Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D9278BA325211F18F0409E2DAE4EC9C.roa
File: 1D9278BA325211F18F0409E2DAE4EC9C.roa (raw, json)
Hash identifier: w2Xv0Evn2kq5fAX4ivtYxNHQrJ6915hCtn17jK+jsTk=
Subject key identifier: 0A:9B:4F:92:79:C3:3B:A9:5F:5D:22:E9:35:9C:A1:72:0C:F1:BD:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C369
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D9278BA325211F18F0409E2DAE4EC9C.roa
Signing time: Tue 07 Apr 2026 07:19:29 +0000
ROA not before: Tue 07 Apr 2026 07:19:25 +0000
ROA not after: Sat 07 Apr 2029 07:19:25 +0000
asID: 17561
IP address blocks: 154.208.32.0/24 maxlen: 24
154.208.33.0/24 maxlen: 24
154.208.34.0/24 maxlen: 24
154.208.35.0/24 maxlen: 24
154.208.36.0/24 maxlen: 24
154.208.37.0/24 maxlen: 24
154.208.38.0/24 maxlen: 24
154.208.39.0/24 maxlen: 24
154.208.40.0/24 maxlen: 24
154.208.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115561 (0x1c369)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 7 07:19:25 2026 GMT
Not After : Apr 7 07:19:25 2029 GMT
Subject: CN=69d4b001-00df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5a:3d:c3:58:b0:01:0f:51:22:12:56:b5:1f:
a1:20:5d:41:9b:29:77:91:e6:ad:81:3d:f8:83:95:
74:0b:8c:e3:fc:68:cc:4a:a9:a3:b4:fa:62:0d:d2:
c4:e0:64:87:7c:fa:ac:7c:ac:4c:0c:d7:82:27:e8:
39:48:6a:8b:f8:e0:23:1b:c5:5e:13:80:20:22:4e:
2a:ab:60:e9:a6:d5:89:90:da:71:5d:da:c9:db:d0:
b9:03:8e:a4:82:e4:56:10:29:45:e7:e1:49:b4:0d:
c3:01:67:31:bd:3e:04:28:af:45:17:3f:7c:53:27:
09:1d:2e:ee:ca:31:61:7f:69:71:bf:35:08:32:d0:
92:e0:d6:1f:51:3e:3c:c2:2c:8a:5c:ea:af:a1:f6:
46:5d:9e:f8:eb:1a:a1:99:a1:3f:03:5a:cc:29:cf:
d3:9e:d2:f1:6c:38:09:5e:1b:63:81:0b:13:18:bd:
e2:eb:e8:da:f1:54:ab:23:78:0e:1b:2f:ee:4c:b7:
d6:25:c6:82:d2:74:24:07:f2:93:b3:5e:c7:c3:56:
70:fb:36:86:98:46:d8:65:56:fd:43:48:87:32:50:
be:4f:00:71:87:7f:eb:63:ae:34:f8:60:e3:f9:71:
d9:27:61:d4:4e:8a:fa:ef:5d:6c:ca:28:a2:55:e5:
0c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9B:4F:92:79:C3:3B:A9:5F:5D:22:E9:35:9C:A1:72:0C:F1:BD:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D9278BA325211F18F0409E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.32.0-154.208.41.255
Signature Algorithm: sha256WithRSAEncryption
26:23:c5:21:a2:60:7c:50:31:cb:34:9e:ed:a5:1e:a5:8f:40:
fd:35:92:54:a0:1d:06:de:38:83:ea:53:95:b6:13:a0:88:d1:
5d:cf:8f:47:65:3b:86:71:17:7b:9e:d0:19:1d:05:3d:c4:b9:
1f:b0:21:0e:b6:b2:42:a2:1a:be:64:0a:a2:2b:d3:7b:f7:5b:
85:bd:08:33:55:6b:cc:3b:c1:3c:2d:c7:2b:a1:06:07:b1:bb:
4a:a4:7f:5f:c2:c3:da:62:e0:94:bc:3f:66:12:fe:ac:e4:65:
b4:b8:7d:1f:c2:78:a5:d6:4a:d6:57:29:43:18:5f:f2:7b:50:
ec:ab:ed:c7:c5:27:92:be:11:68:08:3a:94:77:fe:2b:10:aa:
65:96:fe:bc:ce:5a:34:2f:fa:25:74:fe:70:b5:c2:98:6a:f9:
80:d0:ef:95:af:93:3e:5f:e9:ea:61:6d:a3:01:b1:d7:d5:b5:
d5:1b:f0:1c:5f:31:4a:dd:09:73:b8:34:8a:f9:76:37:eb:f6:
ac:18:e1:4b:fe:cc:d3:46:3b:b9:41:4c:4f:da:8d:33:7c:82:
04:39:20:42:36:e2:d3:a2:db:56:58:02:04:77:85:91:1c:cb:
a4:d0:86:96:c1:7a:86:a0:eb:57:61:57:17:98:64:9f:74:7e:
73:18:37:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:29:12 2026 by rpki-client