Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C4CB99A5B9D11F18944E3F8CE1D38B0.roa
File: 3C4CB99A5B9D11F18944E3F8CE1D38B0.roa (raw, json)
Hash identifier: fhsqpwqXuOaAFzclaWg1o4xrzn/jRQpNdAmnHwLnCko=
Subject key identifier: DA:36:C4:04:C5:D1:B6:C9:EA:DC:4E:06:4A:58:21:EB:A5:1E:00:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D079
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C4CB99A5B9D11F18944E3F8CE1D38B0.roa
Signing time: Fri 29 May 2026 20:30:31 +0000
ROA not before: Fri 29 May 2026 20:30:26 +0000
ROA not after: Wed 01 Jul 2026 20:30:26 +0000
asID: 62240
IP address blocks: 154.194.72.0/24 maxlen: 24
154.194.78.0/24 maxlen: 24
154.194.94.0/24 maxlen: 24
154.194.95.0/24 maxlen: 24
154.194.96.0/24 maxlen: 24
154.194.97.0/24 maxlen: 24
154.196.16.0/24 maxlen: 24
154.196.17.0/24 maxlen: 24
154.196.19.0/24 maxlen: 24
154.196.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118905 (0x1d079)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 20:30:26 2026 GMT
Not After : Jul 1 20:30:26 2026 GMT
Subject: CN=6a19f767-79ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6d:5f:a8:9f:ff:85:36:49:f7:d8:17:f2:7b:
50:61:db:78:18:53:c9:45:f7:3b:67:67:b4:36:2b:
4c:85:1f:de:b5:b0:57:bc:3f:72:1e:52:8f:66:a7:
5a:08:38:81:e3:ff:23:81:39:61:83:17:85:56:f1:
ed:33:0d:34:48:ab:a8:6d:b3:c7:21:33:79:c6:78:
ae:6f:0d:ad:b2:4d:44:13:e9:47:57:e3:27:e9:28:
75:60:8e:ad:4c:14:99:ad:87:cf:70:4e:6e:bc:b0:
9d:24:6f:b3:9f:0d:1c:7b:5c:d2:88:74:51:24:aa:
61:8e:db:bb:54:e6:4d:01:ca:b8:bd:34:c5:a1:ce:
c4:08:7a:04:f3:90:1b:16:68:63:86:ea:f4:13:5d:
b7:3f:d4:2b:76:12:6a:7c:ca:32:5f:83:85:a5:87:
7c:94:09:04:ef:db:fa:04:dc:c8:8c:56:dc:56:bb:
3d:cc:30:f6:52:7b:51:ae:ed:97:e4:c6:ae:6a:9e:
56:8b:92:80:00:e8:76:5b:30:73:11:56:d8:59:82:
87:71:55:25:a7:db:5a:6c:40:26:2f:a7:42:db:e4:
9f:23:a0:9e:74:37:06:37:4f:f1:a0:20:7c:84:89:
99:cc:33:58:19:0e:ef:dc:d1:22:56:fd:8b:14:89:
11:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:36:C4:04:C5:D1:B6:C9:EA:DC:4E:06:4A:58:21:EB:A5:1E:00:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C4CB99A5B9D11F18944E3F8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.72.0/24
154.194.78.0/24
154.194.94.0-154.194.97.255
154.196.16.0/23
154.196.19.0/24
154.196.47.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:10:6c:4a:bb:b5:41:ae:69:0a:62:7f:9a:70:e1:7b:d4:6a:
3f:92:0e:0a:cc:4f:02:d6:24:8c:4b:1e:6a:8b:40:9b:02:66:
f0:f5:4a:45:67:ec:f3:0f:7a:c1:ac:51:13:0b:7a:69:56:0b:
98:75:c9:54:9d:70:a0:53:cb:a3:fd:e0:58:78:18:a1:0b:d1:
93:f5:59:fe:2b:cc:95:ce:c1:d9:86:a8:64:d7:51:37:a4:b3:
9a:91:aa:ab:14:bd:54:ee:b0:3e:1d:cd:31:5b:3b:ef:d8:37:
ed:39:a9:0d:36:91:51:50:13:02:8b:08:f2:1e:8d:6e:aa:5d:
90:8f:b4:21:b4:eb:e4:35:f9:db:7b:7a:83:42:44:3e:ab:59:
29:9e:c0:54:6c:11:76:a9:0c:ba:5c:84:17:60:bd:8a:68:3e:
96:4c:ce:3f:1e:81:7f:b0:e3:8f:47:2c:81:6e:06:ad:f6:d4:
45:67:89:8e:32:ae:96:07:74:f9:ba:6a:e7:63:3a:63:53:e4:
b6:4f:82:b6:84:95:74:58:3e:5c:8e:4d:55:5c:57:e1:48:a2:
7d:7d:82:fc:00:d5:87:84:91:f9:82:ad:4d:f9:6e:24:79:9f:
2e:cc:03:a0:26:ae:a8:e3:bd:73:46:e6:bb:1d:06:52:ab:46:
a8:56:55:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:55:33 2026 by rpki-client