Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1255580E396F11F183FD00BCCE1D38B0.roa
File: 1255580E396F11F183FD00BCCE1D38B0.roa (raw, json)
Hash identifier: Awc2PzQ6BOvzNQOxACY6G86W/VASf6E39evtYXhsZH8=
Subject key identifier: 91:CA:D0:86:58:CB:94:7A:FA:AC:D0:FC:38:EE:AC:93:63:77:FA:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C581
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1255580E396F11F183FD00BCCE1D38B0.roa
Signing time: Thu 16 Apr 2026 08:34:24 +0000
ROA not before: Thu 16 Apr 2026 08:34:19 +0000
ROA not after: Thu 30 Apr 2026 08:34:19 +0000
asID: 9304
IP address blocks: 154.193.2.0/24 maxlen: 24
154.193.35.0/24 maxlen: 24
154.194.195.0/24 maxlen: 24
154.196.134.0/24 maxlen: 24
154.196.160.0/24 maxlen: 24
154.196.179.0/24 maxlen: 24
154.196.180.0/24 maxlen: 24
154.199.4.0/24 maxlen: 24
154.200.1.0/24 maxlen: 24
154.200.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116097 (0x1c581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 08:34:19 2026 GMT
Not After : Apr 30 08:34:19 2026 GMT
Subject: CN=69e09f10-f281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:a6:1c:1d:70:12:33:3c:35:c3:cd:ef:5e:
27:65:86:7f:fd:9f:15:bc:97:d6:6a:49:4b:c7:92:
e7:7f:8b:47:d5:b2:43:2b:32:de:b8:7d:1e:74:6e:
9f:a9:4d:27:93:7f:9a:c2:f7:2d:45:d5:2b:e7:5c:
64:c6:9c:47:45:60:60:34:2b:68:c5:66:cd:2f:0c:
83:17:69:7e:68:67:3c:70:be:2f:93:0d:94:4f:d3:
a9:ef:ce:11:09:5c:db:5b:f1:d3:58:fa:b9:02:0d:
5e:8a:73:63:19:f8:b0:a1:a7:89:3b:ed:d7:91:b3:
5d:2e:e5:14:86:e0:d4:40:b5:6f:40:db:e0:93:7e:
47:89:12:cf:d7:d3:d6:ef:f3:d2:cb:20:94:4b:db:
0d:b0:68:f0:0f:c9:fd:b6:76:8d:34:5d:e0:7e:09:
54:1d:c7:6b:97:f4:ca:64:d9:8b:25:3d:10:22:4a:
29:77:c9:53:a6:e0:99:7b:da:cd:52:27:70:df:8e:
e0:f8:78:a7:19:e5:d2:2a:28:5e:4b:3b:75:12:7a:
8f:d4:c7:8d:4c:9e:3c:2d:29:de:35:e4:01:4b:e5:
52:85:03:40:96:dd:e4:bf:18:0e:95:ba:20:3a:61:
d5:f7:e8:2a:6b:e3:10:9e:4e:e2:cd:d3:16:45:8b:
70:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CA:D0:86:58:CB:94:7A:FA:AC:D0:FC:38:EE:AC:93:63:77:FA:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1255580E396F11F183FD00BCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.2.0/24
154.193.35.0/24
154.194.195.0/24
154.196.134.0/24
154.196.160.0/24
154.196.179.0-154.196.180.255
154.199.4.0/24
154.200.1.0/24
154.200.26.0/24
Signature Algorithm: sha256WithRSAEncryption
65:46:2e:84:2c:e7:f6:f8:79:7d:55:62:56:8d:7c:c4:b4:1b:
bc:42:30:c4:db:ca:d1:3b:cd:09:ad:a2:f3:4f:b8:00:43:a4:
4c:e0:71:6f:a6:65:8b:d1:30:79:c4:20:fc:ac:c1:b6:95:53:
98:d5:72:9a:cb:fd:76:13:7f:e8:c1:02:df:ec:3d:70:9f:1d:
9a:57:dd:f4:bf:a3:f7:92:da:f9:86:fe:c0:4e:00:e5:28:b7:
b6:1f:5e:ec:ca:80:61:92:18:c7:0d:64:1d:0e:e9:73:37:74:
71:7a:d2:e3:03:70:ed:3d:fe:c1:c0:c6:14:28:2a:83:f3:ec:
2b:f6:59:e5:80:53:6d:da:fd:8a:1d:7d:42:27:f5:44:30:2a:
06:6f:d5:e9:0e:ee:d8:f5:41:f5:d3:38:09:c5:64:f3:ec:ac:
68:8e:48:8b:3d:b3:8c:a2:af:0e:37:b2:9b:79:33:3d:1b:9b:
4e:87:ce:f3:ac:e0:99:64:b3:2a:c1:e2:d8:ca:5a:b2:51:67:
82:c7:b8:93:91:bb:58:e8:e2:6c:c1:6d:76:9d:b1:af:ee:4b:
2c:63:0d:f9:73:95:d6:29:26:7f:f5:7f:cd:2e:44:da:6c:ae:
20:b2:24:60:1d:78:4c:db:84:74:4b:0e:b2:72:7b:4c:0b:78:
59:78:6a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:28:33 2026 by rpki-client