Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAC37742318B11F1BBE178E1DAE4EC9C.roa
File: AAC37742318B11F1BBE178E1DAE4EC9C.roa (raw, json)
Hash identifier: ZzpdU5WVKxh/xNCX5ewmCAi+HaAuNzGJWsmROkZiQZY=
Subject key identifier: BF:49:16:75:74:9C:3E:C6:D6:B5:E5:6E:E4:1C:17:0E:67:1D:4D:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C35C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAC37742318B11F1BBE178E1DAE4EC9C.roa
Signing time: Mon 06 Apr 2026 07:38:56 +0000
ROA not before: Mon 06 Apr 2026 07:38:52 +0000
ROA not after: Fri 06 Apr 2029 07:38:52 +0000
asID: 17561
IP address blocks: 154.203.83.0/24 maxlen: 24
154.203.84.0/24 maxlen: 24
154.203.85.0/24 maxlen: 24
154.203.86.0/24 maxlen: 24
154.203.87.0/24 maxlen: 24
154.203.88.0/24 maxlen: 24
154.203.89.0/24 maxlen: 24
154.203.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115548 (0x1c35c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 6 07:38:52 2026 GMT
Not After : Apr 6 07:38:52 2029 GMT
Subject: CN=69d36310-d003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f5:4d:52:93:56:c6:32:34:68:10:c6:10:b5:
24:f0:1c:03:d1:59:d3:48:ba:5c:f8:77:b9:45:9b:
34:e6:15:7d:b6:a8:d2:f5:15:0f:38:f8:47:cf:68:
ca:bf:00:c2:9b:bc:db:4d:95:00:7f:89:a4:bb:b3:
55:b6:41:13:bc:7f:75:8c:3b:9f:13:07:d2:40:d6:
f7:af:1f:3c:a6:26:43:01:76:22:97:50:7f:31:eb:
b9:b1:41:6b:9c:6b:13:fb:0e:44:0f:b4:5b:3e:c9:
7a:89:f8:c5:25:0f:19:af:86:ac:62:78:7c:8e:a1:
c8:d9:a7:76:35:98:1e:b6:f3:2d:68:0f:3f:bc:a0:
b5:92:e8:6f:58:65:45:e5:a6:7b:f9:ca:93:4c:23:
ab:ef:9e:43:0f:a8:5f:b8:41:cc:41:92:9c:05:16:
0e:33:45:6d:23:0d:a1:be:f1:85:96:f4:a9:b6:33:
ed:87:44:61:b8:83:10:16:2d:50:ad:35:73:40:ac:
83:78:7c:ed:81:ad:d6:df:d5:1d:68:b0:3a:c1:fb:
02:3c:b4:37:8e:e1:45:19:ba:b9:c3:d9:8b:f7:eb:
fa:e4:be:07:79:36:8a:37:eb:51:cd:b4:53:13:3b:
f3:c5:2f:6f:b7:27:f6:ab:63:63:af:f9:b0:e7:86:
a1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:49:16:75:74:9C:3E:C6:D6:B5:E5:6E:E4:1C:17:0E:67:1D:4D:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAC37742318B11F1BBE178E1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.83.0-154.203.90.255
Signature Algorithm: sha256WithRSAEncryption
1a:99:1f:bc:ce:f7:90:3f:71:41:e7:a2:6f:ff:4c:e0:1b:e1:
47:87:75:b3:3f:f5:69:8e:7e:fe:db:0d:8f:25:6c:dd:df:23:
62:2f:1d:a6:32:fd:1a:f4:8e:48:16:65:1f:06:d6:de:1d:b0:
f2:29:45:11:16:cd:ca:0d:2f:97:cb:86:f8:5b:05:3c:4e:e5:
d0:4f:f0:29:1d:0a:3b:8e:b2:6e:3c:34:13:96:7a:a2:74:40:
90:af:5b:40:6c:37:05:6a:e3:13:3f:7d:d9:65:55:ba:d6:f7:
7c:9d:e6:3f:6b:7a:06:00:df:19:38:fd:ff:97:79:32:ff:72:
97:8d:df:21:dd:f3:12:8b:a7:f6:35:29:95:44:ee:19:b9:36:
fe:8d:0a:53:9b:22:06:93:3c:37:7e:55:c0:1f:32:7b:22:4c:
3e:ae:e0:88:75:9c:19:ea:11:ee:cb:77:1c:8c:e4:6b:35:43:
d2:fb:8c:3e:f2:b4:ec:5e:cf:fd:04:33:26:42:3b:2d:4e:ac:
e3:5b:bb:fb:eb:70:e3:db:65:f6:2e:2d:24:a5:ad:d1:b5:c9:
17:cf:0d:49:e6:ce:29:64:7b:26:1e:4d:ac:d4:b0:93:18:a3:
07:ef:ff:44:6e:3b:39:08:b1:94:04:a7:a9:9e:b1:3e:ce:90:
1c:0b:b7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:14:10 2026 by rpki-client