Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/997E7816372511F1882E57BFCE1D38B0.roa
File: 997E7816372511F1882E57BFCE1D38B0.roa (raw, json)
Hash identifier: oE39ahRHuLo/UOprf9iDsYWyzt76CmeErDkwW2LGRMI=
Subject key identifier: 72:38:76:77:F0:71:72:62:51:0B:E6:61:C7:42:70:7A:91:CD:CB:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C504
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/997E7816372511F1882E57BFCE1D38B0.roa
Signing time: Mon 13 Apr 2026 10:43:26 +0000
ROA not before: Mon 13 Apr 2026 10:43:21 +0000
ROA not after: Sat 16 May 2026 10:43:21 +0000
asID: 22773
IP address blocks: 154.198.20.0/24 maxlen: 24
154.202.30.0/24 maxlen: 24
154.202.31.0/24 maxlen: 24
154.202.69.0/24 maxlen: 24
154.202.72.0/24 maxlen: 24
154.202.73.0/24 maxlen: 24
154.202.76.0/24 maxlen: 24
154.202.77.0/24 maxlen: 24
154.202.109.0/24 maxlen: 24
154.202.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115972 (0x1c504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 13 10:43:21 2026 GMT
Not After : May 16 10:43:21 2026 GMT
Subject: CN=69dcc8ce-226d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:dd:65:b2:89:84:68:1f:26:c6:27:f0:52:a4:
97:68:3e:2a:a1:49:15:c4:5e:5e:19:71:b0:b8:e0:
4f:0e:53:90:c0:07:44:f0:a0:cc:ec:14:da:15:af:
42:e9:70:45:b9:6b:0a:f9:30:ca:1d:e5:ba:bf:df:
e4:82:f2:a1:6d:d7:e5:12:03:83:c0:97:d4:73:cd:
27:5c:fd:fe:3b:73:36:89:a4:05:50:75:e0:fc:ce:
83:1d:88:a4:6f:91:1b:3c:ac:3e:f6:32:b9:6c:cc:
fd:67:07:06:92:f9:82:26:e2:8a:c8:70:74:af:40:
07:36:ef:5a:28:b5:19:b6:56:47:1a:6e:be:ce:ac:
fe:5e:7c:ee:14:8b:a2:c3:83:07:90:c2:57:30:09:
46:4f:aa:14:2a:8d:de:0d:53:02:23:38:ae:37:63:
c6:5e:d2:3d:74:06:b3:d6:77:e8:a8:01:97:e2:cc:
38:d9:b5:6b:d8:31:b7:08:17:ac:0b:c9:1f:c7:5d:
63:68:fd:3d:c8:75:4b:b7:19:f3:21:60:6b:4a:da:
db:fa:6d:c8:06:71:4e:fc:90:a6:31:5a:10:6e:b7:
6d:dc:02:d6:9e:7c:f4:1f:1f:e6:68:c9:69:4c:cb:
2e:a6:1d:0a:82:5f:ca:58:56:93:30:94:40:c9:50:
23:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:38:76:77:F0:71:72:62:51:0B:E6:61:C7:42:70:7A:91:CD:CB:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/997E7816372511F1882E57BFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.20.0/24
154.202.30.0/23
154.202.69.0/24
154.202.72.0/23
154.202.76.0/23
154.202.109.0-154.202.110.255
Signature Algorithm: sha256WithRSAEncryption
31:a0:ba:86:8c:9e:ad:cf:e9:c7:41:c2:fa:c5:96:4a:11:83:
99:95:0e:a6:72:05:a3:5f:dc:54:2c:a3:be:ec:04:33:94:64:
dc:03:3d:c0:9b:f8:75:98:68:fa:c0:89:05:05:0b:0e:40:85:
0a:07:7c:21:16:b3:e6:38:3e:52:11:ba:0c:63:01:10:a0:9b:
8a:15:a5:4a:76:67:ae:f6:a5:6f:38:fb:f3:bb:39:a9:0f:b9:
be:b8:75:4b:a7:4c:c7:3b:2a:11:e3:3d:ce:68:09:ce:0c:a7:
b5:03:80:0d:98:63:0b:02:65:33:f0:af:34:a5:f2:24:48:3f:
75:08:de:21:cf:fc:42:45:3c:46:f2:3a:61:c4:e0:88:9b:a1:
94:33:af:63:18:67:94:70:19:49:b6:1f:8d:fc:46:63:76:fb:
1c:f3:df:c3:73:25:0d:38:9c:03:d8:9b:25:b7:39:2d:6f:a1:
46:e0:34:4a:0e:3a:74:90:ae:b6:a5:47:b1:d0:aa:0a:c9:73:
4c:cc:41:a2:77:48:4d:49:ba:d6:d9:49:5e:4c:63:ba:b2:71:
3d:4e:9a:2d:36:43:73:46:e9:49:03:1e:f4:73:40:41:f5:0c:
af:9c:20:d4:e1:ea:69:20:a6:35:9c:9d:bf:85:a1:43:3e:49:
16:1f:b7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:25:33 2026 by rpki-client