a2:79:
57:70:e9:c3:7e:cd:1a:6e:c8:73:27:a1:0a:36:79:
91:24:dd:16:3c:dc:35:e2:f8:08:79:db:c3:05:74:
e9:8a:df:3f:61:f9:8c:8d:7e:2f:af:19:9b:8e:1f:
a2:be:92:0b:31:68:fe:92:53:35:0e:ec:b0:cb:5f:
01:ae:8e:6a:c7:05:d2:39:47:2b:b5:9a:ea:86:58:
c6:9d:74:84:f6:bf:be:69:f7:60:1e:1a:9d:f8:3b:
7b:99:ea:6c:4e:71:92:b4:bb:5f:53:e2:f3:42:a7:
da:09:f9:38:9f:68:f5:91:c0:02:65:f0:2f:6e:9a:
d7:83:db:4b:ee:41:5a:96:69:67:36:96:77:47:bf:
72:e0:a3:54:02:05:ba:5f:17:90:43:95:8d:e4:0d:
46:aa:c1:df:85:43:b3:89:6d:48:9e:7b:2a:cf:02:
f7:74:70:f5:bd:84:49:8b:60:67:e3:e1:c2:6c:62:
b3:0f:d8:9d:73:35:65:bc:7a:89:b0:5c:ce:88:38:
16:21:58:65:b8:4f:bd:a5:50:10:10:d7:bb:d8:60:
f3:29:a5:56:98:71:c1:0b:15:de:f9:b6:9b:8e:7d:
6e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:99:02:5C:F3:01:30:A0:33:47:AC:7F:2E:90:8A:50:D9:C6:D1:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/027F36E2364B11F18AA4E907CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.193.0-154.208.212.255
Signature Algorithm: sha256WithRSAEncryption
69:21:c9:76:73:20:f4:fb:ba:8a:ae:3d:e6:8c:a3:72:90:f9:
7b:68:0c:3a:c4:c9:f6:cd:47:ef:d8:64:95:56:31:07:1a:03:
18:f6:cb:dc:16:3a:ce:12:d2:a8:2e:24:89:6f:0b:30:20:30:
54:f2:96:42:d8:4c:d1:76:be:bb:12:86:3a:ae:78:2a:38:3f:
67:87:e3:d0:24:b9:b8:0b:7c:02:6d:05:5e:57:e7:e7:eb:50:
59:7e:41:11:88:cb:72:1e:d9:81:13:82:85:a4:1f:dd:a4:25:
41:1b:13:c6:22:b7:27:fd:bd:9a:7c:b0:75:ea:f7:9a:50:c2:
e8:21:ef:7f:24:51:d1:fb:99:6e:5f:8c:50:9a:d9:00:1d:2e:
6c:a1:27:6a:cb:e6:8f:bf:39:55:62:35:af:03:76:52:b8:1e:
bc:01:c5:01:2b:f7:ea:a2:e6:a2:83:5c:3b:79:94:ef:f8:72:
17:09:eb:9a:87:ec:84:47:c8:12:5b:49:31:9a:2d:93:c9:1a:
99:a1:4e:53:7b:a1:13:c3:7a:a8:d8:6a:8d:8e:26:6b:a2:3b:
e6:6c:df:a4:16:d0:a5:55:6a:fe:2b:e4:68:ed:7a:c0:12:ae:
1d:1d:f0:7d:40:7f:45:88:62:c2:3a:fe:ce:f5:79:4b:58:8a:
53:97:0b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:20:20 2026 by rpki-client