Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3C1568C325311F1B5CBD9ECDAE4EC9C.roa
File: D3C1568C325311F1B5CBD9ECDAE4EC9C.roa (raw, json)
Hash identifier: xThV1Myzqi0ja9cA6JbUeJwxLownJLO9Hu7fKm5fHR4=
Subject key identifier: 93:0F:E0:CE:13:B8:C8:63:E4:28:F7:EB:72:6E:B0:6E:A6:05:32:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C36D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3C1568C325311F1B5CBD9ECDAE4EC9C.roa
Signing time: Tue 07 Apr 2026 07:31:44 +0000
ROA not before: Tue 07 Apr 2026 07:31:40 +0000
ROA not after: Sat 07 Apr 2029 07:31:40 +0000
asID: 17561
IP address blocks: 154.208.52.0/24 maxlen: 24
154.208.53.0/24 maxlen: 24
154.208.54.0/24 maxlen: 24
154.208.55.0/24 maxlen: 24
154.208.56.0/24 maxlen: 24
154.208.57.0/24 maxlen: 24
154.208.58.0/24 maxlen: 24
154.208.59.0/24 maxlen: 24
154.208.60.0/24 maxlen: 24
154.208.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115565 (0x1c36d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 7 07:31:40 2026 GMT
Not After : Apr 7 07:31:40 2029 GMT
Subject: CN=69d4b2e0-3f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:05:1f:e1:52:c8:a4:71:c2:78:56:f4:c1:55:
4e:7c:c3:5c:87:a0:0b:4e:2f:a6:3e:5f:1c:bd:86:
4e:d9:8d:9c:43:cb:1f:d5:b5:1f:fc:af:d0:02:08:
93:98:62:89:09:da:89:f7:3a:4b:f7:f0:79:66:23:
44:2f:f2:86:39:5b:64:aa:d3:bd:02:8d:95:51:0c:
ce:5a:03:f4:bc:68:57:de:1c:97:e0:32:3a:02:2d:
90:bd:f4:5a:85:cc:c2:6e:c0:ed:d4:45:86:53:1d:
2d:be:3a:24:d2:64:18:2b:22:24:69:33:01:bc:d2:
00:d0:66:03:13:6e:74:0b:7e:e3:ba:fb:14:be:57:
7c:0b:a1:c1:4e:93:e2:5f:25:77:26:e4:ad:f4:18:
dc:45:d2:0a:3a:e9:72:9b:c5:e5:d2:a7:fa:75:a5:
2b:d3:9c:9b:cc:5b:3a:de:59:04:a4:ec:e9:11:97:
ea:11:f4:9d:be:58:ea:2a:d1:74:f0:8d:5a:81:7d:
d8:71:e0:00:42:87:8a:a8:3e:f1:68:41:69:b3:fc:
41:84:e5:49:61:48:5f:c0:86:c8:02:39:de:41:02:
79:ee:17:13:28:52:68:53:a7:d0:47:cb:62:fc:40:
13:20:13:08:eb:16:c0:46:ae:2d:d4:13:5e:97:11:
1b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0F:E0:CE:13:B8:C8:63:E4:28:F7:EB:72:6E:B0:6E:A6:05:32:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3C1568C325311F1B5CBD9ECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.52.0-154.208.61.255
Signature Algorithm: sha256WithRSAEncryption
4a:30:bc:c2:a1:b6:09:24:34:f0:8a:2e:77:7c:ca:25:51:a5:
35:59:5a:32:d3:24:6c:b1:5a:3d:7b:d8:63:85:f5:67:b0:10:
b1:fd:af:40:13:39:3c:3c:29:a6:80:38:cc:f4:24:ce:61:56:
7a:8a:87:27:be:ac:f5:96:31:1d:ee:0d:a5:b8:e0:3a:ba:67:
2c:1b:8a:71:12:15:a5:10:7d:42:43:a0:90:b8:f4:7e:33:19:
af:5a:28:6b:a4:b0:50:bf:ea:d9:28:0a:ed:03:5d:3a:4d:89:
62:8f:66:72:26:59:43:77:7d:a7:9e:1a:ce:f1:11:31:eb:7a:
35:cb:c2:5a:c5:94:45:f7:fe:35:31:9e:93:fc:d4:fd:40:bb:
c2:d1:9d:1f:16:fb:8c:e9:a3:e5:44:0a:e4:58:5b:4c:4e:d3:
82:e5:22:49:d9:17:17:e1:b9:95:19:fc:cd:f2:bd:a4:99:7d:
ce:7e:1c:3f:22:92:49:8d:6d:39:84:5d:37:09:4f:32:79:cd:
97:ea:d0:d3:9d:e0:da:fa:9f:f9:fd:48:15:7c:11:15:e0:3e:
3a:97:c7:62:cb:7e:bd:7e:1d:6a:b0:c2:26:f1:15:13:34:19:
e8:cf:22:95:59:96:b7:58:b1:6c:f1:0e:02:1a:2d:c3:38:1e:
82:70:13:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:48:18 2026 by rpki-client