Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/282886183E5311F1A7FD2DB6CE1D38B0.roa
File: 282886183E5311F1A7FD2DB6CE1D38B0.roa (raw, json)
Hash identifier: FQmC2kIs/bxjdG0ccqwZ3y0ZpXadxyIRkAFJinxx5pk=
Subject key identifier: DE:F4:14:5A:6F:BB:34:1D:58:CB:F1:35:B5:26:05:50:D4:B8:87:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C67D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/282886183E5311F1A7FD2DB6CE1D38B0.roa
Signing time: Wed 22 Apr 2026 13:57:10 +0000
ROA not before: Wed 22 Apr 2026 13:57:06 +0000
ROA not after: Tue 09 Jun 2026 13:57:06 +0000
asID: 395793
IP address blocks: 154.196.208.0/24 maxlen: 24
154.196.209.0/24 maxlen: 24
154.196.210.0/24 maxlen: 24
154.196.211.0/24 maxlen: 24
154.196.212.0/24 maxlen: 24
154.200.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116349 (0x1c67d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 13:57:06 2026 GMT
Not After : Jun 9 13:57:06 2026 GMT
Subject: CN=69e8d3b6-966d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:4e:86:19:7b:de:0e:b9:cc:30:8d:64:25:
87:04:34:b2:f8:20:1b:a0:52:67:2f:f5:4d:de:c6:
61:5b:cc:f4:db:72:37:f9:e4:f9:81:6a:33:31:e3:
0c:22:44:1f:75:8d:b2:8f:00:98:eb:da:5b:ff:d8:
65:93:ba:d5:2d:f7:fb:67:33:cb:50:49:97:2d:d3:
f7:e7:a7:23:1b:83:10:52:9d:ae:e9:6d:6f:5d:02:
9d:60:f6:37:09:9a:af:30:20:5e:b6:95:0a:d6:f6:
5a:bc:2d:08:0a:27:63:34:95:5a:ab:d6:f1:89:bf:
ee:8d:d3:42:f4:d8:af:dd:a4:76:e1:59:49:30:13:
81:76:c7:0e:99:2e:65:3a:79:fb:6e:96:d6:04:29:
f9:92:9c:30:98:a8:34:ba:8c:ab:ff:a9:6e:c6:40:
0e:3b:8e:27:f8:3b:19:84:c1:a3:c7:9f:6e:48:01:
bb:96:d4:3a:5f:ec:f0:ff:af:ba:66:b2:a0:32:cc:
c2:4e:e2:7f:87:1f:2f:fe:7e:aa:4d:32:74:e9:6a:
40:a5:46:f7:98:e8:36:49:1c:d3:58:66:b2:df:fd:
32:cd:60:de:22:19:ed:f5:9e:28:f5:53:1a:78:75:
2e:04:73:1c:da:7a:56:70:b1:8e:c9:33:0c:68:05:
08:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F4:14:5A:6F:BB:34:1D:58:CB:F1:35:B5:26:05:50:D4:B8:87:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/282886183E5311F1A7FD2DB6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.208.0-154.196.212.255
154.200.63.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:42:b2:cc:9f:10:fb:4c:81:b5:e0:ad:71:42:51:3d:96:2c:
ce:de:d1:d5:28:6c:0e:da:a1:90:41:ac:d8:47:08:07:1e:7c:
2a:c9:4e:43:95:1e:10:bf:22:69:2d:f2:76:3e:55:da:72:20:
30:d8:40:ab:03:ea:a3:ee:be:d0:ed:a7:91:03:9e:ef:a7:e7:
5b:a7:0d:bd:0d:97:20:36:b7:aa:88:00:ab:8e:be:70:d3:82:
c2:69:cf:43:84:6c:88:54:62:ab:3f:14:ce:62:2f:e2:fa:20:
ae:bc:0c:94:8e:44:fc:dd:99:d1:dc:ac:cc:89:4d:2a:bf:17:
62:d6:61:9b:a1:7c:31:31:76:d0:c2:ee:04:e5:bf:d0:6b:5f:
e6:27:c2:23:7c:54:6e:cb:1b:76:f0:af:46:94:76:e2:78:08:
6c:ac:a1:57:d0:08:a5:13:95:26:93:39:a9:53:d8:7e:cc:a5:
38:63:b1:de:7f:ae:fe:19:4a:e1:93:f2:96:b9:b8:b0:28:69:
b1:0a:1b:79:24:a8:c7:dd:04:00:8e:e5:e5:a3:e5:e3:30:25:
9d:e0:14:a7:92:cf:8a:d5:e8:5a:aa:ea:f5:3b:32:af:56:16:
b5:5a:3e:77:91:2d:61:d1:51:dd:7f:13:2f:b3:19:2d:ae:4a:
40:17:90:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 10:59:54 2026 by rpki-client