Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2506026344D11F1A7E5F6F5CE1D38B0.roa
File: D2506026344D11F1A7E5F6F5CE1D38B0.roa (raw, json)
Hash identifier: K8fXApn1M0cce1MgzXV9kxyjabItZTaLcm6Wv+ztIlI=
Subject key identifier: 1C:A9:81:2B:39:F4:10:7B:18:D8:F4:0E:1A:84:AB:B1:96:D4:E6:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C42C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2506026344D11F1A7E5F6F5CE1D38B0.roa
Signing time: Thu 09 Apr 2026 19:53:47 +0000
ROA not before: Thu 09 Apr 2026 19:53:42 +0000
ROA not after: Mon 09 Apr 2029 19:53:42 +0000
asID: 17561
IP address blocks: 154.81.64.0/24 maxlen: 24
154.81.65.0/24 maxlen: 24
154.81.66.0/24 maxlen: 24
154.81.67.0/24 maxlen: 24
154.81.68.0/24 maxlen: 24
154.81.69.0/24 maxlen: 24
154.93.252.0/24 maxlen: 24
154.93.253.0/24 maxlen: 24
154.93.254.0/24 maxlen: 24
154.93.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115756 (0x1c42c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 19:53:42 2026 GMT
Not After : Apr 9 19:53:42 2029 GMT
Subject: CN=69d803cb-7278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c0:d1:7e:32:1b:bc:4d:05:cc:2a:60:69:cd:
63:f9:32:c9:7c:0e:00:fc:3f:a7:11:24:61:17:9e:
e4:cc:e4:42:b5:d2:7d:5a:1b:c1:a8:6a:0a:5d:80:
b3:43:b5:66:f3:eb:9c:dd:27:04:74:0a:4a:6e:f6:
79:df:ee:f9:5b:4d:0f:54:1e:de:37:1a:cb:05:fb:
dc:9d:cb:50:36:8f:b5:e8:85:5a:a3:d1:e5:9b:a1:
1a:1c:b9:11:f6:36:44:c1:f2:78:0f:cc:1d:52:9f:
ec:44:d8:54:20:67:96:b4:4e:4d:ca:54:92:43:51:
2a:33:fd:f6:3c:96:12:ab:a1:19:9d:7c:49:f7:db:
38:6e:f9:6d:66:a2:0e:0f:69:09:bf:44:ae:f8:35:
55:23:6e:87:09:f5:e1:6a:fb:0c:05:3a:3f:fe:f3:
ab:6a:da:83:8d:5f:d7:ee:8a:b4:07:e8:3c:ad:e8:
57:4b:e5:d2:20:5a:ba:32:4d:68:8f:32:0e:b7:b6:
17:7e:90:21:7f:c5:62:5a:84:56:b8:ae:f8:f8:12:
2c:00:91:41:14:1d:21:36:94:0e:96:7c:94:9a:28:
6e:8a:57:6c:1c:e9:37:af:ea:6d:7b:45:d1:62:23:
b8:1f:ff:ea:fe:b8:8d:97:64:60:d1:56:c2:db:d7:
0d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A9:81:2B:39:F4:10:7B:18:D8:F4:0E:1A:84:AB:B1:96:D4:E6:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2506026344D11F1A7E5F6F5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.64.0-154.81.69.255
154.93.252.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:7d:c0:4d:ce:1d:f5:4e:53:b3:f1:01:87:1d:2a:f6:0a:4d:
71:3d:d4:27:3a:4d:28:f5:29:b6:99:ba:5f:cf:f1:24:5a:46:
fb:95:19:4a:e4:50:8e:7b:8b:8d:98:ad:d9:11:9b:1b:6e:71:
b0:01:4e:8b:07:e4:47:88:bd:55:bf:f9:f7:96:13:3a:22:77:
23:84:52:e8:f6:31:f5:86:aa:8f:ee:2a:43:76:70:a7:d9:b6:
e3:df:de:46:8d:2e:a0:d1:d4:55:75:cc:42:32:11:41:e5:2b:
6b:87:77:ac:41:7d:f1:cc:39:c0:5a:ac:87:b6:dc:d4:68:ba:
e0:52:e1:2f:d9:1f:f6:f7:32:c8:c6:e2:eb:eb:9c:d7:a7:12:
1f:04:c5:29:d7:69:21:a5:44:aa:29:d1:95:5f:70:a9:13:dc:
56:d8:1d:2f:53:69:53:8e:a7:42:50:bd:57:5f:d3:15:fa:8c:
9d:df:34:93:20:07:77:68:bc:67:86:a6:c2:3b:e1:26:05:9d:
e3:e3:bf:9d:6f:a7:99:5e:98:0f:1e:8e:e0:3e:3c:97:a6:47:
f1:e7:b6:fa:60:7c:3c:3d:33:04:bd:c3:de:03:bb:61:d2:6d:
66:d1:a9:ad:a3:3e:53:12:5a:1b:97:85:27:9e:34:a0:d6:88:
68:50:8b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:54:51 2026 by rpki-client