Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91A5B65030D011F194E9A4A2DAE4EC9C.roa
File: 91A5B65030D011F194E9A4A2DAE4EC9C.roa (raw, json)
Hash identifier: FGFmIKEVbPBuMEwJR7PjMARXM4Ue6uhLuiqI4N3w0UA=
Subject key identifier: 68:4E:5F:40:B9:6E:79:3B:19:C7:F4:11:14:2B:8D:B8:81:9C:23:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C300
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91A5B65030D011F194E9A4A2DAE4EC9C.roa
Signing time: Sun 05 Apr 2026 09:19:38 +0000
ROA not before: Sun 05 Apr 2026 09:19:30 +0000
ROA not after: Fri 08 May 2026 09:19:30 +0000
asID: 45194
IP address blocks: 154.84.193.0/24 maxlen: 24
154.84.209.0/24 maxlen: 24
154.84.214.0/24 maxlen: 24
154.84.217.0/24 maxlen: 24
154.84.218.0/24 maxlen: 24
154.84.219.0/24 maxlen: 24
154.84.220.0/24 maxlen: 24
154.84.221.0/24 maxlen: 24
154.84.222.0/24 maxlen: 24
154.84.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115456 (0x1c300)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 5 09:19:30 2026 GMT
Not After : May 8 09:19:30 2026 GMT
Subject: CN=69d2292a-17a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:86:96:7b:e5:84:84:4b:34:10:ab:77:ce:d8:
63:e0:af:7a:db:b6:f7:cf:56:8c:e6:f7:b2:bf:fc:
a7:bb:5f:47:01:33:39:6f:08:82:cb:98:f4:a1:bd:
6f:9a:0b:66:d9:1a:68:d3:57:17:dc:5b:30:ea:e8:
51:60:1d:c9:16:1a:34:c2:55:ed:91:29:ad:44:b5:
62:a0:68:b0:1d:05:b3:7d:55:b5:a7:57:3a:cf:3b:
56:d7:78:62:5c:d5:ce:74:d7:ee:a7:1e:8b:e9:70:
63:5d:03:c8:af:1f:00:9e:90:ba:e7:09:f3:ae:6d:
26:4f:50:ee:2a:9f:e3:07:0a:3e:e7:c8:6d:6c:5e:
6b:58:ac:ec:af:e7:d1:ff:89:fb:67:5a:06:e9:3f:
c4:eb:59:7c:e3:c0:55:fb:66:d8:9f:e6:60:47:2f:
d3:d2:9f:19:43:fc:7e:6a:d9:b0:0c:25:33:13:df:
97:c3:62:7a:d1:7f:fa:4f:4c:21:c8:9a:3e:48:58:
08:5e:89:de:68:27:8d:7d:ea:87:35:a0:d1:78:00:
c9:b3:0b:1f:2a:83:c8:37:0e:64:42:7d:e7:08:57:
ab:81:32:19:d1:8f:a6:34:12:a3:93:90:fb:4d:d3:
4e:d3:da:32:7f:e5:c7:89:21:1a:de:78:81:09:a6:
aa:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4E:5F:40:B9:6E:79:3B:19:C7:F4:11:14:2B:8D:B8:81:9C:23:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91A5B65030D011F194E9A4A2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.193.0/24
154.84.209.0/24
154.84.214.0/24
154.84.217.0-154.84.222.255
154.84.224.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:88:d9:8a:2c:f2:52:50:b3:62:71:72:c0:1e:7a:be:80:46:
de:34:d1:f7:e6:ef:90:73:ce:fa:2c:23:03:71:9d:53:a0:0a:
71:f4:d2:e7:37:63:58:58:e2:98:aa:b4:05:d5:6e:da:34:62:
f2:9b:9d:63:0a:5b:c7:ed:12:3f:04:aa:62:44:76:ba:67:a9:
6f:db:50:60:68:d6:39:47:c9:be:93:3d:e3:51:4e:34:ca:0a:
4b:00:5e:be:5d:12:2a:19:4e:83:f9:1b:db:70:e3:72:65:b3:
f7:ad:ba:37:af:31:8c:f7:09:f7:1a:b9:d7:91:d0:7d:1f:13:
21:b1:6b:18:df:c3:85:86:35:7a:61:44:50:71:ac:f5:25:ae:
b5:a1:42:dd:2f:f5:e1:cb:bb:da:9b:f5:fb:74:02:84:ac:ab:
bc:21:30:9b:54:a7:bb:8f:9d:71:2f:fb:cb:71:cf:bf:a9:74:
30:b4:92:de:cc:02:92:ce:07:43:74:bd:51:38:39:a7:ea:ef:
da:70:e4:b0:64:cb:60:53:2b:0e:ea:db:40:4d:45:cf:90:8c:
0b:a1:6b:32:5b:ca:dc:1c:fa:82:a2:33:31:af:e8:9a:27:37:
6c:a8:64:40:70:ca:68:4f:34:4c:85:31:1b:c6:5a:0c:9d:67:
f7:e6:58:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:59:52 2026 by rpki-client