Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42FA3A4633EE11F1B4A9B2B7CE1D38B0.roa
File: 42FA3A4633EE11F1B4A9B2B7CE1D38B0.roa (raw, json)
Hash identifier: XRlRvzst3YeH0SzWHBJWpG++QV3oaWwnFOStoXVrMvE=
Subject key identifier: 88:50:57:CA:C1:03:C0:8E:0F:3F:03:43:66:20:DA:F8:D3:93:F1:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C39B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42FA3A4633EE11F1B4A9B2B7CE1D38B0.roa
Signing time: Thu 09 Apr 2026 08:29:45 +0000
ROA not before: Thu 09 Apr 2026 08:29:40 +0000
ROA not after: Mon 09 Apr 2029 08:29:40 +0000
asID: 17561
IP address blocks: 154.93.212.0/24 maxlen: 24
154.93.213.0/24 maxlen: 24
154.93.214.0/24 maxlen: 24
154.93.215.0/24 maxlen: 24
154.93.216.0/24 maxlen: 24
154.93.217.0/24 maxlen: 24
154.93.218.0/24 maxlen: 24
154.93.219.0/24 maxlen: 24
154.93.220.0/24 maxlen: 24
154.93.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115611 (0x1c39b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 08:29:40 2026 GMT
Not After : Apr 9 08:29:40 2029 GMT
Subject: CN=69d76379-9842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:25:e6:1c:6d:f4:93:0e:4d:8f:e8:4b:b7:63:
21:3f:9c:6a:ee:27:73:79:ff:53:1f:83:99:1c:56:
ae:32:bc:d8:7c:82:69:f9:3c:a7:bc:9f:f2:fc:30:
be:93:6f:6c:be:1a:f9:82:31:e6:78:2b:65:f8:fb:
82:ab:a6:ee:8a:af:40:61:f8:ff:24:2b:eb:61:6e:
4b:4d:1e:32:70:bc:a7:99:ee:6a:55:30:a1:7d:88:
5f:9c:4c:d5:92:0b:2c:49:5f:54:78:b1:64:0d:ef:
6a:c5:e9:df:f8:ca:35:aa:49:6e:5e:06:a1:ce:b5:
5b:e8:70:9a:6d:5b:55:15:84:16:59:8f:62:9c:48:
e3:59:92:4e:bb:a0:2c:e2:1a:3b:22:9d:f5:47:e4:
ee:02:8d:8a:c4:01:c0:4f:0e:9d:45:20:e3:60:d4:
73:18:86:17:be:98:a7:4e:25:cb:71:c9:5c:41:59:
db:f8:43:65:2f:1d:c0:9a:63:cd:5f:99:88:53:76:
7b:3c:7d:89:0e:84:03:6b:b3:20:d0:7f:a4:93:e5:
2e:0b:1d:c5:03:30:cd:b9:5d:be:e1:ff:40:bf:77:
de:80:af:58:80:a5:f3:9b:cf:dd:c3:5d:14:58:75:
a0:f3:ca:5c:0a:3e:a5:9c:18:ea:42:a5:20:4a:b2:
9d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:50:57:CA:C1:03:C0:8E:0F:3F:03:43:66:20:DA:F8:D3:93:F1:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42FA3A4633EE11F1B4A9B2B7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.212.0-154.93.221.255
Signature Algorithm: sha256WithRSAEncryption
ab:cc:d9:ed:c0:e9:07:6a:41:93:0f:c8:30:67:37:07:9f:13:
14:2b:25:06:e4:e6:04:65:4f:8b:23:a6:90:ba:c3:05:9b:00:
0b:f7:90:c3:17:82:d8:f9:c8:93:ca:ee:47:4e:19:1a:cf:60:
31:e1:9c:25:55:80:73:e2:f0:85:26:bf:74:64:f5:f9:f7:a3:
d3:08:0d:94:3d:b4:f0:8b:9e:de:2c:e9:49:cf:80:37:af:7a:
d9:d1:e5:09:56:70:a8:02:30:c7:94:f2:68:bd:ea:28:15:6d:
4a:8a:87:a8:bb:2c:73:b9:d7:2a:98:b2:fd:7a:b3:9f:dd:50:
7c:75:ea:2a:15:b0:94:df:0d:2b:fd:4d:55:da:70:57:bf:76:
d0:0a:fe:a1:e5:0a:15:97:68:ef:b1:9d:23:c2:e5:82:68:7c:
aa:db:f5:29:c2:2e:45:ac:1c:41:c4:36:9b:72:63:b6:31:d2:
40:96:f3:16:a4:5d:62:d0:b0:ef:5f:c5:2f:cc:bf:45:d1:29:
d1:25:91:fb:05:6b:a5:33:9c:e4:7c:80:b8:e9:7b:88:85:e2:
78:0a:cd:40:ca:1e:70:8d:d9:8d:58:35:11:b6:43:31:91:67:
2c:b9:f8:5c:e7:4a:62:8f:16:de:cd:67:75:9d:a3:45:23:75:
65:c0:ca:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:29:38 2026 by rpki-client