Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DFD9550340511F189C702C2CE1D38B0.roa
File: 1DFD9550340511F189C702C2CE1D38B0.roa (raw, json)
Hash identifier: wdGeyainc3q8vRC8pliap7qeLKqYnizkxDWjYEKgxuU=
Subject key identifier: 3D:57:97:2F:24:04:96:49:77:A8:E6:7F:40:2B:AA:EC:81:3A:54:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C3DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DFD9550340511F189C702C2CE1D38B0.roa
Signing time: Thu 09 Apr 2026 11:13:21 +0000
ROA not before: Thu 09 Apr 2026 11:13:16 +0000
ROA not after: Tue 07 Jul 2026 11:13:16 +0000
asID: 150750
IP address blocks: 154.208.50.0/24 maxlen: 24
154.208.51.0/24 maxlen: 24
154.208.53.0/24 maxlen: 24
154.208.54.0/24 maxlen: 24
154.208.55.0/24 maxlen: 24
154.208.57.0/24 maxlen: 24
154.208.58.0/24 maxlen: 24
154.208.59.0/24 maxlen: 24
154.208.60.0/24 maxlen: 24
154.208.61.0/24 maxlen: 24
154.208.62.0/24 maxlen: 24
154.208.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 15:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115678 (0x1c3de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 11:13:16 2026 GMT
Not After : Jul 7 11:13:16 2026 GMT
Subject: CN=69d789d1-8625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9f:8c:29:1c:ff:15:96:d4:41:96:37:c4:b0:
a4:d5:f9:f1:fd:a8:79:fb:71:50:80:42:3c:db:86:
a3:b9:f0:58:63:2f:54:72:46:29:93:b1:93:2b:bd:
72:56:4d:28:78:77:f9:02:c6:28:7f:73:02:20:eb:
3d:e7:3b:02:81:12:6c:3b:2e:ec:ed:be:50:a6:a3:
98:cd:68:eb:34:85:52:76:04:6a:2a:86:25:4b:bc:
5d:ac:9e:d9:b5:f3:cc:32:c8:c3:ad:89:90:66:ba:
c2:88:40:e6:3a:51:fd:ae:6b:c2:a3:5c:b4:15:76:
22:76:f0:c1:69:39:9e:db:49:97:3c:a8:7c:22:f1:
89:22:96:0a:d0:98:50:53:24:97:54:55:9c:38:e1:
2b:2c:0f:ee:68:64:d6:06:f4:1b:e2:ba:6e:fd:b4:
2b:12:a3:0c:6e:50:8c:c6:80:ed:b1:32:bf:2f:e3:
0f:54:ac:fe:e1:3a:f9:a9:a3:89:05:a4:43:c5:98:
a0:ef:bf:41:1d:43:5d:49:13:d5:a1:a1:83:77:58:
e8:6f:c1:c7:ac:b6:a1:2a:29:39:25:89:2f:30:22:
9b:61:ee:6f:07:a3:c5:fc:7a:72:63:63:3b:64:4c:
2b:ba:2b:fa:12:ea:69:18:24:e5:aa:da:c2:09:ce:
1e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:57:97:2F:24:04:96:49:77:A8:E6:7F:40:2B:AA:EC:81:3A:54:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DFD9550340511F189C702C2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.50.0/23
154.208.53.0-154.208.55.255
154.208.57.0-154.208.63.255
Signature Algorithm: sha256WithRSAEncryption
51:7d:08:25:24:d3:09:b5:3b:b9:53:e6:c0:6f:59:de:c3:0d:
9d:ca:9f:48:80:53:1b:32:a4:ba:97:46:db:2b:25:d8:dd:ab:
fe:53:5b:43:0a:a1:78:a5:d4:47:4d:77:dd:ec:03:ab:0f:73:
9a:eb:63:32:33:d4:5e:1e:05:f8:0d:02:2f:f3:9e:e0:22:5d:
53:4e:9d:11:df:09:1b:ba:8d:82:6a:10:eb:bf:a2:cd:f7:63:
82:6e:e7:9b:be:6b:be:46:74:fd:88:58:63:c4:5c:64:46:41:
f3:bb:ec:f5:35:b5:20:f8:7c:2b:06:1d:40:41:42:e9:6c:a6:
a2:2b:ed:04:34:9a:9a:11:bf:6c:7a:69:1f:b8:87:b9:f4:e3:
ba:c0:15:88:f0:16:c3:f4:87:04:08:e1:96:09:dc:22:f1:bf:
33:8f:27:ec:67:1c:00:66:27:05:ea:c6:5d:b2:ac:de:3c:5c:
c7:cd:59:31:6f:d6:ed:24:f1:dc:0b:0a:df:aa:1d:12:27:4a:
23:cc:99:ec:f3:ad:35:f6:32:2b:50:7a:16:5c:8c:fa:9b:2e:
33:e8:25:97:f2:61:8b:58:0c:fb:b0:62:92:b2:ef:77:50:af:
5d:e6:7e:fe:a2:69:4d:ea:ce:70:b7:71:d4:56:5c:60:00:3f:
87:02:45:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:42:46 2026 by rpki-client