Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4EBF4DE2A8211F1B1E840ADDAE4EC9C.roa
File: B4EBF4DE2A8211F1B1E840ADDAE4EC9C.roa (raw, json)
Hash identifier: uTe3RJuD2VA2nIEnNpCOySRrPzxYqs2uGbEP6tRZWiU=
Subject key identifier: B5:4B:E3:67:DC:D9:B6:F6:47:BB:7D:61:73:3B:EF:9B:F5:9D:8D:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C13D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4EBF4DE2A8211F1B1E840ADDAE4EC9C.roa
Signing time: Sat 28 Mar 2026 08:47:10 +0000
ROA not before: Sat 28 Mar 2026 08:47:04 +0000
ROA not after: Sat 02 May 2026 08:47:04 +0000
asID: 44559
IP address blocks: 154.198.37.0/24 maxlen: 24
154.198.38.0/24 maxlen: 24
154.198.39.0/24 maxlen: 24
154.203.206.0/24 maxlen: 24
154.203.207.0/24 maxlen: 24
154.203.212.0/24 maxlen: 24
154.203.213.0/24 maxlen: 24
154.203.214.0/24 maxlen: 24
154.203.215.0/24 maxlen: 24
154.203.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 15:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115005 (0x1c13d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 28 08:47:04 2026 GMT
Not After : May 2 08:47:04 2026 GMT
Subject: CN=69c7958e-624d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:93:a0:fd:e7:22:2e:b0:66:f9:ff:10:a0:8f:
5a:f4:76:18:65:51:68:0a:f9:74:4c:94:84:3b:a5:
91:52:65:9a:51:51:61:73:5b:3c:c6:8c:38:54:e7:
b8:9a:f7:59:c8:16:78:20:bc:e5:e0:72:8f:52:6b:
46:f6:08:39:85:bd:2e:be:21:da:fc:c4:ba:ee:58:
b2:87:3c:2a:83:85:9d:45:65:ba:ef:28:16:69:f7:
5f:91:38:13:38:2d:d5:df:14:69:3e:da:20:30:fa:
43:5e:a6:46:47:37:99:34:b6:49:01:48:13:4e:10:
25:8b:7b:84:09:ef:5d:aa:88:d7:b0:7e:18:8a:f8:
84:cd:1d:7c:05:f0:ea:d4:06:b2:f6:9a:6d:66:8f:
51:65:8e:93:62:9e:86:69:2c:48:4b:80:58:90:08:
db:3b:9d:4b:65:97:98:d6:c9:e9:6a:72:40:9a:70:
ae:40:4e:39:ad:48:ea:6d:2c:e3:ea:d4:fa:d8:1e:
e3:9f:46:87:d2:f5:76:a6:3e:82:46:b7:f6:b8:bc:
25:0e:55:61:31:b4:f8:38:65:0c:6d:0f:75:df:ab:
ef:a9:be:08:6d:8a:3b:7a:17:7b:96:c9:58:ae:75:
a2:49:5b:90:44:eb:2f:0f:fe:e7:91:c7:24:1e:e9:
21:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4B:E3:67:DC:D9:B6:F6:47:BB:7D:61:73:3B:EF:9B:F5:9D:8D:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4EBF4DE2A8211F1B1E840ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.37.0-154.198.39.255
154.203.206.0/23
154.203.212.0/22
154.203.217.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:4b:ee:02:03:d2:e9:5b:4a:55:59:96:90:ab:32:c6:3b:31:
f7:54:b5:22:fc:f8:20:fb:57:82:a0:75:cf:50:cd:2e:be:c7:
cf:9e:8c:95:f2:2b:c5:14:de:71:36:24:56:d2:65:d0:19:fa:
3a:62:8a:45:ba:ff:14:0a:2d:08:0e:eb:21:d8:68:c1:8a:2b:
7f:71:b7:b9:75:89:57:27:5f:4f:58:70:42:3d:cd:92:cd:86:
fc:75:4b:f5:ff:95:ec:79:7c:88:30:c5:51:46:69:97:0e:32:
48:29:64:bc:01:59:bc:43:a7:99:c0:e0:25:05:e2:aa:d1:0a:
c5:ef:32:ad:41:ad:90:25:63:16:ff:de:6a:bf:75:af:07:1b:
5f:0e:bc:41:fd:29:97:a2:37:5d:c3:b3:94:7b:9b:3f:4c:ec:
80:44:da:e0:6c:70:41:60:59:19:80:02:4c:9b:67:96:57:00:
d6:74:f6:92:1f:1b:fd:67:d4:bf:8d:cd:78:43:42:aa:0f:a5:
2b:8d:c7:8b:b7:c5:0b:ea:60:fc:20:84:74:1f:ff:5d:2f:f4:
88:41:3f:b5:fe:58:ba:c3:9d:30:bf:c1:b7:58:ee:48:b4:a5:
16:51:ac:5b:d5:51:ec:d7:0d:01:6a:36:41:f3:aa:72:0f:38:
8d:78:f5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:24:53 2026 by rpki-client