Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17EDF244460811F1A1D9B6BACE1D38B0.roa
File: 17EDF244460811F1A1D9B6BACE1D38B0.roa (raw, json)
Hash identifier: pd9EqpsBqqmBEh8JS1VS58zNopWuZfKGg3yRlBWL3/Y=
Subject key identifier: F6:14:CF:96:F7:FB:D1:AD:D0:B9:32:9F:AF:C9:D1:0C:F5:EB:7D:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C91C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17EDF244460811F1A1D9B6BACE1D38B0.roa
Signing time: Sat 02 May 2026 09:20:00 +0000
ROA not before: Sat 02 May 2026 09:19:56 +0000
ROA not after: Tue 09 Jun 2026 09:19:56 +0000
asID: 138915
IP address blocks: 154.90.32.0/23 maxlen: 24
154.90.34.0/23 maxlen: 24
154.90.36.0/23 maxlen: 24
154.90.38.0/23 maxlen: 24
154.90.40.0/23 maxlen: 24
154.95.72.0/22 maxlen: 24
154.95.100.0/22 maxlen: 24
154.95.104.0/22 maxlen: 24
154.95.112.0/22 maxlen: 24
154.95.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117020 (0x1c91c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 09:19:56 2026 GMT
Not After : Jun 9 09:19:56 2026 GMT
Subject: CN=69f5c1c0-c6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:27:52:97:13:91:d6:cd:d5:c9:85:e8:99:61:
0d:9e:a0:29:0c:9e:3d:50:5e:8a:8a:60:a7:55:51:
49:37:fb:2b:ff:4e:12:37:b7:8d:d0:2b:c8:bd:55:
59:10:8e:ce:20:43:a6:18:42:31:2a:c7:6c:4f:8c:
80:33:51:06:ef:c5:5e:be:27:a5:ca:5f:ea:98:d5:
fe:e8:b9:49:e6:b7:36:b7:48:d2:3e:7e:45:85:8d:
20:de:9d:68:ba:a7:a4:02:34:d9:c7:8e:92:8d:92:
b0:02:b9:e2:8b:41:25:92:9d:34:af:5d:3c:aa:d0:
95:8c:4a:5c:b0:ea:a1:fc:ad:60:d5:60:cd:e1:c9:
38:ac:70:ec:af:c7:cb:fa:59:5d:45:c0:f7:0c:52:
d9:09:c9:62:58:f5:d9:a7:64:98:e2:51:0d:00:8a:
fc:bc:8d:02:de:cc:d6:b8:e7:2e:c4:ac:4a:86:d5:
07:a1:b2:8e:d4:3a:8f:24:14:50:b8:16:61:ea:82:
ff:5c:08:11:8f:cb:73:f9:57:87:d4:ff:6f:10:64:
df:b1:06:d4:7f:17:e8:a3:9e:32:97:d4:6e:9e:36:
aa:01:07:7b:e7:83:db:08:b5:75:c7:cf:15:53:9c:
f7:7c:1c:33:71:e1:d5:12:91:14:d3:70:75:0a:52:
dc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:14:CF:96:F7:FB:D1:AD:D0:B9:32:9F:AF:C9:D1:0C:F5:EB:7D:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17EDF244460811F1A1D9B6BACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.32.0-154.90.41.255
154.95.72.0/22
154.95.100.0-154.95.107.255
154.95.112.0/22
154.95.120.0/23
Signature Algorithm: sha256WithRSAEncryption
56:cf:98:79:ad:fd:b7:67:ad:a9:40:a3:4c:ac:d7:ec:45:80:
c4:00:d2:6b:95:48:07:f4:22:26:f4:95:b0:75:fc:e1:0f:88:
3b:02:4b:98:3a:5e:a4:fc:87:fb:b5:56:dd:22:7c:1f:9f:57:
46:21:35:cd:4e:3a:36:32:9e:0c:b1:c9:fe:eb:34:59:22:b1:
f5:75:36:fb:1e:0b:55:42:a2:b7:eb:4c:49:29:84:fa:64:e2:
84:46:c6:14:d2:43:75:b0:29:cd:2a:86:0c:dd:8e:43:5f:66:
c3:16:83:29:60:d7:70:d9:4b:a4:8e:8f:d1:b5:81:a3:6f:9f:
29:a6:34:5f:71:50:55:ba:09:27:6b:06:42:7a:3c:30:9a:d3:
5d:4b:53:39:ea:c7:0b:92:d9:13:aa:bc:07:e8:5b:5d:12:f7:
66:0d:34:cb:1b:4e:38:72:c0:ac:ad:d0:3a:18:76:1e:76:cf:
59:d6:4c:d7:95:f8:56:f5:0a:e4:29:b2:57:cd:ae:32:9a:ce:
69:b8:97:1f:60:dc:54:e1:4e:36:a4:2f:17:79:1a:89:cc:f8:
f8:63:af:ec:b7:9b:cf:5b:81:ef:19:5c:10:d7:27:7f:13:50:
31:90:7a:a9:75:c2:b8:ad:66:31:8e:cf:5d:2c:f6:68:62:fb:
39:85:b3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:05 2026 by rpki-client