Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/158ADB0C449111F185ABF4C8CE1D38B0.roa
File: 158ADB0C449111F185ABF4C8CE1D38B0.roa (raw, json)
Hash identifier: tSNM7R7luDOycoxfz8qZtupljxtJCcDJRWTvRMtOLNA=
Subject key identifier: 12:62:5D:66:F8:A1:6B:86:1F:E3:8A:6D:7E:7F:A0:EF:A1:9A:95:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C835
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/158ADB0C449111F185ABF4C8CE1D38B0.roa
Signing time: Thu 30 Apr 2026 12:35:35 +0000
ROA not before: Thu 30 Apr 2026 12:35:30 +0000
ROA not after: Fri 05 Jun 2026 12:35:30 +0000
asID: 202656
IP address blocks: 154.219.246.0/24 maxlen: 24
154.219.247.0/24 maxlen: 24
154.219.250.0/24 maxlen: 24
154.219.251.0/24 maxlen: 24
154.219.252.0/24 maxlen: 24
154.219.253.0/24 maxlen: 24
154.219.254.0/24 maxlen: 24
154.219.255.0/24 maxlen: 24
154.221.60.0/24 maxlen: 24
154.222.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116789 (0x1c835)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 12:35:30 2026 GMT
Not After : Jun 5 12:35:30 2026 GMT
Subject: CN=69f34c97-a9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c0:f8:82:b4:c7:e3:d3:a6:62:1f:6b:6d:81:
b5:9f:95:53:ca:4f:b0:fc:73:5b:bc:89:d7:45:25:
c6:8f:72:8d:39:e6:c7:6d:17:fd:ca:33:7a:f4:e2:
17:8c:15:d2:c2:f1:5e:cd:c1:83:56:69:ef:5c:72:
34:af:94:e4:79:36:2f:58:f5:eb:47:b4:4b:bf:84:
74:03:39:6d:24:ec:8b:9f:d0:a0:34:67:21:7b:6a:
ca:1c:db:ab:d0:17:a2:06:ea:26:cd:9e:53:99:76:
ce:02:6c:44:ae:5e:32:07:8c:fe:91:63:32:5e:64:
2f:21:c5:a7:c4:0e:38:87:af:ca:44:da:c7:12:b6:
44:30:65:79:24:97:ee:a3:0c:ea:a5:98:30:67:24:
42:9b:1a:33:10:56:64:cb:14:a7:de:29:8c:ea:15:
7c:1c:c6:0e:cb:b9:fe:bb:55:bd:22:d5:26:a9:56:
24:f2:77:05:00:dd:5a:59:23:de:e5:c2:40:f1:e0:
09:f7:a2:03:f4:20:3d:da:58:25:f1:a9:3f:61:93:
22:fc:e8:19:28:76:2e:f9:df:a8:1d:8f:db:88:b3:
90:87:f2:a3:6b:2d:e0:e3:10:f1:bc:21:de:b0:ec:
b8:7d:3d:22:2f:fa:75:4c:00:fc:fa:98:b1:69:2d:
03:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:62:5D:66:F8:A1:6B:86:1F:E3:8A:6D:7E:7F:A0:EF:A1:9A:95:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/158ADB0C449111F185ABF4C8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.246.0/23
154.219.250.0-154.219.255.255
154.221.60.0/24
154.222.192.0/24
Signature Algorithm: sha256WithRSAEncryption
64:77:f4:73:22:c9:d7:98:5a:63:62:2d:f3:c2:ad:3b:76:2c:
09:5b:6f:4b:f7:c0:5e:a5:c6:0c:0f:eb:bb:ed:0e:7f:4a:02:
fb:fa:2d:94:32:f1:4c:e0:47:dc:bc:32:63:28:86:f5:f6:22:
a6:d8:4c:5f:5c:2b:94:13:27:40:96:52:16:f4:98:0d:42:cc:
aa:e1:31:a1:b9:7c:0a:b1:dc:89:64:b0:cf:e1:5e:3e:eb:ee:
35:27:b3:6d:f2:27:33:44:9c:28:92:89:ad:75:b3:5d:91:c4:
a2:49:61:3c:93:81:b5:79:4c:c6:43:9e:06:96:16:3f:1d:41:
f5:45:2c:c8:b5:6a:15:c8:07:b3:5c:48:42:c8:d3:19:80:49:
97:5b:ba:c0:3d:df:81:3f:2e:99:1c:6f:e6:c1:95:e5:4c:16:
f3:14:48:c3:d5:c8:13:24:55:fa:1e:97:4f:9c:13:8b:d7:60:
55:e9:3e:70:bd:d6:2b:70:6f:d4:98:0c:33:49:af:ea:38:bf:
3f:40:f8:ae:ed:93:cc:ac:5b:00:fb:65:89:f5:95:f1:1a:82:
11:66:be:b1:ec:bd:39:a5:43:e4:82:62:be:e7:96:73:d9:12:
a4:34:22:6e:c5:f7:73:42:90:35:f9:52:17:71:8a:ed:e5:9b:
fd:3a:1c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:00:25 2026 by rpki-client