Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B0441962A8611F1818AF5BEDAE4EC9C.roa
File: 2B0441962A8611F1818AF5BEDAE4EC9C.roa (raw, json)
Hash identifier: VupRYtW+xp3iU6X76MAg2Ya3CSmcZj0G+sK+VTcce6w=
Subject key identifier: E0:33:F5:13:88:40:32:F6:5F:30:EA:42:D0:AA:73:49:72:89:11:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C145
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B0441962A8611F1818AF5BEDAE4EC9C.roa
Signing time: Sat 28 Mar 2026 09:11:56 +0000
ROA not before: Sat 28 Mar 2026 09:11:51 +0000
ROA not after: Sat 02 May 2026 09:11:51 +0000
asID: 44559
IP address blocks: 154.203.224.0/24 maxlen: 24
154.203.230.0/24 maxlen: 24
154.203.231.0/24 maxlen: 24
154.205.234.0/24 maxlen: 24
154.205.235.0/24 maxlen: 24
154.205.236.0/24 maxlen: 24
154.205.237.0/24 maxlen: 24
154.205.238.0/24 maxlen: 24
154.205.239.0/24 maxlen: 24
154.205.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115013 (0x1c145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 28 09:11:51 2026 GMT
Not After : May 2 09:11:51 2026 GMT
Subject: CN=69c79b5c-c88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ca:5c:77:49:39:a5:81:64:e9:07:9f:3a:24:
d9:3f:00:33:2c:53:d1:df:b7:4b:b3:7d:ca:f5:b0:
d8:fa:0a:9a:d0:d5:08:f9:f3:5e:97:d0:60:94:18:
67:71:a2:ce:1d:ea:b5:32:c5:b0:70:13:af:f0:09:
b2:71:0e:41:e1:e1:80:01:27:29:fc:8b:17:c2:ed:
30:ca:e0:4e:0f:16:38:c6:ff:5c:f6:0e:7a:86:ba:
43:5a:b0:68:29:a3:84:83:33:97:ae:03:5e:5f:b6:
a6:11:ab:7d:73:ca:ed:ae:96:08:f8:21:81:05:9e:
94:ee:92:2a:4e:ab:94:7e:31:1f:b4:3f:65:3a:1d:
f5:15:8c:a2:e4:57:cb:6e:a5:1d:24:3a:2a:b0:45:
a8:0b:95:f1:1c:b7:f7:97:f8:8e:3a:b7:0d:04:69:
88:94:6c:71:cb:79:b8:63:6a:a4:18:24:17:48:ea:
16:30:7f:70:c6:df:c9:84:04:93:9d:40:6c:f2:54:
da:0b:88:06:32:5a:2d:41:06:0d:0c:72:fa:5e:9b:
67:2b:cb:be:d8:84:9f:e6:2b:36:93:1f:40:37:45:
2b:00:66:bc:4a:35:e9:c7:c1:46:39:e0:a8:09:c3:
e9:a6:4f:00:25:1f:82:3e:4b:16:dd:f4:f6:7c:4a:
2a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:33:F5:13:88:40:32:F6:5F:30:EA:42:D0:AA:73:49:72:89:11:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B0441962A8611F1818AF5BEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.224.0/24
154.203.230.0/23
154.205.234.0-154.205.240.255
Signature Algorithm: sha256WithRSAEncryption
68:2f:85:6c:b2:45:e6:44:71:9f:31:43:8b:fd:7d:bc:e2:d9:
16:f3:cc:77:ef:47:cf:00:7e:6e:0a:9d:4f:f1:12:20:69:31:
5a:88:d0:96:f9:67:f3:52:b3:00:21:99:81:70:53:bc:ed:b9:
c0:7f:50:50:b2:50:3f:3f:88:48:40:1c:26:69:0f:b2:73:ba:
18:78:43:c3:12:8e:29:e3:a5:fb:c7:44:cb:39:34:53:c6:0c:
1b:5d:25:91:5e:b8:9b:cf:77:df:8e:fc:64:b2:84:f2:8b:82:
0e:24:0d:64:c5:39:85:fd:76:99:79:d1:40:cf:70:30:e0:32:
67:17:63:5f:a7:2a:34:73:e2:21:0d:36:cb:05:23:06:be:68:
cc:0b:7f:5c:77:b5:b7:a9:16:e7:a0:c9:71:fe:9d:e5:3f:b5:
18:55:bb:6d:4e:10:4b:be:35:6a:6d:c1:78:42:e2:f1:d6:17:
41:3f:c9:de:b4:cc:12:24:7f:cf:d4:38:11:f4:f6:e8:d7:15:
7a:54:c5:16:33:a7:ae:a9:2e:8a:2e:d0:33:10:86:21:95:e6:
ab:a4:08:53:45:65:0d:ae:b6:3b:71:3d:23:95:a0:ed:a3:cd:
7e:a7:cb:d7:4e:2a:44:3a:17:90:8e:c2:fd:7f:a8:2d:bf:84:
eb:ff:b8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:26:27 2026 by rpki-client