Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0224754E30D911F1A9E24AD1DAE4EC9C.roa
File: 0224754E30D911F1A9E24AD1DAE4EC9C.roa (raw, json)
Hash identifier: LN1ANUcx7xWKseeI6iwUUTGxhcisffucKl0fkmu4Q+g=
Subject key identifier: 33:92:DE:95:9C:B7:F3:DD:B8:B1:18:AD:0A:58:45:0B:AA:A0:E8:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C316
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0224754E30D911F1A9E24AD1DAE4EC9C.roa
Signing time: Sun 05 Apr 2026 10:20:03 +0000
ROA not before: Sun 05 Apr 2026 10:19:56 +0000
ROA not after: Sun 03 May 2026 10:19:56 +0000
asID: 213169
IP address blocks: 154.83.91.0/24 maxlen: 24
154.83.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 18 Apr 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115478 (0x1c316)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 5 10:19:56 2026 GMT
Not After : May 3 10:19:56 2026 GMT
Subject: CN=69d23753-c675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c2:0b:9f:a8:e4:e8:16:00:41:e2:a3:0e:ea:
fe:19:96:4b:6d:14:a2:21:1d:66:78:75:64:95:a3:
c7:15:94:62:ea:82:25:35:f1:3b:80:c6:d8:e0:aa:
7b:fd:1e:b1:9f:52:37:e6:72:f4:aa:22:de:84:3c:
6f:73:44:77:1b:32:7a:ae:1c:7a:51:bd:e4:73:45:
46:a4:82:de:7e:2d:a1:a5:90:a4:1c:56:03:02:79:
1a:f4:6e:72:68:20:e4:9a:50:23:12:be:9c:ab:06:
e2:8c:ca:2e:0d:f8:6c:e3:fb:cb:a2:d3:18:64:8d:
e8:ee:fd:42:db:de:33:33:21:ce:eb:fa:ac:b8:6a:
42:16:71:96:23:cd:61:1a:73:81:27:03:d0:41:15:
1b:20:84:94:2d:50:9e:f4:95:c0:ad:2f:cc:df:c4:
00:b5:b4:04:aa:3a:99:87:86:d4:94:b6:b9:66:93:
8b:a9:1e:d6:b2:f6:d7:9c:52:d6:1b:4b:fd:74:ce:
fa:34:ab:26:39:54:75:95:19:56:c1:a7:be:55:6f:
bb:f4:72:bc:6e:da:54:fe:7c:a9:59:52:27:d4:0f:
ee:d0:a4:36:b7:03:8f:b5:0a:60:e6:92:3c:a5:8b:
b3:b7:be:10:eb:8c:18:d0:6e:16:f4:75:78:1e:6f:
46:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:92:DE:95:9C:B7:F3:DD:B8:B1:18:AD:0A:58:45:0B:AA:A0:E8:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0224754E30D911F1A9E24AD1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.91.0-154.83.95.255
Signature Algorithm: sha256WithRSAEncryption
06:26:a3:b4:48:86:56:bb:4b:b2:4c:da:e5:21:b4:87:4d:51:
c7:7d:6f:44:a8:08:9f:1b:8f:34:6e:9f:b0:d2:c0:14:75:87:
e1:f0:1f:ff:58:ad:89:a9:ad:fd:54:84:d1:0f:69:03:a2:87:
28:be:70:17:f1:b3:c0:09:29:8d:27:19:9a:60:fc:eb:dd:79:
33:37:ce:73:8d:ff:c6:4b:7b:d7:1e:41:55:6e:5f:61:e6:8c:
78:6c:30:12:ee:41:9d:d0:37:0d:cb:35:13:9c:25:45:f1:73:
8c:b0:ce:c7:e6:48:6d:9a:03:8f:d9:d2:d6:28:54:b6:c3:bf:
ac:66:d8:d7:49:81:ee:2d:64:85:64:87:ce:30:e3:70:c9:ea:
40:e9:bf:02:3f:86:f0:85:a6:2f:e1:be:69:47:90:63:63:e7:
24:24:18:b4:b6:a0:67:a1:5a:df:a2:88:1c:1e:c0:c0:d4:99:
60:68:34:50:ba:8c:21:68:c8:e2:59:9d:66:32:b0:56:3c:11:
6d:9a:2b:72:25:9c:e2:ee:4a:b2:6f:4e:eb:34:b5:9d:e6:9c:
51:b7:73:1d:4f:d6:68:fa:e7:a6:44:b7:73:45:bc:c7:cd:6c:
f2:40:b7:04:03:ee:54:13:9d:78:1e:45:b5:51:bb:22:06:d4:
59:53:e7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 14:15:57 2026 by rpki-client