Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72B2C2E243B811F1B175C3A6CE1D38B0.roa
File: 72B2C2E243B811F1B175C3A6CE1D38B0.roa (raw, json)
Hash identifier: StiLhG/UjJVzGqqYIYem8NLIrCy2W2atiTRhdno/O9E=
Subject key identifier: AF:6C:44:8F:3F:1E:59:54:3C:D5:DE:8B:00:26:30:09:5C:70:23:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C7E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72B2C2E243B811F1B175C3A6CE1D38B0.roa
Signing time: Wed 29 Apr 2026 10:44:51 +0000
ROA not before: Wed 29 Apr 2026 10:44:45 +0000
ROA not after: Thu 01 Jul 2027 10:44:45 +0000
asID: 328608
IP address blocks: 154.214.44.0/24 maxlen: 24
154.214.45.0/24 maxlen: 24
154.214.46.0/24 maxlen: 24
154.214.47.0/24 maxlen: 24
154.214.48.0/24 maxlen: 24
154.214.49.0/24 maxlen: 24
154.214.50.0/24 maxlen: 24
154.214.51.0/24 maxlen: 24
154.214.52.0/24 maxlen: 24
154.214.53.0/24 maxlen: 24
154.214.54.0/24 maxlen: 24
154.214.55.0/24 maxlen: 24
154.214.56.0/24 maxlen: 24
154.214.57.0/24 maxlen: 24
154.214.58.0/24 maxlen: 24
154.214.59.0/24 maxlen: 24
154.214.60.0/24 maxlen: 24
154.214.61.0/24 maxlen: 24
154.214.62.0/24 maxlen: 24
154.214.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 May 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116708 (0x1c7e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 10:44:45 2026 GMT
Not After : Jul 1 10:44:45 2027 GMT
Subject: CN=69f1e122-e76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:09:cb:7a:d8:e0:78:4b:be:f1:98:d6:f4:af:
b3:ef:05:9e:45:a0:ff:20:c5:e2:a1:9b:84:a0:88:
03:0e:cb:be:0c:e1:84:f4:aa:a6:74:7d:74:55:55:
86:67:5e:d1:1e:66:cf:3e:40:eb:11:c6:e7:97:87:
2e:2e:69:17:21:86:56:d2:e4:60:9b:e5:74:95:f4:
2d:e3:3e:1a:e6:9d:df:66:a4:44:63:f8:ea:db:68:
0f:ff:46:af:2a:53:30:c2:12:16:ea:80:dc:7f:e2:
09:59:91:95:27:aa:03:45:eb:e0:0b:95:fe:10:7a:
d6:4f:47:5c:c9:bf:3d:1b:c9:a7:2d:a3:e2:a8:d0:
8d:28:bc:ce:fe:53:70:41:3b:c0:9b:78:a5:6e:44:
d0:af:9d:66:d5:34:08:59:8b:14:e7:17:c3:22:13:
03:6e:a7:a9:c4:25:92:de:55:5b:65:b6:9c:da:5b:
3d:f5:c0:b6:9f:69:b6:8e:ac:4c:51:1c:83:a0:9e:
78:8a:38:ba:dc:ee:6a:00:7b:d9:1d:3c:0c:9b:9d:
3b:89:78:b7:cb:9f:b1:20:08:64:30:93:cf:99:b6:
18:b5:74:f4:df:d9:a6:7a:e0:b7:8d:bb:23:b6:aa:
49:01:5f:d3:a7:69:13:fb:51:fb:e0:b2:73:b7:ea:
0f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6C:44:8F:3F:1E:59:54:3C:D5:DE:8B:00:26:30:09:5C:70:23:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72B2C2E243B811F1B175C3A6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.44.0-154.214.63.255
Signature Algorithm: sha256WithRSAEncryption
a6:79:c0:e7:7b:07:e8:a6:d9:e1:d4:73:b2:16:1f:0e:10:c5:
0c:ab:f0:07:0b:7c:91:56:f4:de:4c:bb:b1:7a:72:67:86:ce:
6e:99:7c:21:e6:4c:64:f6:e2:a1:b2:53:c4:ed:7c:78:1e:ef:
5c:d5:7b:6b:50:b6:6f:37:c2:47:9b:4f:e3:64:71:0e:3a:ac:
f0:8b:af:49:3f:3f:37:48:6e:50:d6:ca:09:af:9b:32:f9:e9:
80:b0:1f:83:be:b9:e0:d6:6f:d6:4c:b1:dc:49:af:27:1e:1b:
fa:2a:f1:ba:17:21:f4:c1:72:38:3a:7f:fe:ec:c7:fd:fd:9c:
b1:0f:24:d5:8e:22:4d:0a:1a:59:ff:37:ef:22:e3:be:e5:9a:
96:36:a7:7f:34:30:6c:b8:cf:d5:cf:61:79:2e:d6:02:29:04:
8c:3a:6b:77:fe:f1:7d:29:36:93:cc:ed:3d:1e:3c:85:e7:86:
bb:61:b7:55:cc:d8:d9:51:48:cc:72:58:a4:ed:36:4d:aa:8d:
d9:f6:66:0c:df:2a:d6:3f:77:b9:69:e8:0b:bf:dd:e2:b5:dd:
87:2b:03:d4:8d:d8:fb:64:cd:e8:03:80:28:18:cd:d7:e8:a0:
90:d4:b0:bf:3c:ea:9d:43:84:bb:54:21:59:ca:72:79:c6:83:
88:3a:10:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 23:49:01 2026 by rpki-client