Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83F715A0457811F1BB582FC6CE1D38B0.roa
File: 83F715A0457811F1BB582FC6CE1D38B0.roa (raw, json)
Hash identifier: 3jDVtewRTJCf+UcJshEGWiTDlReDR08AlFsJqSd8qck=
Subject key identifier: 1A:45:BD:07:E3:29:CF:8E:32:F1:B2:BB:57:44:BF:E5:0A:14:70:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C8B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83F715A0457811F1BB582FC6CE1D38B0.roa
Signing time: Fri 01 May 2026 16:12:14 +0000
ROA not before: Fri 01 May 2026 16:12:09 +0000
ROA not after: Fri 05 Jun 2026 16:12:09 +0000
asID: 44559
IP address blocks: 154.209.144.0/24 maxlen: 24
154.209.145.0/24 maxlen: 24
154.209.152.0/24 maxlen: 24
154.209.153.0/24 maxlen: 24
154.209.154.0/24 maxlen: 24
154.209.155.0/24 maxlen: 24
154.209.157.0/24 maxlen: 24
154.209.158.0/24 maxlen: 24
154.209.195.0/24 maxlen: 24
154.209.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116917 (0x1c8b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 16:12:09 2026 GMT
Not After : Jun 5 16:12:09 2026 GMT
Subject: CN=69f4d0de-fa69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:49:6b:e7:37:3d:c8:b2:e6:5f:15:26:45:
34:fb:fc:1d:28:c4:1a:94:eb:cc:9f:7a:35:01:c7:
4a:82:10:1e:b4:d3:e3:56:61:8a:f8:41:8b:78:9c:
ee:44:89:08:68:e7:d9:74:55:41:47:5d:a1:dd:93:
b2:f8:c9:2c:44:7f:b9:29:38:0e:27:b3:d4:33:89:
5e:0f:2d:5b:04:93:b7:da:c6:bd:03:a5:31:75:a3:
60:c5:65:a2:3f:10:2f:e7:df:3a:07:87:32:9d:4d:
4e:10:ad:ed:21:4f:ec:4b:06:c6:75:46:f3:d9:7a:
92:9d:3f:a8:e8:77:75:c1:d9:b7:39:08:17:c9:ec:
0b:2b:1d:c9:bb:84:bf:1e:5d:15:3f:d4:5f:b1:5d:
07:e6:88:fa:5a:52:90:a4:61:01:f9:2b:1c:d6:97:
47:97:84:9f:71:fd:0f:d5:6e:49:fa:3e:bd:6e:48:
d5:28:28:cf:d4:6e:4a:5c:c0:0a:22:f5:47:8f:e4:
4e:c9:21:d3:eb:a1:ab:c0:a4:60:af:64:46:e3:fa:
b6:3d:6d:75:59:e8:ef:e0:cc:a3:b3:22:53:37:7a:
5e:a3:30:3e:3e:c3:ee:bb:7c:c1:6d:2c:5c:d6:44:
46:8f:1d:f1:21:0f:b0:4d:5c:1e:83:45:f5:7a:00:
10:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:45:BD:07:E3:29:CF:8E:32:F1:B2:BB:57:44:BF:E5:0A:14:70:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83F715A0457811F1BB582FC6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.144.0/23
154.209.152.0/22
154.209.157.0-154.209.158.255
154.209.195.0-154.209.196.255
Signature Algorithm: sha256WithRSAEncryption
39:33:7a:e1:a3:16:73:aa:4d:e7:e5:40:6c:69:8d:7e:ff:45:
0a:ec:54:4f:57:49:79:e8:20:2b:be:1b:06:3b:12:5c:42:68:
ff:8b:fa:6f:6a:cf:f5:d1:49:79:f9:f1:c0:ea:83:a6:18:34:
2f:42:a1:c2:a9:ea:84:29:6c:4c:2a:87:da:d4:7d:c8:3d:7f:
2f:89:be:08:c9:c2:b4:16:db:45:28:c1:66:54:68:b0:53:ab:
17:22:95:71:b1:2d:e4:b0:91:10:6c:84:cb:56:3d:9d:35:79:
e3:79:00:4b:2d:f0:b6:aa:21:8e:1a:de:d1:76:36:50:b2:6b:
0e:c9:51:ea:b0:90:51:57:55:07:3e:4c:07:56:cd:c1:b6:79:
be:54:6a:cb:35:f5:e0:e1:6f:a3:9e:5a:92:69:77:97:5b:98:
22:4a:33:a6:1c:93:39:c2:af:77:97:76:05:90:fa:60:da:06:
68:60:03:09:2e:cb:34:b0:3f:1d:f7:30:32:ab:2d:22:4b:63:
41:f7:fb:25:63:5d:d5:6a:0f:b5:6d:8c:76:b1:a8:dc:9a:40:
98:cd:de:86:66:b1:f6:65:9c:14:d3:45:6c:fa:b9:6d:2e:fb:
1f:27:b6:75:01:ea:39:1f:35:01:7d:d5:7d:97:e6:73:f5:fd:
6e:9b:f2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:03:50 2026 by rpki-client