Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AA24AA0397211F1954091CECE1D38B0.roa
File: 6AA24AA0397211F1954091CECE1D38B0.roa (raw, json)
Hash identifier: cXkN7wpgFm5kZrXSTXl15eXZ2jdU3eweT5f02qYyK+0=
Subject key identifier: 9B:CF:EF:A3:08:1E:6B:C7:39:FD:72:1E:37:3C:1A:12:A0:E5:49:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C589
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AA24AA0397211F1954091CECE1D38B0.roa
Signing time: Thu 16 Apr 2026 08:58:21 +0000
ROA not before: Thu 16 Apr 2026 08:58:16 +0000
ROA not after: Wed 29 Apr 2026 08:58:16 +0000
asID: 214143
IP address blocks: 154.82.176.0/23 maxlen: 24
154.82.178.0/23 maxlen: 24
154.82.180.0/24 maxlen: 24
154.93.1.0/24 maxlen: 24
154.93.3.0/24 maxlen: 24
154.93.26.0/24 maxlen: 24
154.94.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116105 (0x1c589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 08:58:16 2026 GMT
Not After : Apr 29 08:58:16 2026 GMT
Subject: CN=69e0a4ac-c544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1f:7f:95:7a:3a:ce:18:3c:6f:6c:da:b3:8d:
4a:23:85:31:82:46:67:1b:8a:13:0c:bd:c7:61:d9:
8d:c9:e9:d0:a3:f0:b9:dc:ff:54:df:77:87:db:f3:
47:51:6c:64:34:97:83:3f:2f:f1:49:92:35:22:62:
44:4b:52:be:f8:ac:d7:12:98:f3:30:f4:71:86:ff:
6f:e6:8c:e7:dc:32:18:c0:b9:87:80:8d:ee:66:6a:
d5:d3:4f:96:92:f1:d5:0c:3c:73:12:f3:10:7a:09:
b0:62:ca:ef:f7:ee:5b:00:12:d0:0a:66:f7:3b:1e:
4d:a8:d8:89:87:8b:51:6c:b2:48:4d:10:75:0c:02:
c7:05:3e:c5:d1:41:3d:e6:6a:b3:6a:9a:c3:f9:b1:
e4:1a:fd:67:ca:f5:1b:0d:ae:a1:bb:81:80:5d:56:
7f:78:c0:ac:5f:f8:fb:ac:45:b6:d8:ae:95:d9:d4:
36:ab:69:ad:c5:d2:40:db:6f:19:58:1a:41:59:2e:
8e:b8:a9:6a:91:77:04:d9:64:6e:c6:2a:cf:b2:7f:
11:65:b6:8d:5b:21:b7:e9:c2:06:ee:a0:e5:40:85:
e3:31:14:89:d7:19:d3:87:1d:2a:c5:c2:75:2f:d3:
52:54:f2:e8:1f:be:df:2e:4d:22:df:db:7e:23:07:
4f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CF:EF:A3:08:1E:6B:C7:39:FD:72:1E:37:3C:1A:12:A0:E5:49:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AA24AA0397211F1954091CECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.176.0-154.82.180.255
154.93.1.0/24
154.93.3.0/24
154.93.26.0/24
154.94.35.0/24
Signature Algorithm: sha256WithRSAEncryption
72:21:a6:ed:61:6f:85:18:7a:01:de:fb:26:27:fd:cf:27:8d:
85:80:0f:e3:d9:56:a8:ca:5f:db:f8:8d:b0:b4:37:d4:61:03:
94:a0:fb:8e:72:88:d2:d3:9f:0d:b7:6c:5d:b7:7c:af:4e:d3:
bd:6d:0d:dc:6d:92:f9:0f:4b:fb:6c:c3:5b:7c:e8:2c:b3:dc:
4f:0d:c5:49:7e:72:d1:e9:0d:cc:2a:14:c5:e6:a9:9a:26:b0:
28:58:99:89:73:42:81:96:f8:0c:cb:25:87:78:66:36:35:34:
d9:b3:d3:69:36:1b:90:46:03:42:02:92:83:37:57:ee:51:11:
84:dd:06:7e:e8:3a:86:24:fb:49:85:2d:09:3b:9e:2f:d7:ce:
fe:95:8d:b9:34:de:9b:2d:e8:14:e9:52:da:c0:69:89:b3:1d:
c7:25:13:5b:d8:e8:ed:c9:f2:cc:5e:f2:30:ac:b9:fc:2e:b9:
70:1c:15:75:30:6e:00:a4:aa:1b:a7:b6:97:6c:69:d2:f8:1b:
64:e1:a3:ae:8c:94:66:82:70:ae:dc:c9:52:40:e8:bc:30:37:
56:13:64:95:6b:ce:91:ac:ec:a7:3e:fb:9b:5e:ab:0a:a6:fb:
d2:b2:2b:d7:6c:19:75:dc:fc:c2:7c:e2:09:83:c9:2e:78:d4:
88:c7:30:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:24:59 2026 by rpki-client