Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/522B0374343911F1884906FCCE1D38B0.roa
File: 522B0374343911F1884906FCCE1D38B0.roa (raw, json)
Hash identifier: +kY+/MogQ0m6GbUWKpPheGuNwz7R9HwD+lOlcvxMq1c=
Subject key identifier: 50:66:DD:17:E5:92:37:D3:1F:0F:97:29:99:00:0D:E5:47:C8:AB:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C426
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/522B0374343911F1884906FCCE1D38B0.roa
Signing time: Thu 09 Apr 2026 17:27:02 +0000
ROA not before: Thu 09 Apr 2026 17:26:58 +0000
ROA not after: Mon 09 Apr 2029 17:26:58 +0000
asID: 17561
IP address blocks: 154.86.234.0/24 maxlen: 24
154.86.235.0/24 maxlen: 24
154.86.236.0/24 maxlen: 24
154.86.237.0/24 maxlen: 24
154.86.238.0/24 maxlen: 24
154.86.239.0/24 maxlen: 24
154.86.240.0/24 maxlen: 24
154.86.241.0/24 maxlen: 24
154.86.242.0/24 maxlen: 24
154.86.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 15:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115750 (0x1c426)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 17:26:58 2026 GMT
Not After : Apr 9 17:26:58 2029 GMT
Subject: CN=69d7e166-af2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:44:ee:bd:91:2e:2d:2d:c9:79:77:c0:1d:34:
a6:24:87:50:3e:75:3f:ac:93:b6:73:15:42:b0:fe:
6d:39:33:2b:40:cd:9a:ad:b1:84:73:19:e7:9f:e0:
7a:5f:ac:e3:18:19:c9:04:18:e5:ff:68:c1:44:cd:
f9:4c:d2:8f:83:85:01:b8:e7:b7:a9:52:6a:8f:a9:
85:57:93:29:1c:d2:32:a9:28:73:14:d5:c3:d8:7e:
f0:14:5f:08:6b:07:b0:95:c3:79:db:3e:83:d9:91:
71:d8:33:39:04:08:d6:39:e0:a1:9f:22:3b:1d:3a:
ac:e1:c1:6f:68:83:74:ae:9c:a3:11:cd:cd:b8:ea:
65:b2:24:e7:cd:eb:ef:90:2b:88:6c:21:78:f2:46:
be:25:7a:9d:18:48:76:4b:08:01:8a:40:22:20:bf:
87:0f:1c:f0:96:93:ad:5c:df:6f:5d:07:bc:c9:09:
4c:04:1c:08:3d:95:76:3a:a6:1e:3e:da:65:17:3b:
ae:b4:2e:c5:ef:d6:5a:7b:ab:f8:e0:03:4b:4b:4e:
91:af:53:eb:68:c5:81:99:3e:5f:8c:d2:88:6e:ea:
56:b0:52:21:5f:a7:da:a6:e6:93:0c:b4:11:52:f0:
e6:ac:57:14:4c:d4:15:13:13:9e:1a:8d:d1:f0:44:
ec:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:66:DD:17:E5:92:37:D3:1F:0F:97:29:99:00:0D:E5:47:C8:AB:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/522B0374343911F1884906FCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.234.0-154.86.243.255
Signature Algorithm: sha256WithRSAEncryption
1a:ce:1c:b7:63:15:33:92:20:13:1b:11:cc:a4:48:af:68:c2:
2c:1a:b3:96:4d:97:fa:57:20:b2:30:e3:ab:7d:a8:5c:d0:44:
26:1e:b4:61:03:99:40:5a:a2:a6:d6:af:08:16:ff:ff:e3:c5:
62:ec:03:2a:87:0d:86:7d:54:03:ff:fc:ca:16:74:ce:ff:59:
b5:98:2e:f3:82:b5:03:31:50:b8:15:32:81:c5:b3:cd:b6:79:
c5:0b:6b:92:c5:97:50:cc:b8:90:e7:68:5b:56:c5:b2:5b:77:
ac:63:6c:98:a2:24:ee:35:6b:68:35:3a:0e:c5:e5:8d:4e:27:
9b:1b:b5:c9:78:32:18:08:5a:69:35:e7:75:bd:8f:f4:4b:46:
f3:f9:e5:40:6a:e1:9f:8b:0b:cc:7e:17:9d:89:8c:7c:fa:8d:
6d:9b:26:0b:91:49:97:1e:bc:72:be:7d:84:57:d3:87:da:8c:
51:85:49:d0:12:16:ba:2e:81:f8:6f:08:0f:c1:4b:1b:6e:d5:
65:31:43:5c:77:3f:ad:02:d0:f2:3f:95:e4:0a:9e:dd:13:0a:
e2:f2:2b:ad:af:ee:2d:61:0b:36:a1:eb:92:74:94:e8:62:53:
16:c1:42:fa:ca:69:f9:d3:48:39:c1:72:a0:f3:e0:04:9a:8c:
0b:d6:62:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:42:30 2026 by rpki-client