Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D369EA63F1D11F19A6A1709CF1D38B0.roa
File: 0D369EA63F1D11F19A6A1709CF1D38B0.roa (raw, json)
Hash identifier: 91qYKB3BM0tqL2mTs3FAIOXUHS1FWc/us5kKn7uMDdk=
Subject key identifier: ED:DC:00:BD:15:84:FA:BD:9A:0F:85:78:A9:3F:01:D5:E7:DC:B5:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C6E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D369EA63F1D11F19A6A1709CF1D38B0.roa
Signing time: Thu 23 Apr 2026 14:02:24 +0000
ROA not before: Thu 23 Apr 2026 14:02:18 +0000
ROA not after: Fri 29 May 2026 14:02:18 +0000
asID: 134365
IP address blocks: 154.194.248.0/21 maxlen: 24
154.194.248.0/24 maxlen: 24
154.194.249.0/24 maxlen: 24
154.194.250.0/24 maxlen: 24
154.194.251.0/24 maxlen: 24
154.194.252.0/24 maxlen: 24
154.194.253.0/24 maxlen: 24
154.194.254.0/24 maxlen: 24
154.194.255.0/24 maxlen: 24
154.198.40.0/22 maxlen: 24
154.198.40.0/24 maxlen: 24
154.198.41.0/24 maxlen: 24
154.198.42.0/24 maxlen: 24
154.198.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 29 Apr 2026 00:07:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116455 (0x1c6e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 14:02:18 2026 GMT
Not After : May 29 14:02:18 2026 GMT
Subject: CN=69ea266f-3212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d7:84:86:f6:eb:89:ca:77:53:b3:f6:c3:20:
2c:3d:a6:15:9d:aa:67:28:63:63:07:6c:5f:e5:f4:
9b:a7:6f:60:96:ff:58:06:a8:3b:8c:02:de:99:ba:
a0:42:a6:46:81:fc:32:47:05:fa:17:c6:1e:e8:83:
68:18:af:d5:31:20:82:9d:63:4f:27:30:c7:68:2d:
f0:ad:64:44:5d:e0:7b:96:51:2a:4c:af:6a:92:0a:
c2:e2:b2:f6:1c:a9:e7:14:19:e3:2e:14:2e:18:32:
4f:2e:52:18:8b:8c:d6:99:8a:ad:2f:73:24:4b:4e:
19:99:63:8d:7d:52:f8:14:28:82:1b:42:8d:b0:65:
c6:c3:2f:95:76:63:aa:0e:98:36:10:c6:81:eb:48:
49:74:51:cc:1d:8d:28:79:b2:d2:8d:19:6e:5f:4a:
1c:c9:f4:26:bb:cf:ca:84:bb:04:e1:0d:ec:9a:91:
6c:bf:f4:8a:08:f2:74:a3:d8:e5:ce:1d:55:66:92:
cc:e6:d9:e8:8e:16:13:de:bb:62:f2:11:c7:d7:b8:
fe:8c:ee:f8:67:91:8a:8e:1f:dc:73:65:9b:6f:98:
cc:09:6d:b9:90:7c:cd:75:ed:da:ff:4a:a8:12:2e:
a4:1c:10:3a:3b:79:78:22:eb:2b:01:ed:95:8c:62:
45:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DC:00:BD:15:84:FA:BD:9A:0F:85:78:A9:3F:01:D5:E7:DC:B5:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D369EA63F1D11F19A6A1709CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.248.0/21
154.198.40.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:02:8f:1d:50:17:ba:6b:b8:a7:e6:2e:8c:f7:43:23:3b:82:
e6:57:d8:c6:3a:c4:c9:5d:9e:e3:47:da:b9:f6:bf:61:69:37:
c8:2e:01:1c:31:bf:b5:b0:54:5e:32:27:f1:1b:e7:19:6a:c3:
d4:70:c2:1f:36:d0:f1:e8:68:c1:a9:55:02:35:1b:c6:81:cb:
7e:04:74:7e:f2:47:d4:79:75:a7:85:e7:eb:6f:67:4f:d4:ce:
38:34:4d:38:f6:30:7c:d8:2d:ae:a7:4b:0b:cb:f2:c4:93:e7:
48:25:14:10:e9:01:23:85:9e:cf:23:00:dd:f6:1b:23:ab:c9:
b5:6b:20:2a:3e:78:31:70:6f:74:6c:2e:09:cb:af:10:28:0e:
7a:21:ee:3d:29:f9:ee:ad:05:e8:a8:c3:eb:66:f3:be:2b:fa:
c4:ed:6f:ad:f7:d1:d3:b4:df:f5:66:14:96:89:84:69:75:fc:
c9:81:32:b5:b5:ec:d3:ae:e3:a1:d8:b2:48:61:16:88:10:d0:
00:85:75:07:2e:b0:3d:08:4d:61:38:11:c9:26:b8:99:b4:bf:
48:15:61:82:39:79:42:ae:76:20:1c:9f:95:33:28:d6:94:2a:
f3:62:59:f6:dd:b6:2e:72:d3:8d:ba:20:3a:07:e0:a4:e6:6f:
ee:74:6d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:16:22 2026 by rpki-client