Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3B5179E343611F181A2DCEBCE1D38B0.roa
File: C3B5179E343611F181A2DCEBCE1D38B0.roa (raw, json)
Hash identifier: gOToBvbto70Yty82id19dZonV5h0yOD2s5jZkQwozwM=
Subject key identifier: CA:9C:DA:4D:44:A5:58:5B:32:BF:E7:2B:B1:5E:47:9C:E3:68:E3:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C420
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3B5179E343611F181A2DCEBCE1D38B0.roa
Signing time: Thu 09 Apr 2026 17:08:44 +0000
ROA not before: Thu 09 Apr 2026 17:08:40 +0000
ROA not after: Mon 09 Apr 2029 17:08:40 +0000
asID: 17561
IP address blocks: 154.86.204.0/24 maxlen: 24
154.86.205.0/24 maxlen: 24
154.86.206.0/24 maxlen: 24
154.86.207.0/24 maxlen: 24
154.86.208.0/24 maxlen: 24
154.86.209.0/24 maxlen: 24
154.86.210.0/24 maxlen: 24
154.86.211.0/24 maxlen: 24
154.86.212.0/24 maxlen: 24
154.86.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 15:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115744 (0x1c420)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 17:08:40 2026 GMT
Not After : Apr 9 17:08:40 2029 GMT
Subject: CN=69d7dd1c-b0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7b:d9:ed:a9:bd:a1:f1:b6:fe:f1:13:aa:01:
4e:44:d0:cd:23:42:f4:69:25:97:48:7c:0c:d8:af:
72:8e:45:53:a9:21:12:31:44:f8:30:6d:68:49:9d:
b7:8e:d6:8f:31:4c:56:4a:73:b9:db:00:66:c3:01:
fa:20:fa:7e:6e:38:c4:94:88:e9:27:37:65:ac:49:
75:13:a1:69:33:81:63:e2:53:0b:e7:1d:14:7a:b1:
ac:e1:ab:b8:f1:fa:e6:2b:2a:ae:ed:21:dd:68:2d:
a4:ba:85:c2:80:e4:71:9a:4a:19:60:dd:e4:0d:8c:
d0:a8:17:3d:cc:4f:0e:29:1e:b5:d8:13:36:0e:a1:
fd:4e:0f:c4:8b:08:56:6c:bb:84:c9:17:88:19:c7:
c3:9a:62:24:0c:3a:fc:94:e5:ae:99:c2:1d:3f:b6:
a2:ca:db:f8:fd:b8:1c:b6:71:fc:b8:af:cf:db:bc:
28:43:76:58:82:e0:25:15:b2:3a:88:09:68:ab:9f:
8e:b4:f1:1a:f8:53:15:39:78:3a:94:0c:0a:ce:b6:
fe:2d:3a:5b:40:8d:cc:eb:40:16:f3:eb:ce:ba:4c:
52:36:8c:ba:69:99:b8:b9:9a:e7:fe:b9:16:0e:b0:
f6:2b:11:b3:bc:68:0c:f1:7f:88:0e:f6:20:8d:d0:
f9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9C:DA:4D:44:A5:58:5B:32:BF:E7:2B:B1:5E:47:9C:E3:68:E3:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3B5179E343611F181A2DCEBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.204.0-154.86.213.255
Signature Algorithm: sha256WithRSAEncryption
a2:32:f2:50:3e:37:a9:a8:95:4c:3d:9a:3d:75:35:bb:0b:3f:
67:94:b9:ff:03:8f:ee:fb:1a:4e:a3:09:08:2a:b0:a1:ae:90:
c0:c1:40:02:c6:cf:59:0e:b7:3a:33:05:d9:23:49:1e:35:df:
2a:d5:ce:54:e2:0c:54:ac:ba:0d:13:8c:ea:19:f3:03:b1:97:
b1:0e:91:69:8e:54:d7:1e:62:80:b3:a8:ad:c7:92:41:3b:5c:
31:6d:9e:46:b5:3c:ad:74:19:38:89:c6:31:46:2e:e0:79:71:
ec:7e:ec:ff:6e:37:d4:26:35:9c:0b:0b:b8:ee:7f:dc:fc:e4:
55:de:27:36:aa:6a:24:cd:1d:a5:d3:12:be:dd:b3:0f:65:3b:
f3:fa:c8:d4:3c:51:51:bf:cb:c8:54:09:a6:4d:19:55:c0:e0:
09:a9:a6:d5:e1:b1:f5:be:92:6f:02:08:7b:4b:4e:6b:24:5e:
c2:df:75:66:a3:db:8c:09:40:b3:ba:aa:ec:3d:dc:f2:9e:ca:
84:88:49:24:1d:02:ab:c1:e0:2d:cf:35:23:03:6a:fc:15:56:
9b:a5:c4:9c:bb:c0:fc:4c:73:9c:31:db:74:01:a7:6a:51:c8:
b7:6b:d4:1f:7a:4c:c2:71:b5:f0:a3:2d:68:93:14:5f:44:fa:
c2:e8:82:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:07:06 2026 by rpki-client