Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4BC27508546411F1A5C63F04CF1D38B0.roa
File: 4BC27508546411F1A5C63F04CF1D38B0.roa (raw, json)
Hash identifier: oko8mxIK3S4kkbZxAUpAsQTjmP5r8UU/6ltRxKFqkHI=
Subject key identifier: 20:0C:75:88:30:CD:C8:4D:0F:1D:B2:30:CE:43:39:84:BD:BA:E4:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CCFA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4BC27508546411F1A5C63F04CF1D38B0.roa
Signing time: Wed 20 May 2026 15:55:17 +0000
ROA not before: Wed 20 May 2026 15:55:12 +0000
ROA not after: Fri 26 Jun 2026 15:55:12 +0000
asID: 138915
IP address blocks: 154.203.149.0/24 maxlen: 24
154.203.150.0/24 maxlen: 24
154.203.151.0/24 maxlen: 24
154.203.152.0/24 maxlen: 24
154.203.153.0/24 maxlen: 24
154.203.154.0/23 maxlen: 24
154.203.156.0/24 maxlen: 24
154.203.157.0/24 maxlen: 24
154.203.158.0/24 maxlen: 24
154.203.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 06:56:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118010 (0x1ccfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 20 15:55:12 2026 GMT
Not After : Jun 26 15:55:12 2026 GMT
Subject: CN=6a0dd965-0bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:24:56:4b:7d:e4:46:65:2e:19:fc:8f:25:4b:
ee:35:9b:6d:be:5d:c0:a8:74:55:be:17:fc:00:24:
66:63:6c:7d:de:23:f3:f9:6a:94:82:8e:c1:37:2a:
43:9f:ac:91:cd:b7:24:e1:ec:05:8c:e1:a1:92:9d:
e8:25:ab:f4:ff:94:2c:7c:a3:18:bc:61:71:47:0e:
3b:0d:af:05:69:56:1f:0a:8f:9c:dc:2f:25:1a:0d:
6c:9b:d1:be:b0:51:c9:d4:a0:f0:9c:a9:1b:67:3b:
02:8b:f7:ae:7d:20:1e:89:b5:1e:e9:13:04:54:07:
85:d0:48:25:4e:d2:4c:1b:a9:b5:e0:dc:f4:94:02:
73:dd:72:24:74:f6:b8:f9:6c:f0:51:93:89:d9:6f:
ac:a7:f7:71:cd:50:17:13:a9:9d:b1:ef:09:31:1f:
88:d5:e8:d8:9c:ca:e1:d7:e0:01:03:ee:de:14:9f:
a0:31:56:fc:05:95:51:6b:c3:26:ba:57:08:dc:18:
68:0e:4d:15:e2:a6:ce:61:c7:cb:de:59:a0:9a:0a:
70:98:b3:49:1a:86:0c:49:bc:59:57:97:d6:1b:9a:
7e:76:98:fc:0c:60:bb:29:56:25:5d:cc:44:da:14:
db:51:75:91:de:bb:5a:8f:89:40:51:24:53:81:bb:
05:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0C:75:88:30:CD:C8:4D:0F:1D:B2:30:CE:43:39:84:BD:BA:E4:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4BC27508546411F1A5C63F04CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.149.0-154.203.159.255
Signature Algorithm: sha256WithRSAEncryption
3b:ac:1a:32:00:73:19:c4:1d:8d:46:c2:b8:09:25:28:27:f8:
42:7f:ca:f6:2f:3b:92:89:22:74:09:9a:6e:30:a0:5b:a2:8a:
a6:b2:ec:da:41:c2:54:9b:dc:93:9f:7b:97:05:a1:ff:c6:8d:
18:a8:fe:72:01:57:a8:7c:05:60:c6:03:7b:8e:ce:d2:4e:9a:
fc:74:16:7c:06:f7:25:c4:87:f9:28:ed:a7:1c:97:ae:93:1a:
26:a2:bc:0a:5f:69:50:d1:7b:c9:d6:1c:dc:fc:e5:e0:7e:d1:
77:bf:9b:86:2e:41:37:a2:2b:50:b0:bc:09:59:fe:63:e8:8e:
d6:ae:80:bb:a5:81:5c:1f:07:29:f4:30:cf:58:3e:e1:e0:7e:
13:7a:5f:9f:b6:53:66:85:67:bf:d0:cf:4a:1f:93:dc:b0:95:
c1:a2:21:62:48:16:57:9a:1f:8c:58:e9:44:93:c3:24:20:3e:
b3:68:5d:f3:67:8c:4e:09:da:53:c8:6e:3a:af:22:ff:b8:60:
ca:f8:25:05:8e:98:35:9d:38:45:59:25:8f:f3:83:49:d0:6c:
d0:dc:4d:34:5b:99:77:86:3d:a7:d0:8e:21:1b:30:4e:92:cb:
87:fd:62:f3:a3:ae:56:00:8e:db:51:a4:ea:f6:ab:65:83:36:
06:11:f0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:12:40 2026 by rpki-client