Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3147CA2A57C011F19B929AFCCE1D38B0.roa
File: 3147CA2A57C011F19B929AFCCE1D38B0.roa (raw, json)
Hash identifier: MflNgspCY9M/Lk2yYwWc6iq+rkLWMnJ22rWiQcEMjKQ=
Subject key identifier: C8:34:30:88:BD:67:87:8A:0C:18:D9:12:78:C2:E1:24:10:E3:7C:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CF0A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3147CA2A57C011F19B929AFCCE1D38B0.roa
Signing time: Sun 24 May 2026 22:30:40 +0000
ROA not before: Mon 25 May 2026 22:30:35 +0000
ROA not after: Mon 21 May 2029 22:30:35 +0000
asID: 17561
IP address blocks: 154.194.228.0/24 maxlen: 24
154.194.229.0/24 maxlen: 24
154.194.230.0/24 maxlen: 24
154.194.231.0/24 maxlen: 24
154.217.224.0/24 maxlen: 24
154.217.225.0/24 maxlen: 24
154.217.226.0/24 maxlen: 24
154.217.227.0/24 maxlen: 24
154.217.228.0/24 maxlen: 24
154.217.229.0/24 maxlen: 24
154.217.230.0/24 maxlen: 24
154.217.231.0/24 maxlen: 24
154.222.88.0/24 maxlen: 24
154.222.89.0/24 maxlen: 24
154.222.90.0/24 maxlen: 24
154.222.91.0/24 maxlen: 24
154.222.92.0/24 maxlen: 24
154.222.93.0/24 maxlen: 24
154.222.94.0/24 maxlen: 24
154.222.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118538 (0x1cf0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 25 22:30:35 2026 GMT
Not After : May 21 22:30:35 2029 GMT
Subject: CN=6a137c10-d097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e1:9b:8a:85:e6:bd:13:4a:f2:12:c1:db:51:
66:a7:2e:2f:2b:8c:49:3b:16:b3:72:d2:ba:e9:4d:
ad:48:3f:08:c2:b5:47:ea:d9:3f:d5:e2:ec:3e:4d:
8b:bb:21:10:f4:eb:0a:54:dc:69:99:d9:3f:4a:78:
f1:6c:71:34:9a:87:e9:cf:7d:0e:3a:a4:ec:0d:06:
70:55:07:e4:bd:c9:37:07:2b:e8:7b:53:53:13:30:
11:1a:a4:06:61:b8:b9:aa:90:63:84:c7:93:cf:c8:
40:d2:fa:45:6c:74:85:ba:d3:79:42:ef:89:fc:01:
e1:96:fb:8f:0d:5f:e4:98:d7:39:7e:c7:68:80:8f:
02:6c:9a:6c:c4:4d:b1:5f:0e:03:27:77:da:a8:b9:
5b:7d:46:0f:9e:ef:c9:d2:a3:c5:71:b6:75:d7:aa:
21:fc:ed:bb:28:a0:7e:73:b3:20:77:55:69:7c:2a:
13:29:65:2a:3c:ee:96:ce:7b:a4:e6:a2:9b:09:3f:
26:ed:e2:97:15:b2:7f:e3:03:f0:ac:ce:c9:f6:04:
9c:a3:ea:1d:a3:c5:d7:92:df:87:31:14:3c:0a:67:
4e:29:f8:4f:f8:2a:8c:c6:4c:f4:56:e9:18:b8:31:
53:b9:43:c0:14:5d:a9:79:11:7a:8f:07:72:81:69:
f4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:34:30:88:BD:67:87:8A:0C:18:D9:12:78:C2:E1:24:10:E3:7C:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3147CA2A57C011F19B929AFCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.228.0/22
154.217.224.0/21
154.222.88.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:0c:1e:7c:78:6d:62:cf:7f:fb:70:85:4d:27:cd:0f:c4:1b:
29:35:3f:2d:f6:8c:46:c8:9b:cf:f9:45:44:d0:17:ed:b2:b6:
d6:23:f2:bd:75:52:9d:1c:71:b4:bd:a2:47:f7:fd:ea:80:52:
25:ed:9c:d7:9f:f7:9e:f4:dc:2f:82:cc:ee:37:91:e9:b1:57:
60:6d:11:e3:df:8f:96:e7:9b:aa:73:93:f1:17:ca:10:9c:4d:
1a:21:22:d0:4a:b9:68:cd:22:ba:1e:80:c5:4c:d7:7e:01:dd:
3e:30:4a:70:76:b6:14:68:a5:0e:b9:b4:f7:7f:89:08:4e:3f:
b8:a2:93:24:7c:c5:ad:f3:8b:ac:f9:71:e7:fa:35:f2:da:59:
be:95:89:df:4c:42:f8:8f:19:6a:a0:fd:28:fd:cc:70:5f:86:
c1:6a:24:32:77:57:dc:e5:a4:dc:2b:19:a3:91:84:79:29:26:
c5:72:09:e3:d4:ba:e8:c0:47:3f:9e:be:62:b9:07:7e:a7:53:
8d:28:eb:7a:55:98:e5:3a:65:50:2e:ca:ea:f6:89:0a:d6:5e:
c0:23:0c:a6:66:cb:63:c7:0a:01:53:c5:c4:c9:a1:e7:02:6f:
17:8c:42:55:e6:02:b0:23:91:ad:bb:62:49:a0:0e:5e:fc:0e:
7e:4b:69:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:42 2026 by rpki-client