Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3909D0CA449011F1BE0499C4CE1D38B0.roa
File: 3909D0CA449011F1BE0499C4CE1D38B0.roa (raw, json)
Hash identifier: EJ5dDNL4lL3bdui3HjHq5Kxj1UYn61OYzG+hAyE9xIY=
Subject key identifier: 5E:DB:64:9D:78:45:81:C9:26:A2:4A:C5:06:57:0C:F2:7C:99:E4:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C833
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3909D0CA449011F1BE0499C4CE1D38B0.roa
Signing time: Thu 30 Apr 2026 12:29:25 +0000
ROA not before: Thu 30 Apr 2026 12:29:20 +0000
ROA not after: Fri 05 Jun 2026 12:29:20 +0000
asID: 202656
IP address blocks: 154.218.30.0/24 maxlen: 24
154.219.16.0/24 maxlen: 24
154.219.24.0/24 maxlen: 24
154.219.28.0/24 maxlen: 24
154.219.207.0/24 maxlen: 24
154.219.211.0/24 maxlen: 24
154.219.222.0/24 maxlen: 24
154.219.230.0/24 maxlen: 24
154.219.232.0/24 maxlen: 24
154.219.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116787 (0x1c833)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 12:29:20 2026 GMT
Not After : Jun 5 12:29:20 2026 GMT
Subject: CN=69f34b25-51ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2b:4d:ef:21:d7:cc:43:29:c6:fe:5b:a3:b6:
0c:54:4f:78:0d:ff:5f:a8:90:c1:31:9b:14:8f:83:
a4:fc:4e:a8:f7:08:71:bc:d9:ee:a6:d7:9c:65:39:
43:7d:28:75:ce:00:3f:a3:c2:4f:74:0b:6c:4e:1d:
eb:02:61:05:e0:d5:22:3c:48:ea:a5:47:8a:eb:8e:
48:a4:ec:4e:2c:fb:e9:ad:b9:59:44:22:77:6e:91:
36:9a:b8:9b:4f:26:8c:9a:f6:0a:96:e0:7f:1e:28:
59:b5:62:94:35:8a:e0:e8:9c:2e:96:0e:1f:f8:dd:
4d:1c:61:ee:b3:c5:32:64:8a:4c:92:c1:01:76:08:
09:ff:74:11:9a:c7:d2:0c:cd:c3:a4:68:a9:5c:14:
75:ce:5b:1b:e5:79:6a:88:c0:a4:33:5f:63:5c:f4:
8b:8f:53:d1:8a:47:70:b6:e9:5b:90:7e:91:3a:01:
1d:b3:63:c8:f6:60:a1:c4:4a:be:d5:67:48:6c:04:
a9:c1:85:43:4a:cf:84:ed:68:7f:bc:6a:33:be:51:
cc:63:2c:ec:6e:d7:5a:4a:64:ef:6d:d1:22:a3:bb:
c7:ae:50:29:44:f2:07:ea:ed:b9:f3:89:af:d9:8d:
bc:b4:86:17:3f:9c:83:38:5a:d8:49:2a:26:43:02:
0e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DB:64:9D:78:45:81:C9:26:A2:4A:C5:06:57:0C:F2:7C:99:E4:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3909D0CA449011F1BE0499C4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.30.0/24
154.219.16.0/24
154.219.24.0/24
154.219.28.0/24
154.219.207.0/24
154.219.211.0/24
154.219.222.0/24
154.219.230.0/24
154.219.232.0/24
154.219.245.0/24
Signature Algorithm: sha256WithRSAEncryption
33:fb:05:a8:02:2d:7e:48:02:1b:4a:97:67:13:a1:88:51:ce:
b7:5e:a7:65:6e:31:73:c0:6b:85:5c:b2:90:38:be:5d:28:b7:
40:11:19:64:d6:84:62:6b:ea:d2:3b:7c:ff:4f:67:f3:c5:bc:
ef:25:10:08:65:02:5a:1c:de:ac:8c:c3:18:6e:19:75:36:f6:
98:4c:61:24:8e:65:ab:7b:58:6d:03:42:86:1f:e9:7a:1b:8d:
08:cc:32:b8:79:51:e4:3a:bf:32:5d:85:98:37:25:18:61:49:
a7:9a:a9:f8:0b:b8:92:61:6a:66:6d:84:39:8b:13:95:2a:6e:
ff:9a:84:73:e8:74:d6:6f:89:4e:89:09:9b:eb:e7:7c:61:51:
f4:65:92:75:a1:94:4d:8e:4c:62:9e:e3:f7:99:42:a5:86:c2:
22:25:2b:29:16:50:d3:0a:5c:b0:6e:d1:f0:6c:4e:a6:13:fc:
24:c4:18:48:48:92:4b:33:0d:b4:b9:7b:e3:c7:68:fe:28:8e:
35:4d:37:97:59:72:6f:55:41:e0:7d:f9:29:1b:14:0e:ca:34:
31:cb:0f:56:93:9d:bb:42:b2:99:5b:7e:12:9e:6d:08:13:86:
0b:15:19:27:7d:d4:1a:c1:1c:c7:13:da:e5:74:d0:4c:a7:c9:
dc:7c:52:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:08 2026 by rpki-client