Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/079C4A3C3C8D11F1BA1CD6CBCE1D38B0.roa
File: 079C4A3C3C8D11F1BA1CD6CBCE1D38B0.roa (raw, json)
Hash identifier: 5QsZDobJNz5jbQf+cDKVKg9IR9oZQJv2AtmGJUuxRXY=
Subject key identifier: A2:E3:82:A4:24:E7:66:63:34:6E:2E:88:2C:CA:AE:41:53:14:EA:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C60C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/079C4A3C3C8D11F1BA1CD6CBCE1D38B0.roa
Signing time: Mon 20 Apr 2026 07:46:24 +0000
ROA not before: Mon 20 Apr 2026 07:46:20 +0000
ROA not after: Wed 27 May 2026 07:46:20 +0000
asID: 138915
IP address blocks: 154.203.142.0/24 maxlen: 24
154.203.143.0/24 maxlen: 24
154.203.144.0/23 maxlen: 24
154.203.163.0/24 maxlen: 24
154.203.164.0/24 maxlen: 24
154.203.166.0/24 maxlen: 24
154.205.140.0/24 maxlen: 24
154.205.157.0/24 maxlen: 24
154.205.158.0/24 maxlen: 24
154.205.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116236 (0x1c60c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 20 07:46:20 2026 GMT
Not After : May 27 07:46:20 2026 GMT
Subject: CN=69e5d9d0-086f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f8:c9:ab:a5:75:c0:2f:61:cb:b9:e4:d0:b5:
f7:5d:41:12:e1:d3:40:e0:e4:0e:b0:76:37:b4:aa:
a6:5a:f0:53:79:13:f6:98:09:03:1d:d1:72:bf:76:
4b:74:f2:52:d3:3f:3b:23:20:2a:4e:e9:d0:8d:69:
d9:b6:0f:9f:fc:18:db:4e:9f:e2:dc:d2:9b:eb:bf:
d2:eb:7d:8d:79:da:14:28:66:2e:a1:7b:42:cb:54:
71:66:6f:28:28:d8:f8:cf:cf:c2:38:01:36:49:9c:
b4:a2:b6:86:c7:da:28:63:8a:16:51:95:e8:e8:ee:
9c:20:72:a3:4b:63:46:59:60:b8:83:44:77:01:19:
f4:a4:63:82:a6:5a:ea:77:85:8a:ed:fe:cb:23:ca:
18:fb:d4:73:0a:11:f1:b3:a5:5e:58:89:41:46:83:
03:f9:bd:f2:1e:d5:d1:f2:bc:c4:ba:3e:a8:8b:0b:
5d:15:15:96:04:09:88:8e:39:85:ae:9a:a0:7f:b4:
ec:b9:8f:c1:91:67:37:ea:a8:5e:52:4d:86:f3:45:
c9:07:52:7d:91:10:ac:38:45:0b:d4:f9:f0:4b:9e:
52:2e:2c:ad:c0:cf:bf:4b:d5:cd:45:87:c4:c4:94:
be:9c:f7:c4:8f:fd:da:07:20:fb:ae:8e:26:95:85:
67:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E3:82:A4:24:E7:66:63:34:6E:2E:88:2C:CA:AE:41:53:14:EA:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/079C4A3C3C8D11F1BA1CD6CBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.142.0-154.203.145.255
154.203.163.0-154.203.164.255
154.203.166.0/24
154.205.140.0/24
154.205.157.0-154.205.159.255
Signature Algorithm: sha256WithRSAEncryption
53:3a:9c:96:b8:c7:67:46:78:98:68:25:37:0c:12:bb:38:aa:
cc:a5:43:24:b6:f7:33:8a:7b:19:57:83:3c:bf:07:cb:7f:01:
a4:aa:45:d2:e1:28:93:a2:e0:e9:56:83:12:c2:30:e4:c1:7c:
ea:d3:6a:ea:7e:0d:b5:e7:9f:51:94:b4:72:92:28:3e:27:69:
1a:3b:c8:2b:87:c4:a1:cd:78:32:3b:d1:c6:41:06:2a:ed:5e:
cb:00:4b:9c:2a:16:17:42:eb:02:a5:dd:ac:0c:87:21:43:f2:
0a:48:90:52:1f:e9:e3:3e:c7:33:d0:39:25:4e:7b:39:1e:33:
53:c9:22:99:36:ef:61:13:ab:7d:fa:18:ba:c2:ed:3f:38:41:
d8:39:77:9f:34:f1:71:e3:82:92:41:1c:f2:a5:50:40:9a:06:
51:70:14:13:20:3e:ed:25:57:a6:1d:f9:58:84:c1:43:89:bd:
7e:39:f9:8c:72:14:72:bf:95:17:ec:18:03:c2:9d:e3:8b:e9:
55:a5:54:7d:33:70:92:55:e7:f2:9e:46:31:e6:f2:8b:47:6f:
3a:f3:d7:3c:c1:fd:31:a6:a1:83:2b:a6:90:31:46:49:3d:eb:
97:c9:be:c7:e2:72:41:11:9a:96:d5:b0:49:02:af:f1:e2:e3:
08:59:d3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:00:12 2026 by rpki-client