Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A3AA8D23E4711F18EF395EDCE1D38B0.roa
File: 4A3AA8D23E4711F18EF395EDCE1D38B0.roa (raw, json)
Hash identifier: aHItx3qOh2Xt61woO2bV1B+wCpRUHF1FPBHZAUfsGI0=
Subject key identifier: 89:5F:3A:40:AB:58:F1:A3:A6:A7:B2:7A:F4:4D:E5:B2:71:19:69:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C677
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A3AA8D23E4711F18EF395EDCE1D38B0.roa
Signing time: Wed 22 Apr 2026 12:32:14 +0000
ROA not before: Wed 22 Apr 2026 12:32:09 +0000
ROA not after: Fri 29 May 2026 12:32:09 +0000
asID: 214143
IP address blocks: 154.81.132.0/22 maxlen: 24
154.81.138.0/23 maxlen: 24
154.82.172.0/23 maxlen: 24
154.83.18.0/23 maxlen: 24
154.83.40.0/23 maxlen: 24
154.83.42.0/23 maxlen: 24
154.83.72.0/23 maxlen: 24
154.83.74.0/23 maxlen: 24
154.83.76.0/23 maxlen: 24
154.93.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116343 (0x1c677)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 12:32:09 2026 GMT
Not After : May 29 12:32:09 2026 GMT
Subject: CN=69e8bfce-bfd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:db:04:8d:d5:b0:50:ea:db:17:cd:f8:e1:9b:
05:66:47:84:de:5e:1f:70:de:0c:c6:67:71:a6:bf:
8b:79:66:ba:21:ac:e5:fe:46:e5:ce:bd:98:d5:47:
ad:8e:fb:a4:0c:75:d6:a9:41:b9:69:38:14:d6:2a:
81:aa:94:80:fb:97:63:c5:ce:b3:b5:06:ec:b1:14:
bd:27:af:98:a4:91:84:c0:07:a4:54:85:aa:90:ce:
1e:31:22:c5:f4:3d:45:e8:11:3f:bd:bd:02:97:92:
9b:6a:8c:46:da:57:31:f7:27:8c:bc:c2:6b:8e:78:
c4:b3:c2:76:7a:ac:69:6b:bb:43:16:d0:06:2d:30:
0e:b0:02:47:4d:67:d0:80:83:24:5c:2a:9f:18:f3:
f0:c6:74:1e:55:c5:a7:61:8f:61:70:60:fe:dd:68:
20:72:cd:0e:ef:d6:de:7f:ca:64:93:dc:34:cc:48:
8a:31:95:d0:9f:9a:72:c5:05:1e:e5:b8:ed:94:b2:
fa:87:47:03:99:c0:7d:28:0c:aa:8c:c3:92:d7:1a:
f7:f2:b1:75:17:84:e5:20:1a:52:6c:9d:63:08:2e:
15:c2:ad:b5:59:59:1d:e7:94:f2:18:ef:2e:67:9a:
63:7e:0c:ce:0d:89:3b:53:45:af:4c:d5:be:43:7e:
0f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5F:3A:40:AB:58:F1:A3:A6:A7:B2:7A:F4:4D:E5:B2:71:19:69:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A3AA8D23E4711F18EF395EDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.132.0/22
154.81.138.0/23
154.82.172.0/23
154.83.18.0/23
154.83.40.0/22
154.83.72.0-154.83.77.255
154.93.28.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:96:37:1a:98:21:fa:df:e4:c2:2f:c1:5f:7e:19:86:2b:d5:
98:d7:2e:a2:00:f4:c3:5c:64:49:b1:39:66:62:19:03:a0:6e:
53:cb:af:fc:c4:c9:25:15:bc:a6:d5:51:e1:eb:99:ff:58:08:
cf:78:90:ec:4a:cf:5a:27:a1:16:68:c4:b3:ff:40:ed:73:6f:
40:8e:f8:d0:e7:e0:6a:d3:c2:f1:8f:c9:e2:1e:34:8c:0e:34:
7d:75:a7:13:82:fc:4b:9f:df:3a:10:e1:95:0d:d1:36:7a:39:
a0:7e:6d:6c:8f:96:a5:8e:a7:5f:f0:51:8e:c7:c7:ad:0c:36:
1b:d2:ae:4d:64:c9:5d:30:43:c0:d4:a7:c5:5d:27:7a:ec:95:
62:10:8c:3a:e4:c8:cc:9a:3d:78:ff:bf:0f:6c:02:a4:01:5a:
0c:7e:ea:d9:87:49:46:ee:05:cf:d9:27:90:aa:80:ae:e3:c7:
4a:7d:8a:e5:67:70:d9:c3:d5:e4:81:79:1f:db:c6:00:4e:7d:
55:88:8d:7a:5b:05:24:74:ac:fe:f3:b6:d7:bf:a6:04:8c:d9:
b0:7d:7b:b7:44:f2:dc:a3:6f:78:97:ad:77:58:6d:95:98:59:
4c:6e:d5:f8:d3:f5:3e:8d:a5:6b:e2:d0:1e:2d:05:02:15:04:
aa:1b:95:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:03:50 2026 by rpki-client