Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9BBBF0834B511F1BB7E0BDACE1D38B0.roa
File: F9BBBF0834B511F1BB7E0BDACE1D38B0.roa (raw, json)
Hash identifier: hPDZCVpUTmWF8cReuLbyKAJtx/+le/xD8w7E3a0v4+g=
Subject key identifier: 99:0A:A3:27:19:10:BB:A1:53:93:1D:58:56:9B:0F:0B:48:21:6E:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C45B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9BBBF0834B511F1BB7E0BDACE1D38B0.roa
Signing time: Fri 10 Apr 2026 08:19:21 +0000
ROA not before: Fri 10 Apr 2026 08:19:16 +0000
ROA not after: Sun 17 May 2026 08:19:16 +0000
asID: 54801
IP address blocks: 154.81.136.0/24 maxlen: 24
154.81.166.0/24 maxlen: 24
154.82.18.0/24 maxlen: 24
154.82.20.0/24 maxlen: 24
154.83.158.0/24 maxlen: 24
154.83.187.0/24 maxlen: 24
154.83.190.0/24 maxlen: 24
154.83.191.0/24 maxlen: 24
154.83.209.0/24 maxlen: 24
154.83.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 15:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115803 (0x1c45b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 08:19:16 2026 GMT
Not After : May 17 08:19:16 2026 GMT
Subject: CN=69d8b289-ea0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:96:00:91:04:82:30:10:81:b1:14:5f:b7:c1:
fa:50:bb:b0:c0:3b:ad:80:40:98:ee:66:33:a1:48:
50:05:95:22:cf:60:96:45:fc:98:c7:e5:f4:db:2a:
c7:48:08:c1:33:0d:d5:5b:ab:8a:5d:b2:d7:d6:4b:
52:f2:c9:bb:54:07:fc:58:e4:68:7e:7c:f4:2a:3a:
7d:52:f3:67:8d:9e:4a:e5:7e:ef:8d:c7:7e:11:9f:
b2:b9:e1:a4:79:6e:a7:f5:93:8c:2c:bc:90:63:4e:
7f:1a:f8:3a:07:1e:f3:6b:18:6f:b8:f9:17:29:ac:
04:c5:90:0f:6a:20:98:47:51:2a:de:a3:b1:d0:0b:
47:17:2d:1b:f7:87:16:2a:3f:db:b1:2f:4c:d3:af:
43:02:51:75:77:25:02:f4:11:27:96:41:dc:3b:cd:
e2:ec:e2:62:0d:cb:cf:25:86:69:80:1b:76:e6:00:
62:89:b8:9c:b2:8f:05:b8:80:ac:07:83:4c:8a:49:
58:c1:b4:73:45:2e:34:69:f6:cc:50:98:46:1c:28:
62:ab:75:df:bc:c1:ed:5c:0b:0b:32:ae:f9:0b:82:
56:22:aa:ce:a0:d0:10:82:e6:a1:40:8c:ba:34:8f:
66:67:ef:99:59:54:07:34:ce:6c:da:e8:63:b4:ce:
ea:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0A:A3:27:19:10:BB:A1:53:93:1D:58:56:9B:0F:0B:48:21:6E:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9BBBF0834B511F1BB7E0BDACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.136.0/24
154.81.166.0/24
154.82.18.0/24
154.82.20.0/24
154.83.158.0/24
154.83.187.0/24
154.83.190.0/23
154.83.209.0/24
154.83.211.0/24
Signature Algorithm: sha256WithRSAEncryption
64:5c:c1:42:c7:ca:3e:56:2a:d2:da:44:d0:7f:51:a9:ea:1f:
40:26:79:ca:c4:ed:31:90:ba:9d:04:e4:b5:b6:1c:12:81:1a:
7c:7a:4f:06:07:9b:c4:2f:19:c5:5f:88:5f:28:55:d1:d2:5e:
5f:b4:0b:69:8f:18:14:1e:b9:d4:ea:87:83:b0:40:90:cb:49:
c3:3c:e1:ac:a0:08:58:ce:41:b3:05:10:ef:8b:55:77:82:12:
92:69:77:00:41:5c:95:a7:02:c7:12:ef:3b:e0:d6:21:49:e4:
6a:bd:f6:61:ae:43:3a:dc:d2:39:98:25:5a:60:2e:18:f8:db:
fa:64:46:0e:18:90:57:c5:0e:72:87:37:45:21:cb:da:70:bc:
a3:2e:7e:14:19:33:37:9f:43:35:39:96:54:55:6f:39:64:49:
e7:86:22:74:bf:6c:c2:87:48:11:75:e6:e4:3e:f6:17:df:e7:
e6:08:9d:0d:9f:15:cc:93:ae:a4:cf:d0:00:f4:e0:f4:de:a8:
b2:c7:8a:6e:b0:79:98:67:15:62:96:98:d3:fa:5a:5c:09:7c:
db:0e:8d:20:91:61:eb:41:6b:27:40:8d:3a:2c:f4:41:a4:6a:
be:ad:bb:fa:d1:d0:e0:ec:c8:c6:98:a5:b8:5f:b6:31:c1:df:
35:30:62:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:42:07 2026 by rpki-client