Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4043C95843B011F19D0976F6CE1D38B0.roa
File: 4043C95843B011F19D0976F6CE1D38B0.roa (raw, json)
Hash identifier: UgydAYffm/Ouh2NfrWN5HCeL8ZxfoRJzc31viBXiQa8=
Subject key identifier: 34:D2:F3:BB:BD:C9:7D:5C:DA:0C:FB:0C:F8:20:E2:11:BD:5D:C6:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C7D9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4043C95843B011F19D0976F6CE1D38B0.roa
Signing time: Wed 29 Apr 2026 09:46:10 +0000
ROA not before: Wed 29 Apr 2026 09:46:05 +0000
ROA not after: Fri 27 Apr 2029 09:46:05 +0000
asID: 17561
IP address blocks: 154.198.9.0/24 maxlen: 24
154.198.10.0/24 maxlen: 24
154.201.7.0/24 maxlen: 24
154.201.8.0/24 maxlen: 24
154.201.9.0/24 maxlen: 24
154.201.10.0/24 maxlen: 24
154.201.11.0/24 maxlen: 24
154.201.40.0/24 maxlen: 24
154.223.230.0/24 maxlen: 24
154.223.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116697 (0x1c7d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 09:46:05 2026 GMT
Not After : Apr 27 09:46:05 2029 GMT
Subject: CN=69f1d362-4f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b1:0c:12:bb:af:2e:d7:8c:f3:2b:d3:d3:aa:
72:00:77:32:16:1d:1a:0e:b4:e0:5e:45:af:bc:66:
ac:1d:c4:4e:77:1d:a5:b1:7e:54:62:1e:f1:75:6f:
0f:ea:e7:73:ab:ae:6d:e3:16:88:3d:92:ac:49:ee:
e5:46:1e:3c:10:a4:cc:a2:ce:d5:d8:55:b7:f9:43:
c4:0c:53:15:52:aa:4d:1b:e4:2f:2a:2c:08:8a:8b:
5d:58:bc:37:c6:e3:63:03:f5:cb:85:3a:7f:c9:42:
b7:a0:99:05:84:ed:67:bb:47:de:99:1a:11:ea:d1:
46:ff:d9:5e:d5:7b:b4:36:b6:64:11:4a:95:32:62:
10:f3:61:66:02:e5:66:92:b7:3b:1c:8b:50:03:e6:
03:6b:cd:ba:49:14:67:68:61:9d:cc:03:d3:ad:e9:
a0:a0:eb:b2:b5:1e:f6:fc:73:37:cb:a6:17:ac:91:
c0:62:e3:17:2a:56:34:bf:1c:85:04:73:ea:93:5e:
6a:15:ed:9e:bc:38:97:9a:b5:e2:ac:81:f0:4d:ed:
cf:cc:55:40:16:56:05:36:6d:e4:24:57:6d:99:59:
95:c9:77:d5:bc:77:d3:df:87:c2:a3:c1:87:26:f3:
dc:96:93:56:98:48:97:d0:3f:c3:7a:89:69:fe:55:
58:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D2:F3:BB:BD:C9:7D:5C:DA:0C:FB:0C:F8:20:E2:11:BD:5D:C6:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4043C95843B011F19D0976F6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.9.0-154.198.10.255
154.201.7.0-154.201.11.255
154.201.40.0/24
154.223.230.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:12:1a:cd:bc:3d:ce:4e:11:0f:ab:8f:2a:e7:cb:8d:e9:79:
fd:80:49:17:29:af:7b:89:a5:b9:c3:41:83:ee:5c:43:7f:e6:
3b:1d:71:d1:46:81:80:a0:dc:07:c2:9a:1a:94:7f:9e:ec:a1:
3b:6c:a7:83:a3:09:47:52:a4:74:92:a2:48:36:67:4d:64:bf:
80:95:ba:4c:65:9f:44:f1:99:d0:79:12:12:30:88:3e:be:ba:
82:0f:81:74:cb:5f:68:ee:95:60:b3:f6:f8:d0:99:db:5b:04:
b8:92:c0:12:b6:f4:43:f1:12:24:2b:dc:ce:9c:7e:e7:38:34:
57:ad:d3:1c:8c:21:41:18:c8:d2:48:06:c5:47:43:cd:00:73:
53:45:a3:e9:16:19:d4:db:52:1b:b7:3d:97:41:c4:f1:2a:34:
08:68:c4:ee:68:b2:08:9e:17:f0:19:03:c3:3a:87:32:c2:15:
05:ce:17:62:69:4e:14:c4:4b:3e:75:56:a5:18:89:94:44:c6:
95:dd:7b:b6:f2:a9:1e:40:2f:19:a7:a4:cc:e2:71:04:c6:68:
65:a7:c7:0d:c1:32:f6:d0:c3:87:8f:aa:3f:57:14:bb:a4:6d:
80:7d:1c:71:31:b8:2d:b4:25:9b:f4:fa:b2:ce:db:51:b2:77:
67:d8:59:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:19 2026 by rpki-client