Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C9D6C8C4AB811F1AADF9CBECE1D38B0.roa
File: 3C9D6C8C4AB811F1AADF9CBECE1D38B0.roa (raw, json)
Hash identifier: XJEoLbtjn3I0NqlHY2sCxlal10ZVbg2AAw/3JfLWvUU=
Subject key identifier: D5:3B:0D:D9:80:20:88:E9:18:1A:02:A8:21:7F:09:18:7D:D4:1B:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CA5E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C9D6C8C4AB811F1AADF9CBECE1D38B0.roa
Signing time: Fri 08 May 2026 08:30:58 +0000
ROA not before: Fri 08 May 2026 08:30:53 +0000
ROA not after: Wed 07 Jul 2027 08:30:53 +0000
asID: 36898
IP address blocks: 154.200.197.0/24 maxlen: 24
154.200.198.0/24 maxlen: 24
154.200.199.0/24 maxlen: 24
154.200.200.0/24 maxlen: 24
154.200.201.0/24 maxlen: 24
154.200.202.0/24 maxlen: 24
154.200.203.0/24 maxlen: 24
154.200.204.0/24 maxlen: 24
154.200.205.0/24 maxlen: 24
154.200.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117342 (0x1ca5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 08:30:53 2026 GMT
Not After : Jul 7 08:30:53 2027 GMT
Subject: CN=69fd9f42-3163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6e:41:47:6f:5a:b2:1d:42:dc:e1:e0:c4:da:
7d:9f:72:d1:05:50:94:23:b9:02:27:46:17:c5:a8:
78:2c:87:5c:b7:40:e2:60:c9:fd:a0:12:e7:23:78:
0a:64:a2:d3:0e:11:e4:0e:47:2d:be:45:7b:c0:e1:
2f:52:fb:3b:36:58:f0:c3:1d:94:f0:71:d8:bd:2c:
b7:58:e7:f5:80:26:b3:fd:5f:a1:db:41:a6:5d:2d:
06:34:27:92:66:ca:2f:16:e6:69:50:b4:cd:79:8c:
5c:ec:a0:42:d3:d9:ce:8f:48:16:23:c8:6a:47:1c:
d7:97:2e:1b:e2:91:23:45:68:e4:f1:20:2e:af:87:
d2:5a:0c:7c:cb:94:26:80:be:e7:e3:53:bf:d2:b6:
46:37:b7:80:d2:dc:3a:51:0f:45:9b:16:1f:d0:e4:
00:cc:2d:49:11:19:29:20:54:69:87:62:4e:60:09:
b7:1b:c2:d0:02:5d:74:2b:c7:57:e8:d0:19:c7:6d:
b1:78:79:5d:4a:49:ff:ff:df:f4:76:11:34:0f:b0:
e6:39:c4:50:63:fc:c3:2a:c7:3c:2c:51:e6:70:23:
11:f1:04:3b:60:b5:b4:fc:0b:6f:1e:39:19:fc:30:
25:9a:a9:89:01:aa:a6:53:53:50:75:4d:20:ae:e2:
c2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3B:0D:D9:80:20:88:E9:18:1A:02:A8:21:7F:09:18:7D:D4:1B:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C9D6C8C4AB811F1AADF9CBECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.197.0-154.200.206.255
Signature Algorithm: sha256WithRSAEncryption
d6:df:72:ef:29:89:b2:47:5a:ab:ad:e4:ae:1c:e6:be:01:ac:
b8:f4:77:9b:91:b1:67:d3:da:92:a0:b6:3c:37:a3:9d:9f:12:
8b:53:b5:19:8c:57:de:81:09:64:ff:af:7b:e1:9b:38:f6:3f:
d0:43:de:fe:9d:33:85:27:30:47:7b:15:67:5e:d1:df:06:48:
57:a2:99:21:26:16:76:3b:59:5a:39:cc:81:5c:ae:5e:d5:58:
02:e7:56:90:ea:3a:a1:78:bb:d2:07:6f:15:67:59:7a:d7:53:
50:ab:87:5c:7d:53:2f:6d:ae:0e:b8:10:79:67:86:72:13:be:
49:91:aa:0b:8c:99:0f:08:14:5a:d2:c4:67:87:19:8b:01:87:
5f:73:1d:6c:85:d5:fa:37:91:1e:90:b7:60:83:41:b1:3d:9c:
09:ee:99:03:a2:f6:b6:49:5f:52:89:40:c6:9c:9c:8d:73:8f:
36:f8:58:6f:dd:ee:41:f7:69:9a:99:ac:34:46:d4:67:c6:c4:
2c:cc:98:77:92:75:83:0d:d1:02:a1:a0:3b:dd:c0:fe:30:73:
8c:1e:11:bd:f0:a7:2d:e3:12:9e:55:2b:77:7e:15:34:49:60:
f2:e4:3f:0a:26:49:5a:d4:ac:a4:9d:0e:77:25:1c:43:2a:0a:
fe:6f:f0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:00:24 2026 by rpki-client