Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/530BD4503FC211F19E88C202CF1D38B0.roa
File: 530BD4503FC211F19E88C202CF1D38B0.roa (raw, json)
Hash identifier: pPLQjcDHX6N5qVxQRKeDWVRm5QqQcrr3pkXXQRKQx4g=
Subject key identifier: BD:2D:42:64:BE:BC:B2:68:62:8D:F3:D9:4C:45:94:6D:0E:DE:E3:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C72D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/530BD4503FC211F19E88C202CF1D38B0.roa
Signing time: Fri 24 Apr 2026 09:45:28 +0000
ROA not before: Fri 24 Apr 2026 09:45:23 +0000
ROA not after: Sun 31 May 2026 09:45:23 +0000
asID: 62240
IP address blocks: 154.195.108.0/24 maxlen: 24
154.195.111.0/24 maxlen: 24
154.195.112.0/24 maxlen: 24
154.195.116.0/24 maxlen: 24
154.195.117.0/24 maxlen: 24
154.195.120.0/24 maxlen: 24
154.195.124.0/24 maxlen: 24
154.195.135.0/24 maxlen: 24
154.195.136.0/24 maxlen: 24
154.196.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116525 (0x1c72d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 09:45:23 2026 GMT
Not After : May 31 09:45:23 2026 GMT
Subject: CN=69eb3bb8-025f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:47:44:aa:de:8a:56:48:56:b6:89:b4:f3:9f:
30:26:c4:8a:d5:6d:c4:dd:a4:39:70:a9:eb:bb:6e:
c8:c7:9f:b5:26:53:c4:82:49:a5:1b:9b:42:78:ae:
a2:a8:39:08:5a:78:96:5e:54:9a:17:26:e1:95:a3:
e9:5d:b9:2a:ec:33:cb:fe:f2:b5:b6:b4:da:1c:8f:
52:78:0c:bc:0c:a4:2f:55:ca:69:6d:93:bc:c6:37:
c0:36:fc:79:46:8e:55:17:ba:55:6c:90:0f:a6:6b:
7a:5c:ea:72:07:4e:14:24:70:8b:fb:0d:d3:80:bb:
f7:d5:dd:cd:09:22:55:06:94:6c:9c:fb:53:a5:52:
98:94:3c:6d:44:02:2e:a8:fb:f2:18:7b:54:7c:ef:
f3:26:7b:c4:d4:2b:20:1c:47:87:78:5b:68:97:0d:
2a:44:1c:18:ca:b1:36:a3:00:5c:49:2e:1d:ce:da:
d2:49:0f:24:54:b9:1b:60:cb:25:7e:49:61:0f:af:
aa:a6:9c:fa:df:d4:db:91:e7:da:68:1a:d4:2d:37:
4b:d2:2a:01:18:2e:18:aa:1b:a5:8b:e8:e1:26:a7:
41:58:12:bd:e1:24:e5:e2:da:a1:f7:0f:5a:35:01:
e4:1a:21:c9:3a:d4:81:59:71:ea:29:c5:2f:72:da:
d9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2D:42:64:BE:BC:B2:68:62:8D:F3:D9:4C:45:94:6D:0E:DE:E3:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/530BD4503FC211F19E88C202CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.108.0/24
154.195.111.0-154.195.112.255
154.195.116.0/23
154.195.120.0/24
154.195.124.0/24
154.195.135.0-154.195.136.255
154.196.29.0/24
Signature Algorithm: sha256WithRSAEncryption
73:ef:b1:8e:14:fb:52:15:9f:8d:62:5b:f1:4e:4b:7a:d5:dc:
23:c6:75:dc:4d:58:2b:6c:c1:7d:95:f3:f7:d0:09:62:b6:ae:
18:b4:a0:ce:c5:01:9b:27:4a:b2:f6:1d:e4:94:ba:f0:dc:c0:
da:73:69:4e:1d:7e:e0:6a:2d:c2:49:87:03:d0:dc:2d:c2:e9:
8f:be:af:49:1f:5b:38:ed:13:b6:82:f0:e2:7c:18:5c:83:ab:
d3:35:ca:7e:c5:c2:a9:32:6a:39:9f:75:76:4a:4b:34:d9:da:
68:8c:5f:29:a4:b3:e6:53:2d:f2:5c:b6:33:c7:01:ca:79:e1:
52:7d:b6:96:f4:59:a8:37:67:23:5e:37:3a:46:17:af:48:ec:
03:bd:32:17:b4:c0:25:1b:4b:51:bf:88:bf:62:19:a8:e4:cc:
58:72:0f:2a:d0:31:71:b5:1c:79:0b:f6:bb:7d:10:ad:f9:72:
c1:8f:98:0e:68:6e:ed:b6:a2:6e:55:66:9a:21:ca:1c:55:12:
ee:c2:61:97:bb:fd:06:d2:bc:2e:52:e6:e0:9e:02:00:ee:b6:
4f:91:47:c4:3d:06:a7:f3:ab:8a:63:29:9b:3a:35:24:14:5a:
c7:52:8b:9e:a7:3e:58:40:2b:23:d1:30:79:8b:3b:ba:94:52:
48:a3:a3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:03:49 2026 by rpki-client