Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35BDB87A3CCD11F1AAA964CBCE1D38B0.roa
File: 35BDB87A3CCD11F1AAA964CBCE1D38B0.roa (raw, json)
Hash identifier: YKKtEdTycJPzQ/NdVAjZeeAh7gIKTcvZ8kYMpmQGQq8=
Subject key identifier: 43:15:6E:81:42:EC:B9:A7:3F:2D:4F:53:C5:39:E0:00:66:8B:AB:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C634
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35BDB87A3CCD11F1AAA964CBCE1D38B0.roa
Signing time: Mon 20 Apr 2026 15:25:50 +0000
ROA not before: Mon 20 Apr 2026 15:25:45 +0000
ROA not after: Wed 27 May 2026 15:25:45 +0000
asID: 63139
IP address blocks: 154.93.64.0/24 maxlen: 24
154.93.65.0/24 maxlen: 24
154.93.66.0/24 maxlen: 24
154.94.91.0/24 maxlen: 24
154.94.122.0/24 maxlen: 24
154.94.123.0/24 maxlen: 24
154.94.124.0/24 maxlen: 24
154.94.125.0/24 maxlen: 24
154.94.126.0/24 maxlen: 24
154.94.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 06:17:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116276 (0x1c634)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 20 15:25:45 2026 GMT
Not After : May 27 15:25:45 2026 GMT
Subject: CN=69e6457d-e9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bd:70:e2:1d:c9:5b:71:89:68:4b:cf:a8:eb:
29:3c:29:52:cc:c8:a5:90:de:3b:62:ea:c2:62:a4:
86:3e:fa:77:91:59:19:ec:ab:40:f6:7f:42:cd:5a:
44:46:8d:bb:1c:3d:76:df:fb:f9:33:ec:21:75:ce:
e9:2e:16:dc:be:b9:aa:58:14:91:85:9b:9a:69:4a:
6e:7e:fc:7b:d5:a4:5c:f0:c6:1b:85:59:db:b3:c5:
d0:a9:e3:ed:ba:80:8f:3d:ca:4e:e1:f4:ce:6c:2f:
8d:d8:e3:2d:9e:f1:c9:a3:a7:f7:0e:bb:a0:92:b7:
25:10:db:8d:2d:47:23:84:ed:0e:49:03:7b:31:56:
54:43:4c:80:52:25:66:14:b8:cf:19:05:d7:cf:a4:
a9:16:ae:3a:bc:3e:32:ad:b4:1e:f1:82:36:b2:ef:
ed:90:73:12:fc:c0:82:c4:55:09:ac:37:02:6a:df:
e1:24:4c:c7:aa:05:3d:91:21:d2:7e:8e:ba:81:ee:
5f:18:bf:9c:ce:d8:7c:94:a0:47:9c:e5:49:8d:5a:
dc:fb:64:ac:c2:9b:92:9b:34:c9:59:57:82:be:22:
4f:b2:0c:d3:00:69:69:b3:04:4d:bc:a1:bb:b5:1d:
2a:de:54:1b:e6:51:7a:1d:2e:64:91:df:b1:69:b0:
8a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:15:6E:81:42:EC:B9:A7:3F:2D:4F:53:C5:39:E0:00:66:8B:AB:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35BDB87A3CCD11F1AAA964CBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.64.0-154.93.66.255
154.94.91.0/24
154.94.122.0-154.94.127.255
Signature Algorithm: sha256WithRSAEncryption
9a:19:d0:ef:ae:f6:8a:81:d2:26:14:6d:8b:52:92:7c:6b:cf:
d4:c3:87:7f:5f:3a:6a:51:8f:16:75:2c:b8:bf:aa:d3:0c:eb:
c6:18:87:2b:a5:a8:fb:de:57:97:df:09:05:02:41:ef:c4:ac:
37:6e:4f:49:ad:50:8c:8c:09:9b:09:66:06:3b:99:c1:07:54:
2e:15:e1:c1:b9:79:2d:bf:3d:17:84:6b:34:d5:a3:67:a1:56:
9a:b8:e3:2d:c7:3e:b9:b4:90:68:8d:12:43:9a:2f:12:92:99:
73:71:42:5e:12:eb:62:ce:51:55:8e:e9:27:4e:dd:81:26:a3:
ff:b6:0e:0b:34:d3:a0:84:4d:40:b3:ba:85:f5:92:a0:b5:c3:
1a:c5:78:0a:be:d7:d0:cd:63:21:a4:53:4a:e0:a0:24:79:15:
49:6a:4d:73:4f:87:9e:c9:21:b0:3e:e6:28:11:8f:df:02:59:
59:b8:a8:55:dd:fa:c2:14:8f:5e:2e:58:38:5b:3a:c5:1d:f7:
24:64:50:ff:90:48:52:a6:5d:77:f1:79:53:d5:0a:9d:60:67:
20:1a:9d:5e:86:dc:b8:94:40:7a:f2:71:a5:1c:1b:5f:89:85:
0f:49:7f:55:12:03:b8:d4:d3:9d:90:9e:6c:db:17:89:56:d7:
bc:de:c6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:53:49 2026 by rpki-client