Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C484B78341011F1934AD104CF1D38B0.roa
File: 6C484B78341011F1934AD104CF1D38B0.roa (raw, json)
Hash identifier: qD4UEJJOqc10Bdm4VG8CdNDwz/3pIS8LHx2JSRQ9rF8=
Subject key identifier: 74:65:A9:62:46:F8:ED:DD:78:71:0F:32:7A:16:63:57:B9:06:15:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C3EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C484B78341011F1934AD104CF1D38B0.roa
Signing time: Thu 09 Apr 2026 12:34:17 +0000
ROA not before: Thu 09 Apr 2026 12:34:12 +0000
ROA not after: Sun 19 Apr 2026 12:34:12 +0000
asID: 9304
IP address blocks: 154.193.2.0/24 maxlen: 24
154.193.35.0/24 maxlen: 24
154.194.195.0/24 maxlen: 24
154.196.134.0/24 maxlen: 24
154.196.160.0/24 maxlen: 24
154.196.179.0/24 maxlen: 24
154.196.180.0/24 maxlen: 24
154.199.4.0/24 maxlen: 24
154.200.1.0/24 maxlen: 24
154.200.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 12:34:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115692 (0x1c3ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 12:34:12 2026 GMT
Not After : Apr 19 12:34:12 2026 GMT
Subject: CN=69d79cc9-4538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:45:75:8f:16:a2:3b:d0:09:ef:c1:85:3d:39:
ef:1a:f5:1b:2d:e3:0a:87:9f:4b:0f:e1:c1:1a:fd:
a6:ad:f9:34:07:38:0c:25:53:52:27:5a:24:8b:d9:
6c:0e:50:ae:80:86:83:3c:57:9b:33:e1:fb:b9:8f:
20:06:c7:85:c8:ea:3f:ea:92:46:9a:61:2d:8e:96:
e5:35:5e:5a:7a:d9:23:a0:4a:f8:f0:c6:06:0b:58:
91:95:a0:b7:3d:60:34:ab:d1:32:58:2f:cc:6b:df:
79:e0:55:3d:33:45:25:b5:e5:ba:48:b3:dd:06:05:
85:7f:08:8a:85:4f:e8:fb:33:1c:1a:f0:9f:6d:a0:
7c:65:e7:cf:b8:9e:47:b8:27:b3:95:5c:2b:1c:95:
77:25:92:46:5c:b0:50:27:b1:38:bf:bd:e9:eb:3d:
59:22:54:16:23:92:17:51:5e:c3:dc:43:03:7c:63:
0b:fa:f6:6b:c0:59:57:d1:44:06:0f:4f:d7:03:e5:
de:ff:40:d0:d7:21:90:2a:28:31:80:92:a2:72:cb:
d7:c0:e2:5b:ef:1a:13:75:e0:eb:64:e0:80:c7:ad:
f1:db:04:80:ff:93:5e:a6:b2:8c:93:9e:c4:87:1b:
a0:59:62:f1:a0:6e:f9:2a:85:f1:91:97:9c:fb:3d:
e0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:65:A9:62:46:F8:ED:DD:78:71:0F:32:7A:16:63:57:B9:06:15:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C484B78341011F1934AD104CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.2.0/24
154.193.35.0/24
154.194.195.0/24
154.196.134.0/24
154.196.160.0/24
154.196.179.0-154.196.180.255
154.199.4.0/24
154.200.1.0/24
154.200.26.0/24
Signature Algorithm: sha256WithRSAEncryption
44:1e:5e:d0:91:48:75:6b:3a:58:47:cc:11:2e:17:39:3e:09:
59:d8:80:2b:cd:b0:54:19:0b:24:1b:76:f9:ab:f6:17:e5:05:
c4:98:0e:a8:1a:f4:b1:0c:7d:a3:a7:64:12:9c:c2:6e:f6:ef:
08:34:f9:11:7c:cc:87:db:88:28:dc:ab:02:dd:ec:da:a1:6a:
43:6b:6e:18:c4:7b:18:6c:4c:a1:7e:79:22:d8:dc:39:81:60:
2b:00:0f:49:85:eb:71:a4:bb:33:20:3e:ee:b2:cb:10:7c:e2:
32:65:4f:b5:f7:9c:a4:b3:97:0c:33:42:85:7e:e2:16:0a:46:
f8:53:cd:ca:52:d2:51:50:bc:91:a1:db:94:a9:c2:12:7b:54:
62:50:f2:03:be:ad:f8:19:f5:c9:ee:4d:89:07:72:a7:f4:e7:
fe:51:08:fd:b2:b0:36:16:8a:83:62:3a:71:03:f1:83:2c:86:
6d:68:23:d3:30:2c:4b:13:5f:28:9f:f7:9b:37:8e:24:3f:fe:
49:b5:f2:8e:82:37:51:4f:b6:55:ec:3b:8e:7e:92:83:43:aa:
44:00:43:d1:63:d5:55:81:1c:84:a8:31:96:b8:af:69:d5:2a:
2e:5d:66:e8:6d:ff:ff:d2:25:11:e1:d5:a9:79:75:33:ab:4d:
e1:84:6f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:22:03 2026 by rpki-client