Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30FB8784459411F19411FFEACE1D38B0.roa
File: 30FB8784459411F19411FFEACE1D38B0.roa (raw, json)
Hash identifier: JxfhftKX3OkjFPGXUtir5aS46MjlGOvDk2AZ2QVSkb0=
Subject key identifier: 43:FA:1B:2D:DF:E6:D4:AA:46:A2:FC:FA:37:4C:D0:1C:3A:7A:7B:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C8F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30FB8784459411F19411FFEACE1D38B0.roa
Signing time: Fri 01 May 2026 19:30:21 +0000
ROA not before: Fri 01 May 2026 19:30:16 +0000
ROA not after: Tue 09 Jun 2026 19:30:16 +0000
asID: 48031
IP address blocks: 154.210.239.0/24 maxlen: 24
154.219.94.0/24 maxlen: 24
154.219.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116979 (0x1c8f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 19:30:16 2026 GMT
Not After : Jun 9 19:30:16 2026 GMT
Subject: CN=69f4ff4d-8e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:27:e5:dd:3d:00:94:e6:a1:78:96:7a:1c:92:
1d:8f:a6:59:b0:91:94:2c:e4:a3:78:58:c2:8f:9d:
3b:19:52:4e:49:e0:01:0b:54:00:a4:ae:21:75:fd:
d1:ae:af:fe:1a:53:b2:a1:fc:92:06:f7:dd:14:43:
d2:4a:91:a9:9e:33:24:e2:56:8b:a1:4d:20:cb:e9:
6b:69:7a:4d:a3:22:f9:2b:b8:c5:d1:dc:b1:ab:ca:
be:e2:4e:ef:48:9a:db:4b:08:a1:00:46:4b:41:81:
5b:da:a9:7b:41:fe:5a:89:35:74:55:f2:14:2f:2b:
ba:3b:28:5b:8f:aa:b0:07:6e:39:d0:0a:64:52:af:
7f:af:53:27:9a:80:d1:0e:b2:8c:99:11:61:6f:b1:
5f:5e:e7:c5:2a:2c:ac:1f:5d:00:4b:fa:4c:49:d9:
1a:86:a0:82:6e:e8:5d:ea:5f:95:11:b9:27:8a:66:
fc:28:74:c1:ef:94:bf:e7:ee:2e:6c:e3:79:9b:7d:
a6:68:01:a1:66:3a:7a:c6:9c:a3:4c:b4:01:3b:95:
e4:06:cb:69:38:98:81:69:b9:ae:2b:20:29:1a:02:
be:63:57:7f:ec:ae:1b:08:fa:fb:1f:0f:11:86:93:
57:11:27:33:c7:95:79:50:82:18:8a:cb:89:9d:b0:
bf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FA:1B:2D:DF:E6:D4:AA:46:A2:FC:FA:37:4C:D0:1C:3A:7A:7B:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30FB8784459411F19411FFEACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.239.0/24
154.219.94.0/23
Signature Algorithm: sha256WithRSAEncryption
84:06:c2:50:07:e4:9d:43:3d:f7:a6:fd:c2:38:07:2f:23:a4:
15:44:65:5c:63:0d:91:65:14:c5:cd:d5:d0:6e:30:6f:9f:8e:
fe:ff:18:e5:55:2b:ba:81:46:b9:cd:6f:ae:52:8a:6f:06:03:
d3:67:55:7c:dd:5e:1e:54:ea:d2:82:09:00:9f:8d:1e:51:3f:
a1:fd:61:0e:be:62:12:4b:38:91:2f:fb:19:f8:3f:ef:07:59:
1e:74:70:a4:5c:b0:0f:20:64:d9:0d:48:56:c8:99:2d:77:24:
41:8e:14:68:0c:ca:51:24:22:f0:a0:70:2d:4d:ff:c2:ac:c4:
92:e5:d0:10:6c:c8:0a:6d:77:01:2c:96:aa:c8:8d:c2:8f:a8:
f1:25:d9:b1:df:ea:56:b0:e0:ee:82:9e:1c:87:96:64:7f:00:
e7:61:f8:d5:a9:3c:6c:d1:ec:c8:31:35:7b:fe:9b:64:07:35:
7f:3e:c1:ec:10:1a:24:99:0a:9b:28:71:10:e8:de:6f:52:10:
ed:fd:2a:ab:5d:3c:ca:97:c9:3d:c0:64:18:ed:38:dd:77:3f:
d4:66:77:3f:a2:a3:ad:21:07:0d:b6:b9:57:4e:6b:ff:3d:65:
b9:9f:f5:63:8f:a9:f7:be:1f:02:07:f3:ae:95:e2:fe:46:91:
c3:f5:44:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:18 2026 by rpki-client