Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0938B4565B3D11F1861A48BFCE1D38B0.roa
File: 0938B4565B3D11F1861A48BFCE1D38B0.roa (raw, json)
Hash identifier: eGyQAxH/+YtxkqLU1lpk6a+QcMUWJ5rl7AxWjApGesU=
Subject key identifier: 27:2B:C4:65:77:EC:78:EA:5E:DD:F3:E3:02:1B:BD:0C:E1:5E:C4:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D058
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0938B4565B3D11F1861A48BFCE1D38B0.roa
Signing time: Fri 29 May 2026 09:01:53 +0000
ROA not before: Fri 29 May 2026 09:01:49 +0000
ROA not after: Thu 02 Jul 2026 09:01:49 +0000
asID: 44559
IP address blocks: 154.203.216.0/24 maxlen: 24
154.203.218.0/24 maxlen: 24
154.203.219.0/24 maxlen: 24
154.203.220.0/24 maxlen: 24
154.203.221.0/24 maxlen: 24
154.203.222.0/24 maxlen: 24
154.203.223.0/24 maxlen: 24
154.203.226.0/24 maxlen: 24
154.203.227.0/24 maxlen: 24
154.203.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Jun 2026 00:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118872 (0x1d058)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 09:01:49 2026 GMT
Not After : Jul 2 09:01:49 2026 GMT
Subject: CN=6a195601-f62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:61:21:09:f3:8f:88:80:96:b4:0f:08:55:56:
0e:5f:e1:a2:ab:50:1f:b7:f6:66:01:e8:71:c5:02:
a8:6a:17:93:70:45:36:fc:91:f5:3e:bb:a6:fe:0b:
33:11:07:f5:d0:92:97:cf:09:f1:d0:50:75:78:72:
f4:fa:f6:c0:9d:6e:21:43:ae:dc:23:9d:dc:ca:cc:
e1:38:f4:06:bd:ca:72:ca:5f:5c:34:51:02:f3:c6:
26:c0:ad:0e:67:2d:dd:d1:16:b1:43:5c:2a:12:7f:
1f:7b:4b:ac:9f:28:0a:08:5b:4b:e5:7c:be:45:19:
30:ab:57:89:8b:0a:9b:6e:26:31:3e:1c:12:33:e2:
74:95:98:63:d8:24:f6:8f:25:2f:65:4e:1d:c0:01:
7e:73:68:23:e2:af:2a:83:ee:c9:da:e0:91:93:ac:
d9:80:fc:e8:16:41:fd:08:7e:ef:87:e5:0a:1b:23:
f0:7a:1f:e5:84:3f:d7:f1:9f:a9:d9:25:0c:ac:b1:
08:04:17:4c:09:a0:a0:bc:22:8f:1a:06:39:69:9a:
f7:92:d8:27:e9:a4:bf:db:00:7c:d4:e5:3e:6a:16:
5c:b7:e5:b8:98:ab:bf:fc:0c:11:af:2f:b1:b6:1b:
aa:cf:ad:4f:24:f3:b6:62:46:db:0e:60:bd:10:32:
86:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2B:C4:65:77:EC:78:EA:5E:DD:F3:E3:02:1B:BD:0C:E1:5E:C4:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0938B4565B3D11F1861A48BFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.216.0/24
154.203.218.0-154.203.223.255
154.203.226.0-154.203.228.255
Signature Algorithm: sha256WithRSAEncryption
66:42:fd:02:f6:40:36:62:38:68:2b:99:93:86:3a:36:fe:d6:
82:bb:f5:d8:4e:02:d3:bb:7b:d2:b7:2e:36:5c:03:2e:78:6b:
14:50:bf:9c:17:0e:ad:33:0b:f6:64:a9:97:39:0a:15:b0:68:
79:cf:6a:cf:95:d3:bb:b3:a2:19:bd:ad:b7:83:2b:40:eb:5a:
3f:a6:0d:4b:81:1c:59:f1:5e:2c:a4:6c:c5:69:79:a5:23:ef:
4c:cc:50:9b:1a:79:39:4f:81:14:da:73:f6:9b:12:46:4e:a6:
24:15:ec:7f:d7:21:51:54:0c:ee:f2:e4:9e:a9:94:fb:2b:2f:
12:af:53:b6:b3:1d:71:2a:b2:52:2e:6c:b0:ff:55:ad:b1:e8:
71:31:60:fe:1a:4b:4b:13:77:9e:b4:8d:d0:3f:c2:40:cb:bf:
09:28:5c:e9:99:28:f0:15:fd:c5:36:1c:50:3c:4d:a0:47:66:
08:81:65:bc:d3:19:ed:95:9a:6c:02:ca:ca:ae:c2:ab:15:73:
88:86:6e:b1:9b:c0:7f:58:00:19:0c:22:a5:fa:64:7a:c2:8b:
d8:dd:b6:d9:fe:fa:e9:b1:2a:80:f4:6d:12:9e:88:fa:7d:2d:
9c:d1:1c:ad:3f:02:1c:a3:ce:1c:5f:1a:51:27:de:64:c6:fe:
97:b2:2f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:32:01 2026 by rpki-client