Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11BBFB94364C11F1B1B4110ECF1D38B0.roa
File: 11BBFB94364C11F1B1B4110ECF1D38B0.roa (raw, json)
Hash identifier: Dn3qYXq/58gR8XEcxUQ4qj/ud215FTfJWFYksASR+h0=
Subject key identifier: 60:E1:A5:21:39:FB:13:87:D6:4F:D7:29:FD:61:13:88:9B:6A:82:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C4B2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11BBFB94364C11F1B1B4110ECF1D38B0.roa
Signing time: Sun 12 Apr 2026 08:46:17 +0000
ROA not before: Sun 12 Apr 2026 08:46:12 +0000
ROA not after: Thu 12 Apr 2029 08:46:12 +0000
asID: 17561
IP address blocks: 154.208.213.0/24 maxlen: 24
154.208.214.0/24 maxlen: 24
154.208.215.0/24 maxlen: 24
154.208.216.0/24 maxlen: 24
154.208.217.0/24 maxlen: 24
154.208.218.0/24 maxlen: 24
154.208.219.0/24 maxlen: 24
154.208.220.0/24 maxlen: 24
154.208.221.0/24 maxlen: 24
154.208.222.0/24 maxlen: 24
154.208.223.0/24 maxlen: 24
154.208.224.0/24 maxlen: 24
154.208.225.0/24 maxlen: 24
154.208.226.0/24 maxlen: 24
154.208.227.0/24 maxlen: 24
154.208.228.0/24 maxlen: 24
154.208.229.0/24 maxlen: 24
154.208.230.0/24 maxlen: 24
154.208.231.0/24 maxlen: 24
154.208.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 15:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115890 (0x1c4b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 08:46:12 2026 GMT
Not After : Apr 12 08:46:12 2029 GMT
Subject: CN=69db5bd9-ec80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:14:62:ce:61:3a:15:03:3f:73:9a:4f:08:30:
98:28:84:82:64:4d:23:2e:98:5b:fd:fa:c3:13:d9:
45:6b:1b:80:fe:fd:40:94:e0:58:df:5c:da:36:a1:
20:f7:e6:fd:35:b1:07:27:da:bf:e2:01:6a:53:67:
cf:34:5b:30:2c:c4:14:01:5b:f5:49:f3:b4:a1:72:
bf:14:16:ee:71:86:1d:ac:6f:e1:0c:a3:b4:aa:8a:
a8:67:de:5d:eb:56:8c:70:fc:03:43:42:f5:0e:67:
46:71:85:96:ba:4b:85:cd:03:b2:6a:69:c5:26:b5:
be:89:f5:e5:29:21:3a:f1:91:41:83:31:63:04:2c:
ce:84:e4:2c:ea:1d:41:b4:69:83:0a:85:b4:20:65:
fa:23:2b:0d:35:5e:0b:1c:3d:6d:60:8a:51:44:6e:
e2:07:94:6f:31:2d:30:3a:56:ef:d8:84:f4:9c:1a:
bd:88:f8:30:5d:eb:e3:08:e9:ce:58:58:ac:91:12:
85:e2:02:ff:1f:da:69:13:51:60:d2:c9:95:03:13:
96:59:05:60:65:b4:35:d2:2e:f2:cf:38:54:a7:4e:
81:43:3d:7c:22:3b:4c:0c:43:71:3b:21:5c:d7:d5:
ce:87:43:9e:e0:b6:9a:66:f0:c4:13:c8:03:6c:54:
8a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E1:A5:21:39:FB:13:87:D6:4F:D7:29:FD:61:13:88:9B:6A:82:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11BBFB94364C11F1B1B4110ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.213.0-154.208.232.255
Signature Algorithm: sha256WithRSAEncryption
a3:d7:2b:31:9c:1f:b2:87:6c:96:6f:a4:6a:c8:c6:67:fa:84:
87:eb:4b:e9:81:22:d1:31:13:45:95:52:a2:56:ba:81:01:b0:
11:25:4b:dc:91:a8:17:fd:fc:0d:4c:6e:00:66:cd:f3:04:fc:
8a:41:04:78:df:c4:ec:a9:1b:d2:59:b4:30:f6:66:09:c8:5d:
ed:0f:0e:26:5d:12:6c:4a:3d:b2:8e:2c:3a:c4:09:9d:16:71:
fe:ab:25:4e:88:32:5d:cf:7f:90:8d:8d:93:3b:e1:dd:cc:a2:
ad:6c:47:d3:ab:8d:2a:bf:d4:8b:24:49:ce:df:0a:f2:07:1d:
34:4d:94:dd:16:93:a8:56:f0:e5:d4:fc:08:d5:a7:6e:9c:9c:
5d:a6:34:bb:18:ee:44:73:07:e3:47:22:47:4f:81:f9:6c:85:
94:87:04:c1:6d:e1:21:fe:a2:39:9d:0a:c4:fd:ae:eb:ca:82:
d6:8c:54:27:aa:a7:dd:08:54:5d:50:4b:b0:5e:ae:f3:cf:74:
fa:2d:6f:a6:0e:8d:eb:f6:45:45:f3:48:1e:2f:76:0c:0c:fc:
84:73:02:12:9a:2f:c6:f4:51:49:d8:6a:c3:e5:a4:3d:a4:b4:
86:ec:7d:21:59:e9:02:b5:d0:55:e7:34:83:52:04:a3:70:0d:
49:df:0e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:52:41 2026 by rpki-client