Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/317B848A4A0C11F1835220A4CE1D38B0.roa
File: 317B848A4A0C11F1835220A4CE1D38B0.roa (raw, json)
Hash identifier: X8bojenDojP7m0QsWrcwImMtKfdpQ3WX2iwOa4f+2eQ=
Subject key identifier: F2:D1:6B:0F:DB:26:20:61:B6:0F:FF:74:CD:4A:49:C4:BB:FC:07:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C9CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/317B848A4A0C11F1835220A4CE1D38B0.roa
Signing time: Thu 07 May 2026 11:59:26 +0000
ROA not before: Thu 07 May 2026 11:59:21 +0000
ROA not after: Fri 22 May 2026 11:59:21 +0000
asID: 141159
IP address blocks: 154.94.228.0/22 maxlen: 24
154.94.228.0/24 maxlen: 24
154.94.229.0/24 maxlen: 24
154.94.230.0/24 maxlen: 24
154.94.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117198 (0x1c9ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 11:59:21 2026 GMT
Not After : May 22 11:59:21 2026 GMT
Subject: CN=69fc7e9e-e035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:18:00:ec:78:f9:7b:03:e6:8b:48:e2:f5:86:
4d:3b:56:49:cc:71:d5:80:9c:c5:6c:2d:e2:d2:f1:
fe:5c:95:1d:7a:10:f6:01:14:e3:26:e6:73:87:2a:
35:92:0a:0d:3b:e2:d3:e2:37:e4:fc:4c:73:29:57:
7c:f7:d7:ad:66:40:bd:04:e0:e1:cf:95:80:09:5d:
7a:a2:b4:34:88:92:7e:0f:bd:78:bd:67:8e:b8:75:
f9:a6:04:80:6b:f4:4c:a8:4a:1c:e6:6b:87:53:45:
ec:b9:55:01:40:09:b8:d6:6f:08:02:28:9f:33:8f:
87:8e:8d:77:00:94:14:22:50:5b:c0:9a:95:06:b3:
a2:7c:99:bc:1a:af:b2:b6:04:c3:29:9e:68:8c:5d:
17:53:f5:8f:97:4f:d1:5e:b0:f4:2a:6c:5f:6e:a3:
74:76:41:8e:48:20:44:17:b1:43:65:53:74:8e:f4:
94:87:ad:b2:97:72:1c:c0:b4:61:48:f0:d7:3e:09:
90:08:e0:82:13:45:97:b0:33:b0:96:2f:04:b9:59:
05:07:c1:9a:02:a2:21:b9:eb:f9:14:dc:92:24:e0:
7d:51:93:57:d9:8b:40:97:3a:96:31:96:ca:8e:18:
b9:d3:c4:0a:fe:45:da:9b:3b:09:92:8a:27:9d:33:
d1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D1:6B:0F:DB:26:20:61:B6:0F:FF:74:CD:4A:49:C4:BB:FC:07:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/317B848A4A0C11F1835220A4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.228.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:cb:6a:7b:0a:4f:a9:c6:9a:85:4c:f9:e8:9a:57:1b:56:ba:
32:60:cb:7a:e6:da:87:1f:a9:ab:b2:27:cc:66:a0:76:03:2e:
b5:e4:f6:a2:64:88:a5:92:96:6e:ee:c1:73:13:5f:04:21:c4:
cc:d2:8c:f1:70:db:23:28:8f:dd:cb:28:f8:e3:aa:5f:f8:18:
28:d9:ce:3e:9e:56:66:df:b7:56:8f:c1:8b:8c:8b:80:9c:6f:
56:1d:75:71:c9:b9:01:8a:96:56:79:67:fd:06:55:31:ef:12:
72:b3:65:18:f3:9a:e3:22:91:29:f8:f3:2c:eb:59:f2:1c:71:
4f:ab:46:47:7f:98:08:43:c5:00:64:41:95:c5:3f:a0:97:0c:
b8:02:1c:e7:f2:0e:07:45:c5:45:43:21:1f:8d:e9:fb:d5:f2:
18:fa:8d:d3:3f:c7:ab:cc:ef:93:87:d3:79:5a:b5:9a:c5:0f:
63:e0:c7:0a:f2:0c:15:5a:7f:6f:f9:7d:3c:1f:8e:2d:b1:62:
99:92:c5:19:9e:47:ca:98:a9:00:b8:1c:b9:d6:d6:fa:0c:49:
85:28:84:07:78:b2:25:4e:a4:b1:3b:e8:41:dc:ed:bb:41:e1:
b9:e2:06:8e:b2:b4:f9:b3:37:6c:01:f2:dc:64:9a:79:9f:10:
e3:9f:59:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:03:40 2026 by rpki-client