Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/576FD67E447011F1BF1DF306CF1D38B0.roa
File: 576FD67E447011F1BF1DF306CF1D38B0.roa (raw, json)
Hash identifier: ozzLFZ7o1lvA6PLHLeSqp6qH2Df9lIF2aN4A7sCFQk4=
Subject key identifier: 90:31:2F:7A:4B:08:66:55:F6:FF:E8:8A:57:DD:7F:C6:E9:5C:83:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C805
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/576FD67E447011F1BF1DF306CF1D38B0.roa
Signing time: Thu 30 Apr 2026 08:41:12 +0000
ROA not before: Thu 30 Apr 2026 08:41:08 +0000
ROA not after: Fri 30 Apr 2027 08:41:08 +0000
asID: 328608
IP address blocks: 154.200.182.0/24 maxlen: 24
154.200.183.0/24 maxlen: 24
154.200.184.0/24 maxlen: 24
154.200.185.0/24 maxlen: 24
154.200.186.0/24 maxlen: 24
154.200.187.0/24 maxlen: 24
154.200.188.0/24 maxlen: 24
154.200.189.0/24 maxlen: 24
154.200.190.0/24 maxlen: 24
154.200.192.0/24 maxlen: 24
154.200.193.0/24 maxlen: 24
154.200.194.0/24 maxlen: 24
154.200.195.0/24 maxlen: 24
154.200.196.0/24 maxlen: 24
154.200.197.0/24 maxlen: 24
154.200.198.0/24 maxlen: 24
154.200.199.0/24 maxlen: 24
154.200.200.0/24 maxlen: 24
154.200.201.0/24 maxlen: 24
154.200.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 May 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116741 (0x1c805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 08:41:08 2026 GMT
Not After : Apr 30 08:41:08 2027 GMT
Subject: CN=69f315a8-a251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4c:29:ad:ff:d5:0e:3e:41:86:85:9b:d5:1b:
c6:36:86:c6:49:a0:63:61:84:9e:75:87:62:06:ea:
93:82:9e:31:ea:73:ea:e3:28:f3:4c:af:c7:4b:ab:
6c:4e:de:5e:3c:60:5a:3e:42:07:2a:6b:33:46:8b:
93:b4:80:15:65:f9:c7:32:77:d8:63:8a:86:cc:d5:
32:67:1a:15:24:80:66:89:7a:d9:82:79:05:5a:ee:
88:55:94:23:92:53:9b:bd:0c:b8:8a:db:d3:1e:c9:
f2:32:29:9a:08:c7:72:30:53:d3:88:34:26:f4:d5:
f0:5f:5e:64:5e:df:35:2c:4a:6f:e9:b7:bd:17:4b:
2d:0c:c6:bf:f9:02:f3:da:c0:18:f1:65:3c:67:5d:
0c:39:77:c4:c1:9c:46:6f:55:24:7b:bc:88:de:d7:
7a:c0:7d:4c:1a:ae:cb:51:58:dc:8a:1a:39:c5:06:
e4:3e:46:91:02:cb:bc:2c:44:60:ce:00:43:42:dd:
d0:87:3f:3b:80:7f:b2:fd:58:6d:46:44:52:c6:d4:
ca:e3:a3:ee:8c:1b:7b:e6:df:06:21:1f:20:a7:23:
24:f9:e0:a2:8d:3d:da:3a:68:0d:8f:78:91:fa:f4:
ee:ac:a9:c4:75:5a:a0:af:cb:e2:25:22:c9:aa:11:
df:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:31:2F:7A:4B:08:66:55:F6:FF:E8:8A:57:DD:7F:C6:E9:5C:83:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/576FD67E447011F1BF1DF306CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.182.0-154.200.190.255
154.200.192.0-154.200.202.255
Signature Algorithm: sha256WithRSAEncryption
2c:c9:20:2f:a0:0c:fe:14:db:f2:02:3c:02:ed:e0:40:f4:45:
5a:0d:f0:3d:85:e1:46:5b:18:8e:57:85:47:98:71:31:44:5c:
2e:27:15:03:11:21:d9:5d:19:bf:fb:bf:58:b6:27:2a:f1:c5:
8a:ac:1f:4c:0f:7c:43:fe:8a:ab:fe:5b:14:24:d1:93:f2:43:
0f:04:4d:13:ca:98:4e:8f:e6:e3:26:62:a9:92:b2:53:2c:7c:
1f:55:2c:ce:e0:ad:f7:3a:2a:58:3a:06:1a:27:26:92:e9:7d:
6a:b9:ed:73:f8:e2:e4:5d:9a:f2:8d:da:27:20:eb:35:59:0a:
bd:56:94:c4:8d:39:66:96:bf:83:fe:cf:da:f6:d0:c2:f9:09:
1d:87:bb:81:2f:0a:21:b7:60:c7:26:1a:e7:98:fa:65:41:14:
56:a4:02:cf:48:a4:37:ad:79:97:58:e7:4a:14:a9:57:ff:de:
3a:c3:37:44:19:93:e0:76:6f:d2:a1:3a:5d:e5:85:59:a7:e5:
75:a0:48:02:6e:dc:9a:cc:d6:9b:63:a9:68:23:21:85:4a:5a:
75:49:b8:a0:cc:e4:c8:f5:ee:78:fb:2b:30:26:5b:92:15:b1:
4d:a0:e1:cd:b4:ca:d9:b6:4b:33:7f:05:c5:85:e6:65:ea:79:
98:b6:68:e2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu May 7 23:48:41 2026 by rpki-client