Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DEDFEDA302311F1A23254B4DAE4EC9C.roa
File: 8DEDFEDA302311F1A23254B4DAE4EC9C.roa (raw, json)
Hash identifier: kMG+W+DRwP630AENsrt8g2WwY4QMRy9RiyJfhdQ6vYY=
Subject key identifier: 85:DE:83:3A:13:36:6F:E9:10:72:94:39:A1:5B:C2:65:7C:F9:3B:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C2BF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DEDFEDA302311F1A23254B4DAE4EC9C.roa
Signing time: Sat 04 Apr 2026 12:41:13 +0000
ROA not before: Sat 04 Apr 2026 12:41:02 +0000
ROA not after: Fri 08 May 2026 12:41:02 +0000
asID: 45194
IP address blocks: 154.84.200.0/24 maxlen: 24
154.84.201.0/24 maxlen: 24
154.84.202.0/24 maxlen: 24
154.84.203.0/24 maxlen: 24
154.84.204.0/24 maxlen: 24
154.84.205.0/24 maxlen: 24
154.84.252.0/24 maxlen: 24
154.84.253.0/24 maxlen: 24
154.84.254.0/24 maxlen: 24
154.84.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115391 (0x1c2bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 4 12:41:02 2026 GMT
Not After : May 8 12:41:02 2026 GMT
Subject: CN=69d106e9-90bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a2:df:9f:9c:66:1b:71:63:f5:31:0f:77:f6:
8a:e7:0b:e3:1b:d2:d0:d9:02:ff:91:2b:ef:ed:9a:
ef:c4:d8:13:f5:13:01:c0:03:ac:5a:d2:2c:f1:e3:
64:b3:bf:54:b8:45:ba:21:65:e7:a3:a3:3a:6f:76:
e9:a8:bf:b8:8d:91:9e:e7:14:e4:10:15:cf:45:2e:
a7:24:b7:82:dd:f6:44:c9:4f:67:98:bd:82:ac:53:
5a:a6:e8:2b:1e:5a:5d:6d:60:f5:3c:07:b7:f5:0e:
27:45:e8:ca:4e:15:c7:0b:d9:6b:5b:57:4d:77:9d:
75:99:51:cf:c7:95:a3:cc:c2:8d:d7:48:ce:f9:6c:
91:72:1e:cc:1b:74:a6:72:d8:cd:73:97:0d:e3:8a:
14:4b:76:82:64:0d:d5:98:d2:32:c6:ea:2e:61:21:
3d:f2:af:05:86:d1:00:eb:6d:a9:f8:39:ce:1c:71:
61:5f:4a:07:2c:13:d5:17:df:43:e6:b2:1c:46:f8:
be:35:7d:32:6c:a9:48:4c:27:01:81:c1:af:27:f0:
ce:e1:56:b6:da:cc:c4:cb:16:98:95:c7:40:de:b4:
48:5e:35:a0:15:ea:a6:db:5a:58:4c:17:43:56:9b:
f5:9a:c6:c5:49:ee:a9:96:f5:d2:5f:0b:68:cd:18:
48:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DE:83:3A:13:36:6F:E9:10:72:94:39:A1:5B:C2:65:7C:F9:3B:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DEDFEDA302311F1A23254B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.200.0-154.84.205.255
154.84.252.0/22
Signature Algorithm: sha256WithRSAEncryption
cf:84:7f:35:73:0a:f4:72:a8:9a:f0:83:f5:03:a7:e3:b7:b1:
28:8e:1d:99:a6:e1:10:28:15:b9:a2:76:c4:cd:ba:7e:27:ea:
de:11:d6:3e:5b:26:e2:e6:d7:f8:03:07:9d:f9:24:1b:1c:8d:
8f:6f:60:d5:25:65:78:fe:a0:d7:f8:8b:53:95:30:f3:3a:0c:
45:ca:ef:60:10:89:80:75:ed:1c:d6:fb:2e:42:99:7d:49:12:
bd:80:4e:40:2c:fa:d6:c2:89:9d:d8:c6:7b:f7:1e:5c:6a:a4:
29:9d:d5:21:e7:8b:1a:57:08:03:9b:bd:3f:71:51:ff:1f:ba:
07:0e:1f:b0:3c:bc:fe:25:8a:2f:df:f0:32:4b:71:c0:24:1d:
08:99:33:15:2d:ff:93:82:08:91:02:3f:99:83:0c:3f:ac:bd:
d2:8b:8f:b2:3c:2f:b0:e5:7b:dc:ad:26:69:2d:2e:e8:cd:23:
1d:17:b8:cb:1c:a6:29:3b:51:64:21:68:4d:b3:8b:96:6b:d4:
08:3b:1a:68:4f:13:d0:00:23:b9:a6:23:39:86:e3:16:62:73:
9b:82:6c:78:cc:6f:b1:3d:82:67:39:db:46:61:a7:ae:79:83:
a1:94:f5:b9:7f:85:4b:94:12:e6:62:46:1f:6d:14:e0:c1:fd:
a7:75:c1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:58:38 2026 by rpki-client