Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7485748399F11F197DA0FE0CE1D38B0.roa
File: E7485748399F11F197DA0FE0CE1D38B0.roa (raw, json)
Hash identifier: +0NIWuFKZDDrzXAA1IP3jvGoESgm+arq5DpvJWqoX9I=
Subject key identifier: C2:1B:88:31:29:2F:89:8D:9D:40:C1:41:EC:12:3E:05:D8:A7:22:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C5A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7485748399F11F197DA0FE0CE1D38B0.roa
Signing time: Thu 16 Apr 2026 14:23:57 +0000
ROA not before: Thu 16 Apr 2026 14:23:52 +0000
ROA not after: Thu 30 Apr 2026 14:23:52 +0000
asID: 401783
IP address blocks: 154.82.134.0/24 maxlen: 24
154.82.148.0/24 maxlen: 24
154.82.153.0/24 maxlen: 24
154.82.158.0/24 maxlen: 24
154.82.181.0/24 maxlen: 24
154.82.196.0/24 maxlen: 24
154.82.197.0/24 maxlen: 24
154.82.198.0/24 maxlen: 24
154.82.199.0/24 maxlen: 24
154.83.65.0/24 maxlen: 24
154.83.67.0/24 maxlen: 24
154.89.132.0/24 maxlen: 24
154.90.65.0/24 maxlen: 24
154.90.128.0/24 maxlen: 24
154.90.134.0/24 maxlen: 24
154.90.136.0/24 maxlen: 24
154.90.137.0/24 maxlen: 24
154.90.140.0/24 maxlen: 24
154.90.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116136 (0x1c5a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 14:23:52 2026 GMT
Not After : Apr 30 14:23:52 2026 GMT
Subject: CN=69e0f0fd-dfa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:18:4c:ba:97:4b:56:ae:a3:81:66:b1:f6:
1f:73:76:10:06:cc:34:21:1d:7c:16:5b:9e:ea:77:
2e:25:5d:5a:a4:1b:1f:d7:75:02:04:dd:38:b9:8f:
79:e2:87:5a:f6:96:bb:19:a6:c4:a8:4c:ba:f2:ab:
eb:56:04:5b:40:94:89:3a:0a:fc:cb:1a:33:ff:2f:
93:54:8b:4b:a7:10:ef:a3:6d:9e:6f:f2:d0:24:c9:
ca:28:bf:f1:2e:f7:70:b8:34:5b:96:31:e5:a8:fb:
d3:93:1f:34:30:32:ee:17:f6:87:ce:89:be:4f:e1:
f2:06:92:00:3d:9d:49:69:39:03:c3:da:54:84:76:
8d:72:ef:d9:bd:3e:0a:b5:74:2a:a6:f5:9e:55:13:
0f:8b:93:12:15:4a:62:a2:1a:67:38:2e:33:07:b1:
af:7b:a6:66:86:da:cf:0e:d6:cc:ea:34:d7:a7:b2:
63:c4:4f:80:f4:ef:a2:33:35:3b:9a:e4:d8:b9:4e:
ca:a2:c1:53:35:0f:49:0d:d2:37:a7:0f:be:19:63:
1d:d6:14:35:63:d0:98:dd:d6:cc:f0:99:67:f6:a7:
2d:a3:3d:4f:00:a4:03:e2:62:fa:77:b5:a7:15:29:
32:a1:df:22:7e:86:9e:f4:1e:53:6e:23:ae:d1:b8:
9b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1B:88:31:29:2F:89:8D:9D:40:C1:41:EC:12:3E:05:D8:A7:22:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7485748399F11F197DA0FE0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.134.0/24
154.82.148.0/24
154.82.153.0/24
154.82.158.0/24
154.82.181.0/24
154.82.196.0/22
154.83.65.0/24
154.83.67.0/24
154.89.132.0/24
154.90.65.0/24
154.90.128.0/24
154.90.134.0/24
154.90.136.0/23
154.90.140.0/24
154.90.189.0/24
Signature Algorithm: sha256WithRSAEncryption
35:b4:51:a4:e0:35:eb:ab:a3:ca:70:8b:a6:7e:95:96:37:33:
60:60:33:15:31:25:bb:7a:0c:2d:69:ea:81:54:c5:f7:d7:ac:
ea:bb:a5:a9:2a:4d:59:2b:eb:09:7f:e4:51:a2:8b:e2:fa:5a:
94:29:d6:09:0c:ea:58:78:42:02:fb:6b:27:29:1e:92:fa:58:
d1:c7:92:35:e4:17:61:a3:f0:7d:6b:70:2f:4f:81:c9:da:be:
bb:4e:2a:fa:47:33:33:4d:15:23:16:62:d0:ac:1c:59:d4:e8:
f8:3c:46:0f:fd:12:7b:41:a5:ca:3f:33:1d:df:19:52:7b:75:
35:46:01:96:f9:b9:b3:7d:de:ff:ec:be:d2:e2:dc:2a:00:ac:
c9:b0:5d:b8:2b:09:44:91:dd:93:08:07:6e:d0:66:e4:4f:bd:
64:39:5b:d7:4b:bc:4c:47:f1:cc:72:4a:4e:8c:a6:e8:92:c0:
ef:4e:f2:af:d6:1a:c4:66:be:a3:16:4b:92:ff:e2:80:d7:86:
9e:d5:bb:b8:ed:4d:a3:b3:22:55:0e:42:8c:1b:fe:11:c8:8e:
fe:99:31:07:f5:11:39:f3:75:de:74:aa:09:89:a5:56:fe:49:
46:2c:e2:5b:37:5b:d3:45:15:36:8d:78:05:9c:95:ac:cf:cd:
e8:96:e8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:20:35 2026 by rpki-client