Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D97A300449611F1AF60CDE8CE1D38B0.roa
File: 3D97A300449611F1AF60CDE8CE1D38B0.roa (raw, json)
Hash identifier: oJEgCIH5GcvgxeDrnucfT1Gpx0HbxiYu/+nRQZ61Kxs=
Subject key identifier: 52:7B:5A:06:D8:D9:48:52:8C:7D:C4:96:A6:CC:54:5C:FF:7F:81:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C841
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D97A300449611F1AF60CDE8CE1D38B0.roa
Signing time: Thu 30 Apr 2026 13:12:30 +0000
ROA not before: Thu 30 Apr 2026 13:12:25 +0000
ROA not after: Fri 05 Jun 2026 13:12:25 +0000
asID: 202656
IP address blocks: 154.219.214.0/24 maxlen: 24
154.219.215.0/24 maxlen: 24
154.219.216.0/24 maxlen: 24
154.220.1.0/24 maxlen: 24
154.221.1.0/24 maxlen: 24
154.221.53.0/24 maxlen: 24
154.221.54.0/24 maxlen: 24
154.221.55.0/24 maxlen: 24
154.221.62.0/24 maxlen: 24
154.221.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116801 (0x1c841)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 13:12:25 2026 GMT
Not After : Jun 5 13:12:25 2026 GMT
Subject: CN=69f3553e-37c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:de:f1:f8:d5:5c:bc:fc:f0:56:10:6f:f3:
58:04:bd:ae:a4:fc:9d:38:ad:03:30:c2:76:3c:ed:
15:aa:ab:cc:f4:c3:1c:b9:a7:56:43:31:f8:06:1a:
86:6a:2f:19:e4:2d:fb:e3:e1:2b:c4:03:26:ca:5f:
7d:3e:ba:92:17:d1:13:08:82:e6:23:6a:9b:b5:c2:
ee:14:61:ee:15:64:e0:3f:9d:b2:49:3d:2d:48:f8:
69:5d:d9:19:ec:b6:ea:f7:20:f0:49:f2:d0:cf:d9:
d3:a3:1c:11:e4:f7:2a:04:8a:c0:60:f4:85:60:50:
b7:30:fa:e3:fa:98:3e:c2:67:93:35:2d:9e:c6:79:
9b:59:63:a8:85:37:3d:cf:1a:90:0d:31:56:71:e3:
40:fd:cd:ef:3b:96:90:0f:90:56:af:63:29:48:a4:
fe:9e:90:1f:79:5a:58:4a:10:e1:7f:f4:60:56:8f:
7e:0d:e9:18:3e:45:58:8a:2c:2d:9d:64:32:66:75:
53:db:da:1e:e7:7d:0e:53:dd:10:bf:33:1d:0b:ab:
e9:65:59:68:de:24:82:3f:ff:d1:bb:f4:a7:72:4a:
2e:3c:9b:ec:85:aa:42:dc:be:c2:10:98:fe:fe:98:
b0:8a:2a:0a:08:c6:a9:af:97:5d:cc:13:72:ec:0e:
24:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7B:5A:06:D8:D9:48:52:8C:7D:C4:96:A6:CC:54:5C:FF:7F:81:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D97A300449611F1AF60CDE8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.214.0-154.219.216.255
154.220.1.0/24
154.221.1.0/24
154.221.53.0-154.221.55.255
154.221.62.0/23
Signature Algorithm: sha256WithRSAEncryption
30:d4:9c:b4:c7:9e:9d:a3:f7:9a:91:e2:82:9c:56:be:42:09:
0c:30:d0:97:f4:72:bf:3a:ed:2d:38:00:08:50:f2:94:06:3a:
cf:71:ed:90:29:42:cd:12:d6:e0:af:bd:eb:1c:a5:c1:bd:92:
7b:24:d1:f0:fa:50:64:c5:09:9f:85:e5:08:0c:5f:bb:4e:da:
da:2d:86:7d:96:e1:90:bd:ad:bc:ce:84:b4:8c:a2:82:4e:dd:
04:83:61:9b:c1:d7:f6:bc:19:f7:d7:b4:e1:01:d1:db:4d:92:
88:d5:0f:68:70:ea:cf:d6:7b:0d:ff:69:a4:33:fb:b3:0f:eb:
af:db:b5:9d:bd:a1:73:ae:dd:2e:96:3a:6c:0e:83:b6:31:1f:
b9:ed:78:27:2b:c1:04:71:8f:30:8f:34:ce:9d:e0:b6:40:37:
1a:c0:5b:38:07:9d:33:08:23:65:5b:5d:4d:85:3a:aa:96:1f:
7b:51:63:7c:56:73:8f:e9:b4:00:ab:10:06:8c:5f:ec:a6:e4:
ab:4b:67:c0:57:46:67:8d:c6:41:54:86:dd:c8:a3:39:5b:f8:
01:17:e6:c2:f1:b4:a2:27:0f:31:5c:02:76:88:86:0a:68:d8:
2d:16:1e:08:f9:d7:ee:4d:3f:a5:bc:7f:4c:07:b3:a1:1d:d6:
cc:53:d1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:33 2026 by rpki-client