Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79A3089E3E5611F1B9D77CCACE1D38B0.roa
File: 79A3089E3E5611F1B9D77CCACE1D38B0.roa (raw, json)
Hash identifier: gz1YFu6Zzg/3QxXWZcnh2Id1GIHcM8BXSc8UjE5FbHM=
Subject key identifier: 25:85:46:78:AE:61:45:24:E6:D6:72:09:48:77:BD:DA:D0:18:49:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C67F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79A3089E3E5611F1B9D77CCACE1D38B0.roa
Signing time: Wed 22 Apr 2026 14:20:56 +0000
ROA not before: Wed 22 Apr 2026 14:20:51 +0000
ROA not after: Sat 30 May 2026 14:20:51 +0000
asID: 32043
IP address blocks: 154.194.5.0/24 maxlen: 24
154.197.104.0/22 maxlen: 24
154.200.22.0/24 maxlen: 24
154.200.38.0/23 maxlen: 24
154.200.40.0/24 maxlen: 24
154.200.47.0/24 maxlen: 24
154.200.110.0/24 maxlen: 24
154.203.8.0/22 maxlen: 24
154.203.12.0/22 maxlen: 24
154.203.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Apr 2026 11:31:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116351 (0x1c67f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 14:20:51 2026 GMT
Not After : May 30 14:20:51 2026 GMT
Subject: CN=69e8d948-8a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8d:1b:65:e9:fd:88:a1:9d:34:f3:a3:56:f9:
57:78:2c:5c:81:11:22:cb:25:f7:9d:5c:09:28:bc:
6f:eb:9c:7a:1e:48:c1:cc:ab:0a:16:54:2a:9c:d3:
92:bb:bc:7e:7f:dc:c7:9c:79:21:c2:b9:cc:8a:a9:
d5:74:e7:73:6f:b5:5f:bc:9f:26:fd:b1:7b:71:85:
c1:ce:04:17:a0:72:3a:1b:05:ff:c9:bd:e0:bc:39:
9a:61:9a:37:d9:31:6f:2c:09:0a:5f:6e:f5:a5:74:
e9:85:22:b9:73:d9:24:2c:d4:92:a9:33:6b:40:15:
dd:fa:0e:4f:9b:54:87:b9:e1:1d:bb:b8:72:22:31:
f6:70:36:6f:78:1b:c4:08:12:01:d7:9c:23:dc:cd:
3d:30:86:38:23:69:8b:23:0b:9a:32:c3:9a:04:3e:
0e:09:50:85:cf:3c:99:cc:ee:54:2c:39:6b:41:da:
6b:00:07:1f:78:67:2d:01:81:41:ec:95:3d:3d:48:
15:92:1e:e2:96:72:67:30:c1:89:73:1d:d2:65:47:
44:14:01:21:68:b5:69:84:5d:28:94:9f:b9:92:29:
fc:65:69:55:89:d1:26:66:cf:9f:6e:97:1d:a9:39:
b3:bb:68:c8:44:5e:77:b6:25:2f:68:e7:b1:69:9d:
aa:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:85:46:78:AE:61:45:24:E6:D6:72:09:48:77:BD:DA:D0:18:49:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79A3089E3E5611F1B9D77CCACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.5.0/24
154.197.104.0/22
154.200.22.0/24
154.200.38.0-154.200.40.255
154.200.47.0/24
154.200.110.0/24
154.203.8.0/21
154.203.243.0/24
Signature Algorithm: sha256WithRSAEncryption
18:97:66:3e:e8:f9:62:23:9f:b0:38:80:ab:4b:2b:8b:ba:18:
6e:16:d1:b0:ca:6d:fc:9d:58:bb:8f:12:81:99:18:82:0e:c1:
82:7a:5f:26:b7:3b:cf:6e:d5:7f:bf:24:7d:46:5e:7b:e1:69:
66:81:49:dc:ca:67:61:d6:89:ca:25:d7:64:33:96:6a:74:d7:
78:f8:64:74:50:65:7d:6b:80:05:16:d1:74:16:35:7d:bf:3f:
28:0d:9b:0f:56:6d:82:1f:f8:d9:95:b8:0e:91:0f:60:1d:7d:
97:9d:98:1c:d2:71:09:08:4f:b6:84:ae:15:27:25:a1:0c:39:
aa:d5:4c:71:83:d3:45:03:71:05:34:26:c1:09:85:ac:cc:67:
d5:00:75:4d:71:55:17:52:58:44:c1:91:24:33:21:a3:49:2c:
e6:f0:e1:8d:be:56:aa:a5:40:63:08:d1:20:a1:ab:92:bb:b0:
5b:19:0e:b2:ab:ce:be:4b:2a:61:bb:c3:37:8a:f0:bb:ee:1b:
fb:4e:e7:21:f3:0f:32:13:0d:0e:56:2c:7c:61:ac:e6:78:db:
43:53:3b:35:80:d5:50:c3:bb:e5:cc:c1:76:df:4d:2b:b5:3a:
61:c7:5c:d8:b2:58:c5:86:ec:2e:3b:d7:8f:40:56:14:4a:bb:
ef:74:32:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 24 18:34:14 2026 by rpki-client