Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/993EC2E4341311F1A8480719CF1D38B0.roa
File: 993EC2E4341311F1A8480719CF1D38B0.roa (raw, json)
Hash identifier: UODxd1HAuhhVfE4NoCsmwLgS0+9BE8BuoZk4opGoNs0=
Subject key identifier: E2:19:8A:39:AE:C5:66:FE:94:88:B1:44:E5:76:E3:33:C5:B0:34:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C3F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/993EC2E4341311F1A8480719CF1D38B0.roa
Signing time: Thu 09 Apr 2026 12:57:01 +0000
ROA not before: Thu 09 Apr 2026 12:56:56 +0000
ROA not after: Sun 19 Apr 2026 12:56:56 +0000
asID: 401783
IP address blocks: 154.193.2.0/24 maxlen: 24
154.193.35.0/24 maxlen: 24
154.194.195.0/24 maxlen: 24
154.196.134.0/24 maxlen: 24
154.196.160.0/24 maxlen: 24
154.196.179.0/24 maxlen: 24
154.196.180.0/24 maxlen: 24
154.199.4.0/24 maxlen: 24
154.200.1.0/24 maxlen: 24
154.200.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 12:56:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115700 (0x1c3f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 12:56:56 2026 GMT
Not After : Apr 19 12:56:56 2026 GMT
Subject: CN=69d7a21d-df7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:48:7c:34:17:b2:ec:44:a5:dd:dc:0c:26:
fd:1f:3f:33:e1:1e:da:ea:0a:c8:52:87:bd:16:33:
d0:96:ea:f4:24:85:7e:1b:b5:d2:38:48:aa:ad:41:
b3:fe:43:9c:fb:59:dc:a0:47:f5:ac:76:3a:bf:7e:
aa:17:28:f8:22:68:4e:cf:90:a5:8c:7c:2d:75:f4:
1b:15:16:34:3b:40:90:63:83:25:ad:e1:d8:90:ec:
93:f9:56:b1:ce:d2:d5:f3:8b:b6:28:4a:32:c4:78:
ee:ec:20:c6:1d:10:ad:65:f8:1e:45:7e:88:d7:27:
85:d4:af:52:75:d4:bc:d8:63:3a:58:74:1e:92:fa:
f4:90:f6:32:c9:cd:9a:39:27:a3:f0:d8:47:71:75:
94:fc:c5:8d:3f:1e:23:85:1b:49:95:08:34:17:e7:
0e:b4:cf:71:02:66:5f:38:2c:21:13:2e:5b:d4:04:
19:25:b2:a6:2e:0d:3a:5c:17:f3:a7:2f:79:25:0f:
f9:ee:44:8c:e0:58:24:61:8a:91:7a:df:12:e2:fa:
d5:e1:22:59:ac:d7:1e:a5:7f:ee:73:2d:93:a6:bc:
20:e3:4a:d2:d4:3c:fd:a8:a0:47:01:2f:07:3e:74:
b9:32:f7:91:9f:a6:b3:ae:63:4c:e4:39:a1:cd:b1:
67:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:19:8A:39:AE:C5:66:FE:94:88:B1:44:E5:76:E3:33:C5:B0:34:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/993EC2E4341311F1A8480719CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.2.0/24
154.193.35.0/24
154.194.195.0/24
154.196.134.0/24
154.196.160.0/24
154.196.179.0-154.196.180.255
154.199.4.0/24
154.200.1.0/24
154.200.26.0/24
Signature Algorithm: sha256WithRSAEncryption
35:db:d4:e9:0e:fe:bc:ea:e0:54:1e:e2:8f:3c:9d:ce:fb:f7:
b2:90:9b:bd:ab:9d:1e:0b:7b:c4:46:f6:1d:d2:e4:71:de:8c:
1b:38:13:f4:7c:16:3a:15:48:73:15:57:ff:71:dc:13:85:4e:
8f:cc:08:67:4f:00:7d:65:d0:31:ee:42:34:13:84:0b:81:bb:
43:ab:c0:a6:48:fa:88:52:6c:17:c5:c4:82:09:bd:b3:06:a4:
96:7d:1d:f7:b3:a9:a2:47:03:d4:80:69:9f:03:aa:39:fd:a3:
4f:47:37:df:86:2d:5a:d3:5b:de:00:66:84:ae:b8:da:b6:f0:
47:6b:55:14:1d:df:76:a3:39:fb:90:73:30:c2:0c:96:03:4c:
33:42:77:6f:92:af:33:56:38:6e:7a:fb:29:0a:d4:dc:ec:6d:
2e:7a:db:22:92:f2:3d:6b:b8:26:40:a7:90:ea:84:2c:b5:37:
21:13:6d:98:c1:40:85:b6:ee:ae:7e:e9:f1:24:f8:81:45:cd:
47:a2:24:9c:58:ea:6e:8b:f2:4b:b0:db:71:8b:9a:98:a7:f8:
ef:e3:6d:d3:09:d8:dd:bc:ab:8c:7c:59:ca:5e:44:2d:3f:2e:
03:7d:01:53:43:c6:7e:8a:61:ce:07:1f:8c:c9:cd:05:f9:07:
fa:d8:5d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:20:03 2026 by rpki-client