Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67A142DA3EEE11F19EDACAF3CE1D38B0.roa
File: 67A142DA3EEE11F19EDACAF3CE1D38B0.roa (raw, json)
Hash identifier: GhcWhuO+gaO8vWD2N9sfeoNGOAXqPl2ZoCD3vAClJkk=
Subject key identifier: B0:6E:FC:3A:01:1D:64:45:97:E4:DA:6B:55:16:2D:A0:20:E2:71:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C6D1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67A142DA3EEE11F19EDACAF3CE1D38B0.roa
Signing time: Thu 23 Apr 2026 08:28:29 +0000
ROA not before: Thu 23 Apr 2026 08:28:24 +0000
ROA not after: Sat 30 May 2026 08:28:24 +0000
asID: 9304
IP address blocks: 154.193.2.0/24 maxlen: 24
154.193.35.0/24 maxlen: 24
154.194.195.0/24 maxlen: 24
154.196.134.0/24 maxlen: 24
154.196.160.0/24 maxlen: 24
154.196.179.0/24 maxlen: 24
154.196.180.0/24 maxlen: 24
154.199.4.0/24 maxlen: 24
154.200.1.0/24 maxlen: 24
154.200.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116433 (0x1c6d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 08:28:24 2026 GMT
Not After : May 30 08:28:24 2026 GMT
Subject: CN=69e9d82d-1f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:70:c4:d8:6b:5c:bd:d1:4e:c3:20:fe:71:78:
06:93:ee:b4:dd:70:d7:74:4a:24:d6:60:34:97:1b:
01:82:b1:ef:a0:ad:fd:97:f9:f1:e0:fc:c1:7b:cb:
4a:c9:bb:ec:84:ea:9e:cd:c9:1a:66:27:57:32:a8:
06:98:e7:32:4a:59:6b:7c:75:01:bb:fa:ed:28:46:
53:c7:9d:21:28:72:08:ce:52:ed:46:40:55:25:b6:
f5:c1:04:87:02:63:3b:55:4c:58:77:82:9d:fd:cd:
61:70:9d:ad:64:b5:cc:91:fa:53:b9:72:df:8a:08:
b9:d0:67:5e:e6:75:1c:0b:80:e0:85:6f:57:dd:74:
6a:71:e2:e2:f5:b8:e4:b5:cd:a3:c5:d3:b7:66:a2:
da:64:c2:c4:3b:6f:58:19:2e:99:f3:44:cb:68:83:
9d:23:6e:20:3e:04:38:9a:66:a2:ee:ee:e5:c5:07:
62:c5:03:fd:7e:36:ea:31:0a:83:19:c5:cc:85:04:
3b:24:01:82:ea:b6:08:bf:1d:bb:5a:57:de:08:fe:
6d:fc:e5:58:5a:58:c7:83:a9:18:82:40:d7:5b:8f:
83:ad:76:08:bd:af:cb:33:0d:eb:d4:4d:d1:a1:3f:
09:97:fa:08:e4:40:e8:28:e6:6c:58:49:76:05:93:
99:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6E:FC:3A:01:1D:64:45:97:E4:DA:6B:55:16:2D:A0:20:E2:71:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67A142DA3EEE11F19EDACAF3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.2.0/24
154.193.35.0/24
154.194.195.0/24
154.196.134.0/24
154.196.160.0/24
154.196.179.0-154.196.180.255
154.199.4.0/24
154.200.1.0/24
154.200.26.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:8b:0e:89:a8:9e:9f:10:56:9e:7d:ca:a5:88:1f:51:f7:fd:
8b:24:6b:ef:5b:30:3e:d1:ac:51:59:bb:e9:b4:4c:23:5b:c4:
eb:f9:50:a9:08:43:e5:db:de:64:d1:f3:2d:14:3d:73:86:93:
7b:c4:67:28:32:38:59:b7:10:0c:ff:50:40:3d:6f:f2:68:00:
d2:91:79:75:3c:64:da:ee:17:d4:83:f2:c1:1f:57:a2:77:bc:
da:7d:35:14:03:58:d3:75:c7:de:90:13:82:b1:25:dd:15:31:
07:79:ba:00:d8:a1:71:30:aa:91:cb:ea:5a:fb:f0:3d:93:13:
60:01:2a:78:30:23:22:01:6f:5a:7f:64:3d:e4:7e:d8:21:cc:
74:2a:08:77:6c:91:80:0b:52:94:9d:f1:13:4e:b1:40:b4:d2:
ae:66:b1:b8:00:b1:8a:3c:4b:65:a0:d8:7e:cb:f7:98:bb:8a:
87:94:e8:00:40:97:f6:da:e6:b0:66:94:57:76:eb:c3:3f:3a:
37:ba:89:e7:1f:df:54:c1:3f:d6:9b:da:54:24:71:d6:ce:9c:
c8:33:1a:9e:05:ce:25:0c:be:90:16:9c:51:ac:8f:3c:9d:fd:
d1:db:99:70:00:50:a5:c9:53:fe:0a:81:59:a4:11:ad:61:87:
a7:b1:f7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 10:59:57 2026 by rpki-client