Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5499F5B0244511F19997DAC9DAE4EC9C.roa
File: 5499F5B0244511F19997DAC9DAE4EC9C.roa (raw, json)
Hash identifier: xjGqJxaQiVz6nnP6x6FT1sfNfUhixDLVZ6ywdF30sck=
Subject key identifier: 7B:8C:03:74:9E:27:20:DA:EB:77:42:91:8F:35:99:02:79:04:52:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C012
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5499F5B0244511F19997DAC9DAE4EC9C.roa
Signing time: Fri 20 Mar 2026 10:12:42 +0000
ROA not before: Fri 20 Mar 2026 10:12:36 +0000
ROA not after: Sun 26 Apr 2026 10:12:36 +0000
asID: 138915
IP address blocks: 154.203.142.0/24 maxlen: 24
154.203.143.0/24 maxlen: 24
154.203.144.0/23 maxlen: 24
154.203.163.0/24 maxlen: 24
154.203.164.0/24 maxlen: 24
154.203.166.0/24 maxlen: 24
154.205.140.0/24 maxlen: 24
154.205.157.0/24 maxlen: 24
154.205.158.0/24 maxlen: 24
154.205.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114706 (0x1c012)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 20 10:12:36 2026 GMT
Not After : Apr 26 10:12:36 2026 GMT
Subject: CN=69bd1d9a-a115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ec:e8:42:ff:4b:88:1d:00:8d:ed:4c:b0:12:
d3:5c:05:b0:20:25:82:09:0d:14:ad:73:e9:ff:3f:
90:41:6d:05:55:77:23:b7:7f:c0:0f:b8:02:cb:b0:
c7:6f:7d:d6:0f:75:06:52:0f:db:7e:74:00:8a:e4:
9d:0f:35:9d:ec:75:58:d4:20:db:48:a9:da:64:f1:
12:15:d9:b8:9a:10:10:f9:80:73:4c:91:40:da:93:
71:dd:fe:04:e8:65:9a:5d:b2:66:27:cb:a3:93:46:
33:77:c1:1c:e3:12:8d:e4:8a:25:03:b5:43:58:5f:
ae:1a:31:35:61:45:15:4c:09:7f:4c:84:fc:22:44:
a1:4a:56:e4:cd:57:84:09:e0:35:26:de:e8:8b:50:
74:30:37:c0:7f:1c:e0:45:da:ed:0d:85:98:86:3d:
a2:c7:7b:20:97:09:95:d5:7c:b6:f7:07:c3:e0:e9:
26:c4:f9:d8:d1:a4:e2:99:7c:60:87:6e:d3:f3:e3:
d9:c9:bc:af:e0:9b:48:35:a2:db:99:48:52:5f:b4:
e7:7f:35:3e:b3:35:f0:10:e4:03:43:93:af:2a:49:
84:1a:2c:b1:93:2c:3d:8e:2f:cf:9f:7f:8f:73:0f:
9c:97:98:95:7e:28:fe:db:af:4e:9f:7e:29:70:7a:
ba:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8C:03:74:9E:27:20:DA:EB:77:42:91:8F:35:99:02:79:04:52:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5499F5B0244511F19997DAC9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.142.0-154.203.145.255
154.203.163.0-154.203.164.255
154.203.166.0/24
154.205.140.0/24
154.205.157.0-154.205.159.255
Signature Algorithm: sha256WithRSAEncryption
51:d0:fb:64:3f:3a:fd:86:c5:a6:69:8a:00:9b:af:1a:d9:09:
3a:43:9d:b6:b2:26:49:6c:27:d4:06:7b:af:31:ed:46:30:da:
fd:94:8c:95:90:7a:75:f0:73:05:8e:bb:61:44:7a:f2:a9:d3:
56:db:f8:78:5f:b0:b3:0c:c4:9b:d0:39:9c:71:ff:a2:e6:49:
86:1f:4b:dd:14:cc:2f:61:b3:ee:fc:21:f5:77:01:fa:bf:54:
92:0c:66:55:32:49:0a:e3:eb:d2:d9:00:30:d9:30:8c:05:e2:
62:b0:5b:70:3a:2e:17:80:a1:35:cd:fd:d1:c8:c4:8a:cb:cc:
32:65:eb:fc:86:1d:c7:59:16:08:aa:0b:ec:53:9f:ec:32:db:
f4:00:8a:78:42:36:57:33:b5:e7:d0:05:d4:c4:58:53:eb:ec:
3d:84:64:78:ad:48:0f:de:1c:50:ea:9e:86:d4:e2:d3:69:62:
f1:4f:ba:08:cd:26:da:f2:ed:2b:c3:87:be:b5:30:06:05:64:
b8:40:4a:2a:ad:82:5d:09:ac:04:57:8e:ae:5d:18:d6:76:21:
2b:20:cd:43:71:0a:55:61:5f:8b:26:f3:35:90:84:dd:32:c5:
c7:0b:69:90:e8:b0:88:37:3b:a4:85:f9:c3:fe:e7:22:6e:ce:
a1:ad:1c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:13:53 2026 by rpki-client