Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6C7D75833EF11F1BBBB0BC2CE1D38B0.roa
File: F6C7D75833EF11F1BBBB0BC2CE1D38B0.roa (raw, json)
Hash identifier: wA0BACK+NJxh2/JSQidJF9pSLkcPD1yKpT4MNWRwviw=
Subject key identifier: F3:49:D2:CF:46:F6:4B:9B:D4:37:D7:41:5F:0B:AB:04:BB:25:66:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C3A1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6C7D75833EF11F1BBBB0BC2CE1D38B0.roa
Signing time: Thu 09 Apr 2026 08:41:56 +0000
ROA not before: Thu 09 Apr 2026 08:41:51 +0000
ROA not after: Mon 09 Apr 2029 08:41:51 +0000
asID: 17561
IP address blocks: 154.93.232.0/24 maxlen: 24
154.93.233.0/24 maxlen: 24
154.93.234.0/24 maxlen: 24
154.93.235.0/24 maxlen: 24
154.93.236.0/24 maxlen: 24
154.93.237.0/24 maxlen: 24
154.93.238.0/24 maxlen: 24
154.93.239.0/24 maxlen: 24
154.93.240.0/24 maxlen: 24
154.93.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 15:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115617 (0x1c3a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 08:41:51 2026 GMT
Not After : Apr 9 08:41:51 2029 GMT
Subject: CN=69d76654-ac4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d3:7e:03:2f:30:4f:b3:0d:16:a4:82:22:7e:
3b:36:14:d1:ed:6a:c6:5e:d5:16:a8:f4:d5:af:b8:
0b:1f:66:ee:16:a2:c9:6a:94:78:35:65:62:c7:70:
08:2c:40:6b:d1:63:4a:ba:45:18:f5:38:2f:7b:e2:
96:b1:e6:97:5c:77:ad:11:dc:52:5a:e7:a3:9d:3a:
71:89:1b:55:03:ea:01:b1:f3:bb:ae:ae:ef:55:8f:
b4:28:12:1f:03:4d:cd:92:f0:db:69:8e:02:45:19:
e2:db:2c:04:9e:2b:9c:8d:db:70:6d:10:b8:35:91:
22:67:a4:27:05:fe:04:a6:9b:1d:2e:3f:8c:08:80:
f6:28:24:6c:5c:36:1a:4f:cb:f5:79:3f:d4:40:b4:
7a:12:49:d2:12:90:bc:d6:ae:88:63:22:2d:ba:83:
3b:27:00:14:85:94:45:7e:bd:d9:af:0c:4f:aa:6f:
a3:69:1d:fb:dc:24:cc:42:22:19:ac:c5:4d:91:97:
53:91:21:d1:e3:09:0e:13:e9:36:d2:97:ac:c7:a0:
91:4f:e8:fd:19:79:27:83:e2:54:f4:1d:a3:cc:af:
cc:32:6d:8c:93:e8:c2:eb:f3:80:98:51:63:4b:54:
f4:3e:0c:a6:9b:9e:bf:2d:81:78:76:d4:3f:9b:b9:
6e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:49:D2:CF:46:F6:4B:9B:D4:37:D7:41:5F:0B:AB:04:BB:25:66:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6C7D75833EF11F1BBBB0BC2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.232.0-154.93.241.255
Signature Algorithm: sha256WithRSAEncryption
62:a8:c6:49:f1:aa:43:f3:36:93:f6:df:4a:24:e5:a2:ba:00:
c5:49:46:82:99:9a:95:3d:5e:36:fe:38:7b:da:07:c6:11:61:
39:96:26:1c:80:05:fe:be:8d:04:1e:d9:c6:93:3a:d9:83:43:
d8:ec:a8:af:95:08:7e:6e:c1:49:38:06:07:de:46:96:8c:25:
fa:6a:a0:ae:80:ce:c2:56:9b:2c:40:5a:a8:b2:5a:68:ad:fe:
5b:31:c0:1d:32:97:83:be:37:e3:07:1b:89:e7:ce:ce:e0:ab:
6f:d3:03:34:d9:59:e3:cd:bf:be:44:b2:3a:f1:57:fd:ec:13:
dc:c3:b0:16:98:82:ff:21:8b:9c:7d:37:82:60:fd:29:1d:da:
7b:b5:b7:ff:0a:1c:db:28:df:41:11:c4:5e:65:00:f8:42:34:
b5:2b:a3:dc:6d:78:7f:b3:4f:43:75:57:d0:c4:de:74:3b:9f:
a2:58:5b:2c:08:2b:ec:76:9d:f1:ba:cf:16:6a:de:89:a5:69:
1f:27:3c:8d:0b:15:0b:19:d2:75:9b:dc:b0:ca:e8:14:ca:d9:
6f:c3:74:70:2c:bf:78:26:5f:5f:d7:c3:99:a9:09:f9:41:7e:
84:f4:c5:fb:17:5a:c1:0b:56:6e:a1:f2:72:57:13:6d:3c:e7:
a3:dd:1f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:23:13 2026 by rpki-client