Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36B1E21E34AE11F1B5EE28ACCE1D38B0.roa
File: 36B1E21E34AE11F1B5EE28ACCE1D38B0.roa (raw, json)
Hash identifier: pdYIkxkxSsRBR6Phv7/+J+NWS4uCzkIyKDC7SpCifqo=
Subject key identifier: DA:09:AA:2D:DA:F8:20:B2:08:36:D1:5B:5D:41:69:DB:23:77:06:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C457
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36B1E21E34AE11F1B5EE28ACCE1D38B0.roa
Signing time: Fri 10 Apr 2026 07:23:47 +0000
ROA not before: Fri 10 Apr 2026 07:23:43 +0000
ROA not after: Sun 10 May 2026 07:23:43 +0000
asID: 139646
IP address blocks: 154.204.0.0/24 maxlen: 24
154.208.12.0/22 maxlen: 24
154.208.16.0/20 maxlen: 24
154.212.128.0/24 maxlen: 24
154.215.0.0/24 maxlen: 24
154.218.0.0/24 maxlen: 24
154.221.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115799 (0x1c457)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 07:23:43 2026 GMT
Not After : May 10 07:23:43 2026 GMT
Subject: CN=69d8a583-2cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c1:98:2e:e4:f8:26:1e:9f:23:ed:af:63:90:
00:45:87:96:dd:24:4c:3f:03:dc:c6:d0:43:8b:e8:
3a:9e:da:c3:0a:31:ca:96:a9:eb:a7:59:a1:29:af:
0e:8b:15:a0:07:08:41:1a:e3:2e:83:70:93:5b:f3:
7a:99:6d:37:75:b6:9d:2a:7e:a7:f9:3c:86:1a:ad:
f0:99:5c:90:ea:dd:bb:de:24:46:9e:9e:5e:45:28:
53:c3:33:f0:20:9f:3c:c1:ab:ac:c4:39:f8:49:44:
e1:93:08:1e:0d:ba:54:e2:4e:09:09:3b:c3:9c:cc:
1e:64:d6:bd:b3:0e:b3:8a:d0:5b:ed:34:10:8c:3d:
a6:e7:69:09:72:bb:c1:0e:40:61:f4:53:d7:e1:42:
be:eb:74:72:66:da:d9:be:02:1a:ec:f4:3b:91:a8:
04:51:4d:a6:67:16:66:e1:e3:ec:4a:21:e8:34:ef:
b2:8e:20:00:5d:f1:d4:63:8a:ea:d2:b9:8e:9a:59:
c2:60:6e:5c:5d:b3:44:75:7b:a2:26:63:f6:91:29:
9d:a4:41:3c:3a:86:29:58:02:88:ed:a7:31:cb:ce:
c3:cb:ed:d5:24:7a:f8:d6:5d:8f:ab:b8:37:d8:a6:
98:f1:b3:6c:5c:94:56:05:a8:80:52:ae:95:b1:e1:
b2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:09:AA:2D:DA:F8:20:B2:08:36:D1:5B:5D:41:69:DB:23:77:06:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36B1E21E34AE11F1B5EE28ACCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.0.0/24
154.208.12.0-154.208.31.255
154.212.128.0/24
154.215.0.0/24
154.218.0.0/24
154.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:fa:eb:ea:4a:b1:2e:4a:d1:e0:95:67:e9:70:4d:4d:39:40:
e8:bd:45:04:d8:1b:c3:51:9e:52:73:2c:bc:dc:61:12:c9:01:
5d:ba:9b:fb:d4:93:8a:99:bf:88:87:dc:70:df:74:c2:2c:32:
95:c6:fd:d9:d2:7d:89:8c:db:93:85:a5:c0:c6:6d:82:fc:1c:
4e:5b:79:ed:cf:d3:ef:12:51:1f:d0:21:3f:90:45:af:f1:a2:
43:98:aa:6c:29:a5:b5:42:ed:6d:74:4f:8d:c7:da:7b:c3:c1:
84:6f:69:3e:91:35:dc:a9:6e:34:fa:0c:20:5a:9b:a4:8a:0d:
6f:bc:db:4b:d5:e0:f5:67:a8:95:92:23:25:21:6c:05:d8:63:
29:a8:af:29:38:f3:15:06:10:1a:cc:64:18:06:3e:73:76:e0:
d1:50:c4:cb:06:b1:79:d3:bd:0a:ec:f8:ab:dd:54:97:6a:09:
4f:e0:f0:57:01:40:f0:d5:5d:a1:b0:14:10:0e:b7:4b:0f:57:
2f:c8:4f:21:fb:b0:74:16:e3:c1:f6:61:e3:c4:5b:99:8e:af:
6f:8f:40:22:29:b3:f1:b0:da:b1:92:87:16:89:d1:b3:6d:65:
2d:1a:dc:aa:a5:f2:c5:7b:99:cd:e0:8b:a7:7b:8a:85:a5:35:
6b:51:1c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:25:39 2026 by rpki-client