Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/472F12A43FDC11F19ACF5D1BCF1D38B0.roa
File: 472F12A43FDC11F19ACF5D1BCF1D38B0.roa (raw, json)
Hash identifier: 0suKVnR+LMoaPRMp73Y0XRF8yzL0fiJibFKt6kMBLoA=
Subject key identifier: 95:8A:E5:56:D6:9E:C9:1A:A5:5D:36:A3:15:A8:20:BD:CB:A4:0C:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C74C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/472F12A43FDC11F19ACF5D1BCF1D38B0.roa
Signing time: Fri 24 Apr 2026 12:51:15 +0000
ROA not before: Fri 24 Apr 2026 12:51:10 +0000
ROA not after: Mon 01 Jun 2026 12:51:10 +0000
asID: 11427
IP address blocks: 154.194.8.0/22 maxlen: 24
154.194.16.0/21 maxlen: 24
154.194.24.0/22 maxlen: 24
154.194.196.0/22 maxlen: 24
154.194.216.0/21 maxlen: 24
154.198.128.0/19 maxlen: 24
154.202.144.0/20 maxlen: 24
154.202.192.0/18 maxlen: 24
154.213.168.0/21 maxlen: 24
154.220.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116556 (0x1c74c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 12:51:10 2026 GMT
Not After : Jun 1 12:51:10 2026 GMT
Subject: CN=69eb6743-af0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a4:30:bd:17:36:20:04:2a:a0:a0:ba:e9:35:
6e:37:19:b9:09:f7:43:bb:51:3f:83:84:63:4d:83:
bc:30:d9:7f:ac:00:f7:46:5c:5c:44:d2:3b:83:9e:
73:bc:e8:c5:e1:65:1b:c8:ba:74:1b:36:1c:15:10:
a8:bc:ab:a3:e2:b0:d4:bc:61:84:f4:aa:f9:d7:d6:
dd:24:a3:2d:80:c3:18:9d:51:89:94:96:08:ea:28:
50:20:7d:7e:75:1b:87:4a:32:34:e2:a5:97:15:98:
76:21:f4:d9:a6:8b:9e:d5:a8:44:e3:31:fa:e3:a7:
ae:87:a2:bf:a6:00:03:6f:3d:17:1d:66:ea:2a:93:
9c:70:87:40:f3:fc:f6:76:1f:25:37:72:51:43:92:
ae:66:70:d9:24:7c:b6:8a:16:98:ca:c3:bd:c7:bf:
28:98:8f:93:2e:59:35:0f:2c:83:f5:70:4e:f8:00:
f2:37:ef:a3:7e:ff:a2:ce:1d:01:45:94:26:b3:b3:
ea:ba:5b:b2:77:95:b0:68:c7:40:13:32:9e:e5:dd:
71:49:fd:0a:f4:93:3f:37:50:68:b9:95:45:4a:2a:
8a:40:10:b4:32:43:61:46:a2:89:ea:59:86:e0:2f:
75:12:f0:90:03:cd:8a:79:b5:a0:af:e6:3a:6d:d6:
d8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8A:E5:56:D6:9E:C9:1A:A5:5D:36:A3:15:A8:20:BD:CB:A4:0C:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/472F12A43FDC11F19ACF5D1BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.8.0/22
154.194.16.0-154.194.27.255
154.194.196.0/22
154.194.216.0/21
154.198.128.0/19
154.202.144.0/20
154.202.192.0/18
154.213.168.0/21
154.220.128.0/18
Signature Algorithm: sha256WithRSAEncryption
7d:df:84:1b:f6:5b:31:db:4d:2f:ed:47:89:80:e7:ac:c7:f1:
74:66:ce:0e:26:01:85:a4:d2:da:c4:52:c0:6f:ff:5f:9d:29:
97:6c:70:50:fb:39:8b:03:ed:a0:dd:48:24:d0:15:95:45:1a:
57:cf:6b:30:71:12:85:75:78:87:33:85:64:16:8f:31:02:d2:
b6:1c:2b:3a:d2:61:41:7e:db:15:64:62:ab:44:8f:e2:39:22:
1d:a1:58:4d:db:87:2a:6a:49:73:02:1e:3a:37:13:3d:51:48:
49:5f:4c:66:da:27:eb:85:d0:19:8c:9d:b4:c1:b6:86:0b:5c:
eb:8f:b2:21:82:b7:c9:87:45:da:b4:08:0b:60:da:45:a6:66:
78:44:e6:16:18:96:65:37:e5:b8:9c:80:65:cd:48:64:a1:03:
45:32:35:41:54:3a:d6:af:83:cf:d2:60:e3:24:96:c7:2f:eb:
17:5d:e7:ab:8f:cb:86:b3:13:6a:94:fc:18:38:a2:cb:b9:03:
bb:d4:5e:90:a8:36:f3:07:8c:9c:47:a1:24:1b:7e:a5:b3:6d:
2f:b8:a3:d7:8c:e8:80:01:e9:bc:af:02:7b:0b:37:a1:94:2a:
c5:a4:56:f1:04:45:15:1d:9c:25:c9:7b:24:f9:ed:56:20:b7:
60:3a:b2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:00:10 2026 by rpki-client