Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/106B74A0341611F1AD9A3AA7CE1D38B0.roa
File: 106B74A0341611F1AD9A3AA7CE1D38B0.roa (raw, json)
Hash identifier: /qkoZspRqylmT16LJokHLfEGtHke62D1CO2u2l7RJbc=
Subject key identifier: B3:FE:CE:61:B3:F1:AB:EC:6D:65:87:4B:25:7A:05:D8:10:B9:B3:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C3FA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/106B74A0341611F1AD9A3AA7CE1D38B0.roa
Signing time: Thu 09 Apr 2026 13:14:40 +0000
ROA not before: Thu 09 Apr 2026 13:14:35 +0000
ROA not after: Sun 19 Apr 2026 13:14:35 +0000
asID: 401783
IP address blocks: 154.200.161.0/24 maxlen: 24
154.200.162.0/24 maxlen: 24
154.200.191.0/24 maxlen: 24
154.211.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 13:14:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115706 (0x1c3fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 13:14:35 2026 GMT
Not After : Apr 19 13:14:35 2026 GMT
Subject: CN=69d7a640-5dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:54:14:94:d9:8e:e6:08:19:93:12:6c:c0:38:
c7:23:69:29:48:a2:4c:5e:07:0a:12:ef:37:4f:34:
6c:e0:f0:23:54:3d:38:12:42:b1:09:09:57:4a:38:
6e:05:e0:86:4e:9d:75:c6:70:4a:55:65:26:36:58:
1d:28:9e:ee:27:49:d9:82:5b:77:49:d1:6a:ce:60:
00:84:c5:4b:54:ae:50:25:54:49:21:84:8c:f9:27:
b7:63:8b:c7:54:0c:10:0a:0b:cb:b0:c6:bb:07:9c:
52:b1:b8:75:d5:fe:96:b8:ca:3c:6e:76:79:0e:61:
a1:22:b9:9e:c9:3f:b4:23:af:fa:53:1f:7f:79:c0:
ca:d6:47:5f:11:57:a6:4e:e7:29:02:78:87:12:c7:
84:91:51:ca:2e:f1:05:ca:ae:d5:4b:5f:37:8b:b0:
d6:fa:08:cb:73:61:76:9c:ba:c5:dc:78:cd:df:aa:
68:90:9f:a0:70:1e:85:5d:af:98:6b:da:e7:77:3a:
27:b6:6b:34:8d:ea:56:f4:12:01:cb:13:08:2f:63:
c2:3a:c0:a0:f2:71:5b:8e:e4:b3:a5:fe:0d:6d:7b:
df:c2:e4:11:af:b1:c1:9d:7d:27:34:39:e6:4b:a6:
69:9c:25:47:b0:d4:59:37:0b:39:72:c0:3c:24:4c:
ac:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FE:CE:61:B3:F1:AB:EC:6D:65:87:4B:25:7A:05:D8:10:B9:B3:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/106B74A0341611F1AD9A3AA7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.161.0-154.200.162.255
154.200.191.0/24
154.211.211.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:11:ac:df:4f:31:d5:cf:62:8d:05:35:db:1b:fd:46:3a:c1:
04:4e:5a:d4:8c:e5:c5:de:db:ca:6e:0f:2e:a8:93:e9:2a:0d:
38:2f:fc:de:58:54:b6:16:3f:e5:b7:7e:c8:02:cb:fb:bc:77:
fd:fb:80:b2:d1:f0:4f:de:8a:53:5a:f4:a1:13:20:8d:3f:b1:
d9:9e:28:9a:dc:ff:c8:15:38:d7:0d:9a:dd:03:61:7e:15:b6:
e6:6f:63:39:11:28:26:5d:75:43:3d:d1:bc:a7:ab:ea:bc:0a:
a6:61:cf:5d:60:44:0b:87:eb:bd:af:fb:40:75:1e:c2:a9:dc:
57:07:22:9e:e7:a3:a4:9e:36:4f:2c:26:e5:f9:91:a3:ed:7f:
e1:c8:1c:20:cb:7b:e3:cf:04:89:52:42:f1:58:96:e9:49:d9:
b4:de:c3:e8:a2:d7:b1:73:3f:62:72:cb:fe:13:a6:69:4e:98:
81:08:2f:ed:b3:55:df:2b:cf:f4:cc:01:ca:68:39:f8:e8:6e:
6c:a7:b6:79:c8:53:d6:c3:c5:7b:90:cd:89:27:fc:83:12:6c:
ee:4d:d6:db:39:e1:b0:ee:6a:8a:98:ab:38:0c:21:2d:98:3b:
02:b8:89:7c:9f:9c:d3:c1:f5:92:73:cc:02:44:f7:49:32:e9:
78:95:5d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:19:27 2026 by rpki-client