Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81CFB73E43B911F1A50123ADCE1D38B0.roa
File: 81CFB73E43B911F1A50123ADCE1D38B0.roa (raw, json)
Hash identifier: 5hUBtCLfFgcxeq7HdXtmft/BEXBYWvbVu7cmfrJ4Wxo=
Subject key identifier: 44:1E:B2:63:93:31:8C:27:22:8B:E7:B8:45:79:12:DC:BC:D3:C6:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C7E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81CFB73E43B911F1A50123ADCE1D38B0.roa
Signing time: Wed 29 Apr 2026 10:52:25 +0000
ROA not before: Wed 29 Apr 2026 10:52:20 +0000
ROA not after: Thu 01 Jul 2027 10:52:20 +0000
asID: 36898
IP address blocks: 154.210.123.0/24 maxlen: 24
154.210.124.0/24 maxlen: 24
154.210.125.0/24 maxlen: 24
154.210.126.0/24 maxlen: 24
154.210.127.0/24 maxlen: 24
154.213.4.0/24 maxlen: 24
154.213.5.0/24 maxlen: 24
154.214.1.0/24 maxlen: 24
154.214.32.0/24 maxlen: 24
154.214.33.0/24 maxlen: 24
154.214.34.0/24 maxlen: 24
154.214.35.0/24 maxlen: 24
154.214.36.0/24 maxlen: 24
154.214.37.0/24 maxlen: 24
154.214.38.0/24 maxlen: 24
154.214.39.0/24 maxlen: 24
154.214.40.0/24 maxlen: 24
154.214.41.0/24 maxlen: 24
154.214.42.0/24 maxlen: 24
154.214.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116710 (0x1c7e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 10:52:20 2026 GMT
Not After : Jul 1 10:52:20 2027 GMT
Subject: CN=69f1e2e9-0eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:89:9a:ef:f7:26:57:46:9e:c2:b2:5c:55:b9:
06:1b:73:1a:3b:70:f2:44:72:5e:aa:2f:74:14:d7:
e8:23:63:29:58:fd:1e:9d:60:5a:04:78:60:b2:0f:
c6:92:8e:27:c4:9e:ba:6e:a3:a6:b9:a4:d8:ad:bc:
6f:99:ba:56:7a:4c:b9:3b:0a:51:8d:83:06:a8:f0:
8a:65:ff:58:90:04:79:ac:1e:26:72:c0:63:12:81:
fa:65:51:69:bb:ab:c4:9b:51:d3:10:4b:e1:1f:f1:
de:cf:60:27:1a:7e:89:4b:3a:da:04:28:65:54:79:
12:f2:2a:b8:72:4d:11:98:a3:ce:39:1e:a2:95:7b:
ea:34:30:9a:d2:b7:1d:97:84:05:20:51:b6:bb:e0:
a2:14:cc:ae:22:df:64:b2:4d:81:db:2b:67:c1:36:
f6:16:50:c8:3a:a8:87:fe:6d:bc:17:d8:7d:0c:6a:
29:ab:39:96:ba:3c:a7:df:bd:d2:58:a3:25:c0:6a:
52:c2:a1:dd:8a:e6:75:13:a2:f4:14:94:6a:6e:a2:
ca:63:81:9a:b2:9d:72:50:d7:af:a4:ad:1b:2b:8d:
27:50:e2:4b:7b:7b:3b:11:c9:bb:b0:3b:c4:08:1f:
56:c8:97:21:32:24:0b:bc:2e:b8:8d:e0:3a:46:c2:
aa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1E:B2:63:93:31:8C:27:22:8B:E7:B8:45:79:12:DC:BC:D3:C6:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81CFB73E43B911F1A50123ADCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.123.0-154.210.127.255
154.213.4.0/23
154.214.1.0/24
154.214.32.0-154.214.43.255
Signature Algorithm: sha256WithRSAEncryption
ce:24:d8:ad:ba:9c:6c:6f:33:15:ff:49:f8:30:9f:b2:11:30:
08:5c:db:dc:47:3b:b3:3c:74:55:60:8e:c9:00:28:a5:49:6b:
d3:71:b8:8e:76:5a:65:67:af:66:02:6e:44:85:8a:a2:5f:b0:
eb:3b:d1:46:86:20:a5:d7:d4:78:7a:1b:62:44:27:48:bc:e4:
9c:97:9d:48:05:de:16:0c:39:64:34:67:37:0f:54:74:f4:36:
7e:f7:12:6e:76:d3:7e:e5:9a:c1:6a:4f:20:93:58:36:ab:32:
a1:2c:7a:19:fe:52:4e:09:53:17:01:f4:6d:77:52:96:60:2e:
ce:b4:0f:ad:ec:05:98:b1:6f:51:a8:6e:86:c8:14:f3:c8:f9:
d6:f6:89:3a:66:bc:55:9e:25:6a:fe:48:c9:ee:ee:cd:65:da:
64:7b:54:9a:f4:29:17:fb:a6:83:59:1c:6f:31:73:60:6c:14:
a3:85:9d:06:25:26:4a:94:7f:a1:de:0d:3b:a1:e5:e3:7d:3e:
fb:cf:2c:e9:e3:fc:fc:0a:0a:3f:44:12:0e:c6:5d:cd:c1:98:
5e:d6:4c:3b:10:96:8a:9a:02:da:4b:62:c9:4c:64:06:44:c7:
7f:a4:ea:db:12:d3:6f:33:07:f4:1a:4b:66:84:b1:59:c5:a9:
7a:99:37:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:44 2026 by rpki-client