Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/103DD58E3CCE11F1B2227ACFCE1D38B0.roa
File: 103DD58E3CCE11F1B2227ACFCE1D38B0.roa (raw, json)
Hash identifier: 53VOS4kFgW19UQjZuHdg8bJGqV+zNbVxa1ox7jQMlOU=
Subject key identifier: 66:E0:59:93:7B:6F:32:0E:76:AF:AA:AB:AD:B4:8A:67:E4:AE:73:22
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C636
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/103DD58E3CCE11F1B2227ACFCE1D38B0.roa
Signing time: Mon 20 Apr 2026 15:31:56 +0000
ROA not before: Mon 20 Apr 2026 15:31:51 +0000
ROA not after: Wed 27 May 2026 15:31:51 +0000
asID: 63139
IP address blocks: 154.94.92.0/24 maxlen: 24
154.94.93.0/24 maxlen: 24
154.94.94.0/24 maxlen: 24
154.94.95.0/24 maxlen: 24
154.94.96.0/24 maxlen: 24
154.94.97.0/24 maxlen: 24
154.94.98.0/24 maxlen: 24
154.94.99.0/24 maxlen: 24
154.94.100.0/24 maxlen: 24
154.94.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116278 (0x1c636)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 20 15:31:51 2026 GMT
Not After : May 27 15:31:51 2026 GMT
Subject: CN=69e646ec-e523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:10:36:22:e9:58:5c:26:b8:e8:84:c5:64:52:
82:fc:a1:31:f2:5c:e9:cb:21:eb:b7:af:da:4c:b4:
49:39:da:b9:b8:07:8a:f6:79:9e:b0:e2:a7:45:9c:
b1:6f:ec:f5:74:1c:26:cd:b9:2a:8a:05:05:25:ea:
99:0c:5f:6d:43:34:9d:0b:f9:50:31:82:54:d2:2e:
a5:66:0d:25:a9:8a:04:bb:e8:2a:6f:20:3c:0a:82:
33:b3:e7:ba:90:2f:d0:46:06:33:05:5e:35:4a:73:
74:2e:b8:36:b4:28:e8:7a:32:02:7d:32:75:f8:78:
d4:95:9e:be:e6:ac:ee:0b:41:87:e2:75:62:eb:1a:
1f:5e:b6:69:a5:21:bd:55:cc:9b:70:a0:05:23:7d:
b3:a4:fe:3a:0d:1e:3a:42:df:35:31:c9:ab:b9:fb:
1c:4d:19:f4:49:92:b9:8b:93:a0:08:d1:a4:f6:c9:
5a:49:82:e3:51:42:1d:e1:bb:ab:78:ec:a2:ba:d7:
96:50:05:00:15:1c:c9:bc:28:c0:d4:c9:5b:32:91:
94:d8:9a:94:e4:eb:c9:d5:74:4b:95:64:0a:4f:d7:
aa:e8:a0:24:54:3b:51:de:7a:c1:69:75:ba:9f:1f:
dc:9b:f1:e0:33:2c:46:6f:0d:91:c5:d6:3f:c9:c1:
66:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E0:59:93:7B:6F:32:0E:76:AF:AA:AB:AD:B4:8A:67:E4:AE:73:22
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/103DD58E3CCE11F1B2227ACFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.92.0-154.94.101.255
Signature Algorithm: sha256WithRSAEncryption
05:1f:11:81:d0:46:6e:e0:91:35:45:46:0f:cf:b0:ac:a9:e0:
34:c9:5a:ca:d3:9c:c0:f4:b9:27:d4:81:22:6b:4c:83:52:4b:
36:d0:f8:6b:1a:a2:0d:c8:87:2e:ad:0f:e5:7d:f1:37:0e:22:
12:58:4e:54:70:29:6a:41:a7:63:4b:41:2b:72:7e:ec:42:ce:
ef:94:14:1c:75:a3:95:52:ef:cc:15:78:c4:5d:b8:f1:28:b6:
78:34:6f:da:24:3a:c2:ea:e4:3a:86:69:59:12:11:ec:53:20:
0f:03:ab:92:61:bc:1e:fb:26:bd:15:55:9e:6a:f2:45:8f:5f:
a2:f1:b1:ee:5c:7d:81:0a:c0:88:fa:1b:15:c4:e3:af:be:ec:
92:55:e4:5a:d0:49:9b:c8:b1:ec:5c:75:ec:73:e2:b7:e8:3e:
1e:31:7e:ef:7e:33:86:cb:c7:62:7c:0d:08:5b:1d:f8:48:69:
d1:38:7a:e4:aa:30:ab:04:32:b0:d7:8c:70:59:e6:7b:0b:95:
38:cf:8f:bf:3f:e9:2f:fa:20:f6:54:15:66:3e:3a:a8:e5:d5:
1c:00:1c:b7:14:6f:e0:48:84:e7:47:a7:a0:08:ac:68:a3:19:
4e:81:e0:5d:7a:55:fc:12:59:d6:39:78:54:6c:75:2c:ba:97:
a3:fe:83:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:13 2026 by rpki-client