Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DB3523E5F1D11F1A3AAE3CFCE1D38B0.roa
File: 3DB3523E5F1D11F1A3AAE3CFCE1D38B0.roa (raw, json)
Hash identifier: 8ySR7hxox3kx/aeP8UhytTkXDm1RiWFyDHFxlaQbwU4=
Subject key identifier: D5:D1:27:89:FF:C5:37:06:89:70:08:C0:CD:59:B8:B1:5D:E2:DC:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D169
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DB3523E5F1D11F1A3AAE3CFCE1D38B0.roa
Signing time: Wed 03 Jun 2026 07:24:22 +0000
ROA not before: Wed 03 Jun 2026 07:24:16 +0000
ROA not after: Fri 10 Jul 2026 07:24:16 +0000
asID: 17497
IP address blocks: 154.193.23.0/24 maxlen: 24
154.193.24.0/24 maxlen: 24
154.193.25.0/24 maxlen: 24
154.193.26.0/24 maxlen: 24
154.193.27.0/24 maxlen: 24
154.193.28.0/24 maxlen: 24
154.193.29.0/24 maxlen: 24
154.193.30.0/24 maxlen: 24
154.193.31.0/24 maxlen: 24
154.193.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119145 (0x1d169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 3 07:24:16 2026 GMT
Not After : Jul 10 07:24:16 2026 GMT
Subject: CN=6a1fd6a6-9204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6f:de:71:45:6f:19:18:d6:a7:47:56:89:35:
d0:6d:ab:4f:3f:91:00:72:4a:34:68:60:f2:fd:a4:
2d:b2:f0:d9:f3:ab:bd:d9:1a:96:ea:fa:fa:ec:4c:
c4:7a:e7:e2:e0:82:02:cb:80:0f:c2:1e:14:0d:6f:
f3:d2:23:0a:d5:00:a6:22:b9:16:57:b8:4e:43:4c:
71:63:57:39:db:59:17:a4:e4:29:53:d2:2d:23:1a:
20:be:16:b0:2d:eb:96:7e:61:3c:c3:61:15:12:3e:
41:de:d6:fa:57:d8:2e:6d:09:89:1f:5b:63:ce:c5:
00:e4:76:25:0c:ef:ef:8f:7d:49:48:2b:6f:b2:bb:
a9:08:93:e0:27:23:3b:e5:7b:a7:2f:9a:06:d9:5e:
fe:bc:55:2a:55:75:61:47:3c:63:d7:e5:f9:7d:fb:
61:25:c2:62:52:bc:67:51:fd:77:8b:cc:64:77:a0:
25:1c:ed:6f:f1:65:8e:d5:22:32:3a:af:7e:ef:29:
1a:b5:d3:37:a1:85:b6:3a:8e:4c:20:96:78:18:15:
ff:6a:42:26:ea:bd:f2:1d:af:f7:9e:16:b9:b8:3e:
ee:88:e6:59:2c:05:eb:35:4f:db:29:2e:c4:30:53:
c7:30:c2:89:74:ee:2b:00:d2:29:1f:e6:b6:88:f5:
0c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D1:27:89:FF:C5:37:06:89:70:08:C0:CD:59:B8:B1:5D:E2:DC:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DB3523E5F1D11F1A3AAE3CFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.23.0-154.193.31.255
154.193.162.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:4f:e5:48:90:eb:d5:8c:c2:83:1c:7c:25:ed:86:74:5a:32:
04:bf:5d:ee:d0:d9:33:11:01:ff:44:b0:3b:f2:a8:b0:6d:e4:
50:86:cd:11:d6:f5:0c:e8:f7:eb:7c:a0:f6:27:6b:8f:51:68:
e2:11:8a:f2:9f:8e:0c:ed:61:e2:7d:67:1b:d5:69:bd:6b:90:
30:37:fc:0a:18:73:06:54:ea:b6:31:e5:2b:95:fb:54:45:07:
9c:d9:5f:58:3b:3a:16:13:7d:f8:31:fd:7d:a0:6b:95:1b:a6:
ec:9d:e2:1e:6f:33:6f:b5:fd:5a:5a:0c:7c:f0:9a:22:6a:c5:
6d:cf:ec:9c:e3:02:71:45:e1:d8:f7:07:be:36:73:7a:db:80:
ba:eb:d7:f9:bf:fc:19:49:77:d6:db:f1:ad:4c:68:60:1b:9d:
12:bd:19:69:63:c9:25:11:9f:d8:6b:20:3c:40:1f:ae:b8:21:
bf:87:e0:49:df:38:c2:ae:16:72:ac:69:9f:d0:42:7c:2a:37:
f6:19:af:56:84:19:20:e2:57:e0:ca:38:f3:43:9e:5f:36:ba:
64:e1:54:b4:92:1f:65:6b:83:78:a5:eb:29:76:ff:9d:58:b2:
47:05:23:c3:46:6a:63:6c:ba:df:7d:5e:c7:13:48:d2:3d:0c:
41:38:f8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 11:55:36 2026 by rpki-client