Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8E5C176318A11F1AA2681DDDAE4EC9C.roa
File: D8E5C176318A11F1AA2681DDDAE4EC9C.roa (raw, json)
Hash identifier: SqQuRwqSKP2TJ0Ncp3nL6grsW+8ciXOIWEGb3VttgoY=
Subject key identifier: 4E:D6:1F:B0:05:27:3F:B5:D4:C8:C7:23:06:29:54:EF:B9:F2:CA:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C35A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8E5C176318A11F1AA2681DDDAE4EC9C.roa
Signing time: Mon 06 Apr 2026 07:33:04 +0000
ROA not before: Mon 06 Apr 2026 07:32:59 +0000
ROA not after: Fri 06 Apr 2029 07:32:59 +0000
asID: 17561
IP address blocks: 154.194.32.0/24 maxlen: 24
154.194.192.0/24 maxlen: 24
154.194.193.0/24 maxlen: 24
154.194.206.0/24 maxlen: 24
154.197.44.0/24 maxlen: 24
154.198.165.0/24 maxlen: 24
154.198.167.0/24 maxlen: 24
154.203.80.0/24 maxlen: 24
154.203.81.0/24 maxlen: 24
154.203.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115546 (0x1c35a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 6 07:32:59 2026 GMT
Not After : Apr 6 07:32:59 2029 GMT
Subject: CN=69d361b0-d12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8c:34:88:70:9e:7c:85:a4:5f:cf:58:a2:d8:
d8:57:ab:b6:7e:72:76:7a:de:ad:93:57:63:06:09:
4e:e6:a8:48:af:39:c2:dc:9c:fd:aa:27:ad:3c:e1:
ee:0e:f4:18:bf:86:8e:d2:fe:ef:79:3b:01:d0:b9:
51:c0:5d:ee:dd:f9:39:d4:aa:aa:50:6d:dd:50:0f:
e8:e6:fb:f8:e6:1f:29:a6:08:76:bf:09:b2:da:24:
88:e1:b3:f2:ac:9d:57:c0:5f:2d:ad:94:a9:dd:c2:
40:b1:ae:28:e4:7f:48:a3:4d:92:a1:12:93:91:57:
55:35:86:05:03:5a:0c:d4:fc:c1:0d:86:89:2a:a8:
43:50:15:f0:82:0c:1c:22:17:90:23:20:99:27:4b:
90:e3:9a:d3:f7:38:7a:f7:28:44:78:d2:1b:e8:63:
1d:ab:0f:3a:02:57:ea:60:7e:68:c6:05:a3:3f:fe:
f2:24:f4:fd:23:89:6b:11:47:35:77:a4:62:0f:77:
20:f0:38:94:7e:03:b2:f0:41:68:ef:7a:48:f9:0a:
6c:9c:2b:9c:52:b7:e5:e5:33:54:e8:48:32:6d:49:
ac:6c:2b:2e:bf:a9:6d:20:0d:42:39:ea:27:bd:32:
5d:81:a0:5c:71:13:bf:d6:a3:29:69:e4:17:4e:26:
38:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D6:1F:B0:05:27:3F:B5:D4:C8:C7:23:06:29:54:EF:B9:F2:CA:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8E5C176318A11F1AA2681DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.32.0/24
154.194.192.0/23
154.194.206.0/24
154.197.44.0/24
154.198.165.0/24
154.198.167.0/24
154.203.80.0-154.203.82.255
Signature Algorithm: sha256WithRSAEncryption
08:0f:95:7b:88:72:73:21:67:7c:c6:01:c1:b4:06:ff:a5:b4:
8d:c1:bd:a7:61:b5:76:a7:ca:4a:2f:a7:02:da:99:7d:ab:26:
30:dd:13:64:a8:0b:48:04:c1:16:33:2a:39:84:5c:7f:d4:44:
78:60:55:18:62:b1:5d:76:37:37:b5:90:69:59:f4:6b:5a:b1:
b3:f1:86:78:e8:60:87:fc:6c:05:5e:a2:eb:ff:1e:24:35:25:
7b:ce:6d:a5:af:59:f0:88:7b:5f:24:38:b3:6c:8c:18:3d:46:
3e:c6:0d:9e:08:d5:1a:8a:24:af:bd:d7:2f:fe:32:bc:39:6b:
4a:ea:74:bb:2a:1c:d5:6e:e9:1d:3a:45:fe:85:a1:bf:b3:67:
9d:03:ac:fe:e1:8c:d4:47:f3:9a:47:09:13:c4:3b:90:ac:77:
78:cf:54:ab:8e:99:81:9c:88:2b:ec:af:e3:a8:37:37:34:e7:
3b:25:a9:db:15:61:f1:68:28:6f:98:2c:cf:09:3d:51:bc:61:
e2:3c:b5:62:d7:60:81:e4:33:d1:65:93:e3:9e:3b:f8:00:51:
4d:e7:1b:33:61:4d:3c:fe:94:74:00:af:e4:64:a3:8f:20:31:
e0:03:37:a0:ba:9b:14:e5:f0:02:24:59:86:40:37:8e:0d:da:
dd:3c:35:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:55:30 2026 by rpki-client