Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2149ABB8377511F1A6D0D51ACF1D38B0.roa
File: 2149ABB8377511F1A6D0D51ACF1D38B0.roa (raw, json)
Hash identifier: vhdcm+3SVK66Ay4uv9GYRpdRgqmj35lJRMlsKuDg+4o=
Subject key identifier: BD:23:28:02:68:92:73:29:A1:07:62:C5:46:72:02:FD:74:AB:CD:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C528
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2149ABB8377511F1A6D0D51ACF1D38B0.roa
Signing time: Mon 13 Apr 2026 20:12:44 +0000
ROA not before: Mon 13 Apr 2026 20:12:39 +0000
ROA not after: Tue 19 May 2026 20:12:39 +0000
asID: 11404
IP address blocks: 154.194.236.0/22 maxlen: 24
154.199.96.0/19 maxlen: 24
154.199.128.0/19 maxlen: 24
154.211.192.0/20 maxlen: 24
154.211.224.0/19 maxlen: 24
154.214.16.0/20 maxlen: 24
154.215.16.0/20 maxlen: 24
154.215.32.0/19 maxlen: 24
154.216.16.0/20 maxlen: 24
154.222.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116008 (0x1c528)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 13 20:12:39 2026 GMT
Not After : May 19 20:12:39 2026 GMT
Subject: CN=69dd4e3c-7ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f4:51:7c:31:62:f9:e4:1a:da:1a:ea:cc:ef:
b5:e5:99:2a:03:af:4b:d3:24:ec:f0:81:9d:d8:32:
5c:d7:e2:1c:35:18:05:b8:fa:fb:e5:1f:1d:4c:59:
88:8f:ba:7b:69:57:75:57:31:fe:4d:bb:a3:c3:6b:
1a:25:e8:a6:e1:46:fc:99:25:81:83:cd:ba:bc:94:
03:aa:83:68:4b:b0:e1:a1:07:e0:d4:43:55:11:f6:
d2:97:c8:26:9d:40:82:97:5c:99:27:59:92:5f:cf:
9d:92:2a:89:cf:20:ac:fa:14:74:60:04:0b:8b:2f:
7b:cc:a5:49:a4:df:df:41:49:06:69:37:38:ea:23:
3a:d6:34:5c:c2:1c:94:83:15:51:f2:2d:fa:4a:d8:
1d:99:ab:04:56:81:6f:f5:7f:27:11:0b:ca:e9:14:
6f:dc:ed:d1:fd:55:6e:65:e6:ce:2a:b4:db:d2:44:
28:b3:37:57:de:f3:bf:6e:3b:a1:d8:30:80:3f:1d:
7a:6a:4c:91:fb:58:c9:1f:a6:41:85:e0:4a:9d:4e:
28:72:d6:1e:e0:77:84:34:9b:f7:84:b6:5f:22:93:
8e:d7:e7:23:b4:5a:9a:58:8d:c7:cf:cf:fc:94:25:
94:55:6d:b5:26:0b:e1:95:fb:89:24:bb:94:e3:dd:
0a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:23:28:02:68:92:73:29:A1:07:62:C5:46:72:02:FD:74:AB:CD:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2149ABB8377511F1A6D0D51ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.236.0/22
154.199.96.0-154.199.159.255
154.211.192.0/20
154.211.224.0/19
154.214.16.0/20
154.215.16.0-154.215.63.255
154.216.16.0/20
154.222.160.0/19
Signature Algorithm: sha256WithRSAEncryption
64:6f:87:74:5e:ef:18:d2:5e:97:6d:e3:f9:ac:7a:36:90:e9:
44:9e:30:ec:65:df:47:32:d6:4f:1f:14:06:f4:fe:f7:cd:01:
f1:67:6a:56:b4:25:6a:1d:8d:52:02:9a:44:2c:02:0b:d4:60:
08:d8:e5:19:90:e2:6f:15:c9:0d:c9:5c:d2:93:3f:60:94:cc:
89:e6:eb:6a:e7:8a:9c:86:46:d7:c1:4a:80:21:40:b7:f2:ed:
2a:15:04:a0:39:5f:0c:f7:e8:dd:e1:50:b3:e0:66:98:b7:9f:
5d:a7:2f:c5:7b:83:5f:47:a8:7a:95:7e:ce:a2:de:fa:69:d6:
93:8c:75:88:e7:2f:a9:68:17:b1:ef:8b:13:18:53:45:47:8a:
f2:68:4e:b7:69:cb:06:c4:ac:99:71:ed:95:34:fe:97:21:a7:
80:c9:71:3a:e9:b1:6c:2d:32:93:e3:d9:ab:4d:36:7f:38:39:
cf:1d:ba:ce:ed:ce:bd:c6:31:78:bf:16:44:d1:62:f6:a8:9f:
f1:28:08:78:3f:a7:21:95:22:16:3a:a6:eb:1f:74:78:84:eb:
ab:e4:d6:11:d4:c8:92:5c:ad:2a:93:3c:51:48:0b:b3:d5:89:
01:24:6c:0a:96:b6:1d:9b:0f:8a:9c:e5:ce:d8:b8:b1:67:20:
82:c0:93:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:12:12 2026 by rpki-client