Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97673BC634F511F1ABE017D6CE1D38B0.roa
File: 97673BC634F511F1ABE017D6CE1D38B0.roa (raw, json)
Hash identifier: vGLpUFggN2i610zLidXOoPxe1jg6IC2DJhJdJ54jqqE=
Subject key identifier: 06:64:A8:40:3C:9B:E7:9B:B6:91:96:A2:B6:89:3B:FA:EA:D6:83:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C475
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97673BC634F511F1ABE017D6CE1D38B0.roa
Signing time: Fri 10 Apr 2026 15:54:44 +0000
ROA not before: Fri 10 Apr 2026 15:54:39 +0000
ROA not after: Sat 10 Jul 2027 15:54:39 +0000
asID: 328608
IP address blocks: 154.200.133.0/24 maxlen: 24
154.200.134.0/24 maxlen: 24
154.200.135.0/24 maxlen: 24
154.200.136.0/24 maxlen: 24
154.200.137.0/24 maxlen: 24
154.200.138.0/24 maxlen: 24
154.200.139.0/24 maxlen: 24
154.200.141.0/24 maxlen: 24
154.200.143.0/24 maxlen: 24
154.200.144.0/24 maxlen: 24
154.200.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115829 (0x1c475)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 15:54:39 2026 GMT
Not After : Jul 10 15:54:39 2027 GMT
Subject: CN=69d91d44-50f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:09:91:32:b8:99:b6:f9:cb:59:55:ba:dc:88:
29:48:fc:de:70:af:e1:f7:ca:d8:00:fa:52:de:b4:
b8:7d:26:9d:65:85:26:aa:59:d0:9d:55:eb:b3:a3:
65:80:bb:e3:a6:36:b4:cc:46:3b:ec:51:7b:88:ed:
6c:02:20:95:e9:cf:dd:2b:ed:9e:f1:e9:5d:51:89:
94:ac:9f:b7:d7:47:ad:64:5b:30:31:9d:55:b0:cc:
94:0c:e3:ff:91:33:fa:60:96:fd:91:4c:ec:0a:ef:
40:24:12:0f:fb:e4:27:eb:1b:a8:a0:03:da:b9:3a:
f9:70:b7:fc:77:26:e8:28:98:77:75:ba:89:0e:f5:
70:8b:30:69:c3:ca:f7:84:25:18:55:f1:7e:9b:3c:
20:16:94:23:ed:21:2b:ad:3d:d3:eb:bd:73:b2:14:
8a:5f:9b:16:48:1c:1f:9f:6c:ac:77:7d:f9:b4:ea:
48:eb:92:e4:7d:c4:d4:dc:7c:8e:54:77:3a:fc:68:
dd:5a:fc:0a:d2:01:9e:56:69:35:65:82:8c:d2:0c:
b5:e4:97:ae:9f:cd:26:60:8c:c1:1a:33:5d:a7:15:
7a:00:3c:f2:7c:d1:af:2d:b3:75:16:31:42:ef:34:
39:08:b2:eb:e5:4e:cd:81:ce:e0:56:b0:38:96:d9:
85:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:64:A8:40:3C:9B:E7:9B:B6:91:96:A2:B6:89:3B:FA:EA:D6:83:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97673BC634F511F1ABE017D6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.133.0-154.200.139.255
154.200.141.0/24
154.200.143.0-154.200.145.255
Signature Algorithm: sha256WithRSAEncryption
98:6b:f2:a9:63:9c:f0:f5:87:6c:ff:7d:ad:ae:3b:db:59:23:
92:2b:18:ae:f0:90:96:f5:06:c6:1c:52:fa:d9:96:03:c0:3c:
85:20:e3:c5:f1:97:97:87:c0:72:c6:22:b7:cd:f1:88:a9:9f:
15:51:99:01:66:60:1e:7b:ad:9e:df:50:40:08:5a:78:1f:23:
b0:98:dc:e0:d4:b8:2a:38:ec:29:e0:5e:b4:af:58:39:0c:b1:
9c:0d:2a:0a:99:1f:ec:a8:c0:8c:af:7d:17:62:38:87:5e:75:
fe:ba:6c:63:55:f8:27:5f:41:0d:ea:e4:52:45:81:63:f3:db:
d5:0b:26:92:33:5b:4a:28:fb:a1:bd:48:40:66:d1:92:86:ac:
6e:ac:82:e9:d1:13:7a:23:25:39:6b:17:08:10:73:36:e8:74:
6a:e0:d6:77:9c:ab:5e:70:53:cf:1b:19:d9:89:6a:fb:ba:c9:
6e:0d:fc:3b:71:f3:46:3a:74:23:47:ea:b1:dd:f0:50:72:6d:
bf:87:bf:b9:1d:aa:23:5b:e7:02:75:8e:18:41:63:00:2e:14:
a0:34:cb:90:af:4c:a5:09:36:e1:92:a9:f4:06:66:79:88:a0:
ed:aa:ca:7e:0f:61:b4:74:4e:d2:fe:06:d3:e7:0a:9c:2c:cf:
1e:ae:50:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:01:38 2026 by rpki-client