Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B15142C2E6F11F1989B5FC8DAE4EC9C.roa
File: 0B15142C2E6F11F1989B5FC8DAE4EC9C.roa (raw, json)
Hash identifier: iD6huNLT6bswkOLKa03teEgtcxrkSnCm1jg2o+6nL84=
Subject key identifier: 39:92:45:1F:6E:A3:DA:F0:ED:56:88:C9:2B:94:A3:A4:B5:DC:0E:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C20F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B15142C2E6F11F1989B5FC8DAE4EC9C.roa
Signing time: Thu 02 Apr 2026 08:36:29 +0000
ROA not before: Thu 02 Apr 2026 08:36:24 +0000
ROA not after: Wed 06 May 2026 08:36:24 +0000
asID: 44559
IP address blocks: 154.209.193.0/24 maxlen: 24
154.209.194.0/24 maxlen: 24
154.209.197.0/24 maxlen: 24
154.209.198.0/24 maxlen: 24
154.209.199.0/24 maxlen: 24
154.209.200.0/24 maxlen: 24
154.209.201.0/24 maxlen: 24
154.209.202.0/24 maxlen: 24
154.209.203.0/24 maxlen: 24
154.209.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115215 (0x1c20f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 08:36:24 2026 GMT
Not After : May 6 08:36:24 2026 GMT
Subject: CN=69ce2a8d-e419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:46:b3:e0:d3:1b:a6:16:d0:0a:49:c2:50:35:
d2:fa:75:05:71:4e:46:f8:95:9b:f1:a8:54:99:b1:
a3:fe:9a:3d:0d:4f:00:57:66:bd:35:80:c9:d7:82:
22:31:c3:11:60:aa:82:cd:80:71:32:97:ec:7a:74:
0f:52:f5:c4:25:a6:19:c8:66:3a:53:fa:1d:a0:f2:
7c:40:05:dc:c1:ec:e2:c7:5a:5c:86:bf:3f:9a:d3:
77:39:09:cc:51:ed:b7:70:e9:df:13:e4:e9:ca:e4:
e3:cf:fa:c5:4f:e3:c4:3c:24:b7:46:05:c6:06:0e:
52:10:a4:91:da:02:cd:8e:80:ee:8b:84:5d:e7:ee:
a2:e9:85:1b:46:e3:56:5e:bb:91:49:b1:39:2e:cf:
e6:e5:f7:d9:d2:a0:11:b0:4a:98:98:a5:75:23:73:
06:af:bf:6a:ee:83:c6:60:43:02:66:90:bc:44:f6:
47:a0:16:b7:2d:79:71:bc:e8:f9:d0:f4:13:fb:fb:
be:78:62:d0:0c:70:70:cd:bb:c1:69:f5:c6:7e:8a:
d1:ef:29:5d:ed:dd:33:7e:db:04:6b:dc:b9:6b:e0:
8f:4b:6c:24:84:da:94:44:e1:e1:2f:ef:62:d3:49:
d4:d1:d2:c3:0b:63:bf:3f:e1:78:46:23:eb:e8:54:
48:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:92:45:1F:6E:A3:DA:F0:ED:56:88:C9:2B:94:A3:A4:B5:DC:0E:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B15142C2E6F11F1989B5FC8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.193.0-154.209.194.255
154.209.197.0-154.209.204.255
Signature Algorithm: sha256WithRSAEncryption
99:1b:9d:17:45:93:7b:f3:d7:4b:e9:9f:2d:5a:a0:a4:b0:d8:
41:2e:2b:59:b9:68:20:68:fc:07:dc:67:02:4a:cf:f3:85:0f:
56:4e:bc:1e:27:de:3b:31:24:10:73:53:f8:82:f6:6e:71:5f:
21:07:91:dc:51:58:1b:53:9d:60:97:47:81:54:2b:53:db:29:
1c:f8:ea:a1:de:96:52:d9:ca:3b:7d:05:9a:86:63:bb:78:95:
66:55:c1:31:32:13:95:49:6b:68:d4:6f:4b:03:03:98:c7:4e:
ba:80:9a:0d:d1:ae:14:1b:80:f6:c1:9a:ae:5c:de:53:7d:d6:
3e:d5:0b:5c:e9:cd:ac:46:b7:26:09:40:e3:33:9e:df:6e:fa:
f2:44:fb:ec:87:ad:33:64:cc:65:0f:f5:b7:54:67:aa:c3:f5:
31:15:11:89:77:78:98:3b:bf:6d:33:f3:eb:23:9c:88:2f:52:
cf:60:19:af:a7:c8:56:d1:bb:b2:b2:64:ed:5f:3d:fd:3e:ce:
03:39:cd:7e:68:db:09:eb:80:01:fc:a6:a7:c6:9e:44:d1:14:
68:88:9a:a7:30:7f:0c:7f:f2:c6:3d:e4:6c:f0:12:63:20:66:
04:39:65:7b:36:89:9b:b3:1c:af:26:0a:cd:3b:85:33:59:10:
82:51:3d:ec
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:40:44 2026 by rpki-client