Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5B1604239A011F1BF5D73E4CE1D38B0.roa
File: C5B1604239A011F1BF5D73E4CE1D38B0.roa (raw, json)
Hash identifier: ieGagfsyTs1oycazCnpFY7M36OUxaJESg6XaN/VkKeI=
Subject key identifier: FA:01:8F:D4:B7:B3:BD:AC:20:46:BC:DE:B8:85:36:82:82:AC:B3:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C5AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5B1604239A011F1BF5D73E4CE1D38B0.roa
Signing time: Thu 16 Apr 2026 14:30:10 +0000
ROA not before: Thu 16 Apr 2026 14:30:06 +0000
ROA not after: Thu 30 Apr 2026 14:30:06 +0000
asID: 9304
IP address blocks: 154.200.43.0/24 maxlen: 24
154.200.51.0/24 maxlen: 24
154.200.52.0/24 maxlen: 24
154.200.129.0/24 maxlen: 24
154.203.241.0/24 maxlen: 24
154.203.242.0/24 maxlen: 24
154.208.76.0/22 maxlen: 24
154.208.84.0/22 maxlen: 24
154.212.144.0/23 maxlen: 24
154.212.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 15:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116138 (0x1c5aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 14:30:06 2026 GMT
Not After : Apr 30 14:30:06 2026 GMT
Subject: CN=69e0f272-7ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:91:96:90:74:7f:7b:f3:d0:4f:0b:13:97:
52:3a:62:93:4d:6a:30:30:a5:da:3e:d4:87:e1:16:
d2:82:b3:ab:a6:cb:b4:f0:2b:fd:13:e8:13:37:39:
91:0d:f4:9f:7b:82:4a:bb:28:cf:db:0b:54:84:94:
78:2f:bf:60:e5:1b:d4:41:03:b1:cc:77:d5:20:b4:
e4:2c:fc:2d:2c:38:e8:fe:30:4b:44:aa:44:57:db:
68:ae:35:62:aa:ed:42:fe:d9:71:32:ae:08:aa:c6:
cd:0a:c0:51:66:16:0e:49:d7:d4:4a:86:6d:6d:e7:
6e:f4:cf:c5:b1:6b:ee:61:e9:0c:87:8d:85:01:19:
8a:93:bf:af:46:49:2e:47:5a:27:c7:53:5b:03:7d:
2a:c6:43:9a:74:84:ef:2e:f9:6f:fa:d6:1d:96:4c:
fc:f0:6a:52:0b:a7:97:8e:86:25:6d:47:cb:d7:3e:
c8:23:8a:08:70:4b:b3:a3:7b:03:5d:ca:44:01:2f:
2d:85:a9:c2:ef:3d:c8:e0:9f:67:e0:32:78:ca:a3:
4d:bc:74:f2:bc:ee:ca:92:cc:5e:bd:cb:59:e6:eb:
0b:83:4a:a1:7b:42:08:3a:2e:bc:48:2d:57:9d:a3:
86:96:46:50:0f:34:ea:3f:e6:4c:6a:6b:b0:07:fd:
23:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:01:8F:D4:B7:B3:BD:AC:20:46:BC:DE:B8:85:36:82:82:AC:B3:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5B1604239A011F1BF5D73E4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.43.0/24
154.200.51.0-154.200.52.255
154.200.129.0/24
154.203.241.0-154.203.242.255
154.208.76.0/22
154.208.84.0/22
154.212.144.0/22
Signature Algorithm: sha256WithRSAEncryption
26:b3:9c:19:7f:fd:29:ce:66:bd:3b:77:10:a0:e8:74:39:0e:
0e:db:5d:21:5c:0b:20:f0:53:d0:dc:a1:85:a6:e3:6b:16:e9:
92:e9:0d:3c:59:69:f5:71:bf:14:01:1f:fc:13:87:d9:f0:c6:
51:c3:a0:af:9f:3a:03:ae:23:2f:5c:3f:17:c6:bd:17:71:a6:
2c:67:4d:0f:e9:d9:25:02:a2:c8:df:4c:c9:87:5e:84:e2:dc:
67:77:9b:db:89:f1:e8:83:1f:40:3e:c0:56:4b:65:2d:2a:37:
9e:1e:67:af:2d:0a:6b:6c:6c:2c:71:ac:85:55:8d:4f:da:fe:
c0:6c:28:f8:31:c3:84:67:9b:3d:90:1a:85:cb:e2:58:c8:df:
54:d9:ea:a9:9d:29:14:26:d8:4a:a8:32:e2:08:4d:40:d4:9c:
7e:8c:a7:62:3a:c1:1e:b2:c1:0e:9b:c4:4b:6d:f4:39:ad:c7:
19:0f:fc:9b:18:f7:87:9e:25:5f:55:11:25:42:68:b9:d8:87:
6b:ae:f7:2d:cd:24:6d:8d:ec:a6:26:87:4b:37:89:8b:e4:6b:
e6:87:2d:fa:94:a6:74:21:fb:fe:66:cc:b3:ce:37:22:1a:e6:
fb:39:25:49:a3:11:f9:15:8c:61:54:94:e6:06:d9:b6:28:4e:
6f:e3:17:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:37:40 2026 by rpki-client