Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4811332A3F2111F1A52C33A3CE1D38B0.roa
File: 4811332A3F2111F1A52C33A3CE1D38B0.roa (raw, json)
Hash identifier: w0+CfDQ0o60BLuFVlM9DIsUYeOqbz5JRlrsaVlahcA4=
Subject key identifier: 96:6E:AF:4D:43:C1:18:0E:3B:F6:76:42:B2:0F:E4:6A:A4:15:3E:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C6E9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4811332A3F2111F1A52C33A3CE1D38B0.roa
Signing time: Thu 23 Apr 2026 14:32:40 +0000
ROA not before: Thu 23 Apr 2026 14:32:35 +0000
ROA not after: Sat 30 May 2026 14:32:35 +0000
asID: 401783
IP address blocks: 154.194.195.0/24 maxlen: 24
154.196.134.0/24 maxlen: 24
154.196.160.0/24 maxlen: 24
154.200.1.0/24 maxlen: 24
154.200.37.0/24 maxlen: 24
154.200.46.0/24 maxlen: 24
154.200.48.0/24 maxlen: 24
154.200.53.0/24 maxlen: 24
154.200.54.0/24 maxlen: 24
154.200.60.0/24 maxlen: 24
154.200.131.0/24 maxlen: 24
154.200.140.0/24 maxlen: 24
154.200.142.0/24 maxlen: 24
154.200.157.0/24 maxlen: 24
154.200.158.0/24 maxlen: 24
154.200.159.0/24 maxlen: 24
154.200.160.0/24 maxlen: 24
154.200.161.0/24 maxlen: 24
154.200.162.0/24 maxlen: 24
154.200.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116457 (0x1c6e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 14:32:35 2026 GMT
Not After : May 30 14:32:35 2026 GMT
Subject: CN=69ea2d88-ba2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ab:cd:d5:3a:6a:1b:93:4c:20:cf:63:6c:b5:
cb:11:08:1b:d3:53:96:f4:78:91:71:a9:be:e1:88:
1b:6c:e6:1a:0c:e3:30:c4:3d:d4:64:d7:51:cb:1f:
fd:f4:d6:d5:7a:74:6e:b5:50:5b:a3:25:06:ec:08:
0f:eb:b3:10:6a:de:c3:73:e7:30:2f:8a:a0:e4:ad:
bd:23:2b:46:2d:88:02:05:5c:8d:11:06:1b:a8:9a:
aa:ab:40:d8:e0:86:f0:9a:a5:3d:a9:52:6f:91:4b:
1e:17:21:e5:9a:b3:0d:ce:1d:89:d6:d6:26:81:e3:
db:7b:0c:cb:06:79:23:9e:19:db:67:1e:15:2f:dc:
07:4a:a3:0c:4d:0a:51:56:45:8b:af:d7:ab:06:a2:
e3:8d:99:18:ba:25:38:2b:e6:a7:90:87:c4:fd:13:
47:60:a7:a2:97:e7:42:d3:d7:56:81:26:61:c5:e5:
2b:31:7b:ec:f2:e8:62:0f:73:4e:6e:78:1f:73:d7:
f1:38:90:a9:56:f7:59:d9:31:61:3c:07:d4:c3:13:
b8:1b:d5:9b:e8:91:0f:3a:cb:98:93:10:61:c7:fb:
9a:ca:e5:04:6e:9f:4b:79:a7:79:6a:3d:8d:f0:4d:
8f:7d:3c:86:e5:3f:89:80:2c:e3:d2:4c:37:c3:db:
36:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6E:AF:4D:43:C1:18:0E:3B:F6:76:42:B2:0F:E4:6A:A4:15:3E:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4811332A3F2111F1A52C33A3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.195.0/24
154.196.134.0/24
154.196.160.0/24
154.200.1.0/24
154.200.37.0/24
154.200.46.0/24
154.200.48.0/24
154.200.53.0-154.200.54.255
154.200.60.0/24
154.200.131.0/24
154.200.140.0/24
154.200.142.0/24
154.200.157.0-154.200.162.255
154.200.191.0/24
Signature Algorithm: sha256WithRSAEncryption
25:ff:db:75:f7:9f:bf:17:35:2d:a0:ef:9b:53:b3:bb:89:2d:
4c:2f:41:b5:73:d0:0d:6c:3e:29:fb:62:c3:8b:f8:83:e9:54:
d6:12:03:8e:bb:ff:14:16:2f:a1:e8:f0:1a:e5:28:e9:21:49:
83:b2:60:d6:5e:99:a9:6a:be:45:e4:bd:c5:6c:8a:2c:71:c1:
ad:7e:9f:a3:90:bb:48:d6:08:d2:bd:5e:f1:67:d2:d4:e7:9d:
3c:34:2a:de:a2:40:df:1a:6d:00:5f:b5:ce:58:53:64:2e:f0:
e1:25:93:07:41:1d:a8:86:9c:18:d4:54:f3:1f:83:33:be:a0:
f3:37:a8:a1:fc:6e:fc:74:52:0b:d5:77:67:ad:f9:3d:3a:f9:
e7:ac:1d:06:2c:af:32:95:f1:32:5e:8d:37:1c:c2:4d:6a:c1:
d7:a8:30:bd:93:e9:be:28:0e:6a:5d:9b:cd:77:95:43:b9:e3:
d7:ba:df:a8:a5:98:67:75:31:7a:99:26:4a:b3:5d:cd:71:36:
f1:5a:88:b8:c4:04:e8:78:ea:15:f2:1b:16:2e:e3:6d:ed:e3:
68:53:84:21:b2:e1:87:ac:50:78:b7:ab:da:ac:be:04:89:99:
c3:7c:71:c3:38:31:40:4a:c8:fc:b0:22:b8:20:45:2a:f9:65:
1c:c0:93:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:04 2026 by rpki-client