Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34881FA4449D11F1AC5A8E11CF1D38B0.roa
File: 34881FA4449D11F1AC5A8E11CF1D38B0.roa (raw, json)
Hash identifier: xlzO/G6UOQ6Tx7Nwyny9yum1eLc+gvnog86Ka7aexwA=
Subject key identifier: 80:2A:64:A9:21:31:8A:C7:76:92:D9:5F:F5:E5:BD:95:8C:4E:95:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C857
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34881FA4449D11F1AC5A8E11CF1D38B0.roa
Signing time: Thu 30 Apr 2026 14:02:21 +0000
ROA not before: Thu 30 Apr 2026 14:02:16 +0000
ROA not after: Fri 05 Jun 2026 14:02:16 +0000
asID: 48031
IP address blocks: 154.215.12.0/24 maxlen: 24
154.215.13.0/24 maxlen: 24
154.216.1.0/24 maxlen: 24
154.218.1.0/24 maxlen: 24
154.218.16.0/24 maxlen: 24
154.218.17.0/24 maxlen: 24
154.218.18.0/24 maxlen: 24
154.218.19.0/24 maxlen: 24
154.218.22.0/24 maxlen: 24
154.222.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116823 (0x1c857)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 14:02:16 2026 GMT
Not After : Jun 5 14:02:16 2026 GMT
Subject: CN=69f360ed-5f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f9:b9:3f:0c:d0:64:85:c6:c8:e6:0f:ea:cb:
a1:56:e0:da:12:bd:06:dd:a0:a0:f9:35:d0:0b:23:
46:cc:0d:cd:5e:53:5a:ad:54:fa:fb:13:5d:38:e9:
c7:46:2d:a3:37:71:02:34:26:44:3f:65:d7:ed:5d:
81:3e:25:0c:fa:75:5e:70:b2:35:d3:97:aa:b7:f4:
fc:20:bf:09:a8:49:52:15:50:90:1d:17:06:9f:f9:
1e:9d:ab:24:9b:fb:a1:ba:07:51:d4:eb:29:bf:23:
8b:73:a5:bd:39:71:f4:1d:52:5f:aa:37:fd:55:bc:
89:e3:98:f2:e3:99:44:b9:60:0e:ca:7a:ef:5d:f9:
60:00:d8:4e:31:c3:e9:42:56:f4:c4:7c:b2:ac:3d:
f0:72:ed:0d:ef:c5:d5:69:4e:3c:fb:6b:cc:d5:c2:
68:1d:11:a5:45:04:dd:c2:f1:ff:9b:54:67:32:6e:
32:b5:b9:0d:a3:fc:64:be:9d:f0:e2:74:91:83:60:
6f:7a:27:3f:ad:45:bd:a3:b7:7c:6b:e4:8d:3c:c1:
e4:a7:95:b8:2b:b5:e6:b6:ed:2d:bb:31:c7:66:1a:
c9:2c:9b:7c:53:a9:24:6c:9a:f3:0e:37:71:18:a7:
1d:89:9e:66:74:24:80:ce:b0:33:ae:07:76:db:ee:
87:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2A:64:A9:21:31:8A:C7:76:92:D9:5F:F5:E5:BD:95:8C:4E:95:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34881FA4449D11F1AC5A8E11CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.12.0/23
154.216.1.0/24
154.218.1.0/24
154.218.16.0/22
154.218.22.0/24
154.222.215.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:66:1c:4d:bf:be:9e:73:eb:a6:74:bc:2a:fd:c6:c9:05:9a:
32:70:69:8c:e7:98:83:39:f3:9a:57:5c:35:80:74:6b:d9:b6:
87:68:af:87:24:dc:6b:ca:2c:bb:84:4c:59:b7:06:92:fa:1f:
f3:72:33:27:e2:e8:8a:69:b3:8f:45:bb:44:ae:8a:ae:4a:6a:
1e:b7:3b:84:59:c7:52:28:8c:68:99:d7:22:07:06:77:d3:12:
32:13:30:6e:1d:d0:82:97:a8:c6:b1:2f:47:1b:4d:7b:9f:12:
d9:e2:20:5d:e6:7c:62:b3:c9:35:04:ad:43:b1:bf:2b:99:25:
fb:61:8d:fe:24:04:22:62:4b:cd:c7:6d:3a:62:92:35:dd:9d:
26:ac:dc:34:89:09:b8:8d:c9:55:1f:a6:98:5b:cb:30:ae:cb:
f1:e8:20:74:4d:46:98:b9:ec:0e:e0:66:f0:1b:8c:7c:76:83:
68:0e:7a:c5:93:c2:4e:de:79:8c:9c:aa:d1:f0:a0:00:e4:f7:
f3:a0:ef:5f:7c:f5:88:38:28:d0:91:9e:8e:27:e0:21:35:80:
4c:2c:b8:39:f5:31:c4:85:7a:3b:23:df:6e:62:99:64:ef:5a:
75:dc:13:ee:50:35:cc:fd:4e:bb:91:92:45:65:d6:7f:4b:3c:
23:db:5d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:03:50 2026 by rpki-client