Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3202890C478811F1A81A27DBCE1D38B0.roa
File: 3202890C478811F1A81A27DBCE1D38B0.roa (raw, json)
Hash identifier: 4HSzmiCDaBdXiWw4FbXEYqE4+mNXVyMJcDlmN3QwefU=
Subject key identifier: CE:2C:41:08:FF:E0:78:75:2F:72:0F:75:17:0C:90:5E:B0:73:F3:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C951
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3202890C478811F1A81A27DBCE1D38B0.roa
Signing time: Mon 04 May 2026 07:09:31 +0000
ROA not before: Mon 04 May 2026 07:09:25 +0000
ROA not after: Mon 08 Jun 2026 07:09:25 +0000
asID: 45194
IP address blocks: 154.84.192.0/24 maxlen: 24
154.84.194.0/24 maxlen: 24
154.84.231.0/24 maxlen: 24
154.84.232.0/24 maxlen: 24
154.84.233.0/24 maxlen: 24
154.84.234.0/24 maxlen: 24
154.84.235.0/24 maxlen: 24
154.84.236.0/24 maxlen: 24
154.84.237.0/24 maxlen: 24
154.84.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117073 (0x1c951)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 4 07:09:25 2026 GMT
Not After : Jun 8 07:09:25 2026 GMT
Subject: CN=69f8462b-c5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:48:d2:4c:11:49:b3:0f:d5:be:05:99:80:
58:bb:c6:d2:aa:e1:a0:40:02:e4:91:73:a5:60:a6:
64:51:fc:4c:0f:0e:4d:24:1b:a2:13:d4:7d:e8:72:
60:40:5c:0e:16:94:42:84:90:77:ff:05:55:c2:86:
13:9c:6d:32:75:b6:15:89:b0:12:40:18:1d:2c:a6:
e7:dc:a9:00:8d:f8:68:cb:f5:72:0c:d6:6c:d0:a7:
e3:86:4c:4f:8c:94:25:5e:a5:19:67:b5:12:93:49:
a0:f5:36:42:8f:9f:7e:c5:29:d5:6c:a3:06:83:07:
ed:63:43:83:92:1e:e5:be:4e:af:0e:92:ca:a7:c8:
ca:fc:a0:55:9c:92:34:63:f7:e5:a6:e4:2f:af:8e:
f2:69:b7:e4:fa:6f:aa:3e:42:5b:3c:fd:4b:8a:f9:
3e:c5:b4:d9:63:7d:d4:7e:91:da:31:06:13:46:13:
55:d7:1a:33:1b:08:e0:10:c0:54:2d:e7:6a:72:ad:
32:fc:4b:4d:63:da:3d:aa:88:d8:bc:62:99:06:6f:
be:eb:34:b6:51:6d:11:c9:6a:1f:eb:e5:c6:59:06:
63:ac:62:bd:ee:72:50:c2:a6:d4:06:fc:25:11:23:
27:d0:97:a8:53:5f:ff:c4:25:b7:3f:b7:9b:fb:94:
95:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2C:41:08:FF:E0:78:75:2F:72:0F:75:17:0C:90:5E:B0:73:F3:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3202890C478811F1A81A27DBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.192.0/24
154.84.194.0/24
154.84.231.0-154.84.238.255
Signature Algorithm: sha256WithRSAEncryption
20:68:82:0f:76:d9:9a:4c:11:0b:14:c1:ce:ee:04:80:d8:b7:
ff:7c:e5:df:76:87:e5:21:1a:40:b7:93:8f:8a:5c:4a:c4:91:
20:fa:96:66:ee:d8:69:41:6a:55:50:f8:84:b6:0f:02:b6:80:
f8:89:92:92:a7:d7:68:d5:ab:63:f1:0f:a3:fd:ac:5b:ec:c3:
d3:74:a2:f2:03:da:9b:c9:0a:87:7d:62:37:a4:6b:ca:a9:cd:
a4:de:05:6f:11:81:0f:b3:b8:7e:39:af:e2:cb:93:d2:e2:7f:
11:1e:a0:d5:dd:d8:a0:93:06:76:13:11:0b:7e:9d:2f:1e:c7:
67:55:04:61:51:65:ea:64:d3:1f:1f:cf:72:d7:8a:09:ef:82:
76:f7:94:60:16:49:50:ba:1e:46:14:1b:bd:07:31:be:80:ff:
fe:03:96:fb:5e:50:ab:31:85:d3:bf:32:89:61:17:c8:ec:d2:
2c:eb:06:aa:1b:73:e2:ce:d4:57:56:87:fd:25:57:d6:b8:c8:
96:90:82:2c:ca:3b:22:70:a6:81:1e:5d:64:36:a4:6c:91:a3:
8b:ff:5e:70:1c:41:8b:3a:fd:10:4f:fe:87:5a:95:27:f3:32:
7c:1f:64:0d:8e:d2:cf:1e:5a:4e:dd:3a:cd:2b:f6:1f:fa:d2:
a9:35:f1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:03:48 2026 by rpki-client