Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88916402448E11F1B26382BACE1D38B0.roa
File: 88916402448E11F1B26382BACE1D38B0.roa (raw, json)
Hash identifier: kO8VlIpgt5SCnFrphKHQviajdNNIgnB9XiX9lO0lSBo=
Subject key identifier: 98:5E:20:4E:59:0C:D9:B1:DB:29:52:96:2D:37:68:26:10:15:1C:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C82F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88916402448E11F1B26382BACE1D38B0.roa
Signing time: Thu 30 Apr 2026 12:17:19 +0000
ROA not before: Thu 30 Apr 2026 12:17:15 +0000
ROA not after: Fri 05 Jun 2026 12:17:15 +0000
asID: 49505
IP address blocks: 154.209.218.0/24 maxlen: 24
154.209.219.0/24 maxlen: 24
154.209.220.0/24 maxlen: 24
154.209.221.0/24 maxlen: 24
154.209.222.0/24 maxlen: 24
154.209.223.0/24 maxlen: 24
154.211.9.0/24 maxlen: 24
154.211.10.0/24 maxlen: 24
154.211.11.0/24 maxlen: 24
154.211.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116783 (0x1c82f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 12:17:15 2026 GMT
Not After : Jun 5 12:17:15 2026 GMT
Subject: CN=69f3484f-d8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:02:11:c8:da:aa:59:24:e9:d0:64:0d:bd:48:
07:d9:17:34:af:7c:de:3c:7d:cc:98:0e:dd:01:36:
34:af:12:2e:3c:b1:c9:e3:c2:11:fc:7a:79:9e:f3:
26:f9:d9:09:8a:2e:1a:4b:e6:7a:c0:cf:0e:a1:aa:
a3:32:65:97:34:6c:95:97:8d:4f:9a:46:42:4d:fd:
12:a1:41:07:38:eb:58:ff:95:69:f9:fa:72:d6:db:
02:12:80:1a:b7:a1:26:27:f3:ce:01:7f:3e:bd:b1:
8d:f1:7a:a0:1a:8e:bf:ff:b4:44:92:74:d7:39:85:
0a:45:eb:9b:ff:48:42:89:38:da:e0:fa:7d:76:a5:
47:d3:5a:1b:4c:bb:a9:97:5e:8e:d2:89:fd:12:d6:
30:bc:3c:00:81:38:23:0f:3b:eb:a3:27:59:c8:79:
39:9c:3b:a6:1c:e0:e5:5b:f2:eb:3a:c7:0c:91:3a:
53:2f:85:66:cf:6a:95:72:a5:c1:88:25:d2:b7:aa:
95:50:9b:22:36:89:fa:dc:3c:90:02:0c:ee:f7:74:
e6:be:ac:a8:df:bf:2a:78:c4:da:9b:56:b4:94:c6:
d1:9a:6a:b2:72:20:9c:4f:ab:02:5c:bf:2f:5e:54:
7a:1c:fb:bb:c2:f2:10:06:39:19:38:61:8d:8d:31:
2b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5E:20:4E:59:0C:D9:B1:DB:29:52:96:2D:37:68:26:10:15:1C:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88916402448E11F1B26382BACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.218.0-154.209.223.255
154.211.9.0-154.211.11.255
154.211.16.0/24
Signature Algorithm: sha256WithRSAEncryption
50:55:16:8c:40:76:14:83:cd:b6:5f:ab:16:e9:fc:fd:de:20:
5a:b0:b0:2e:80:1f:51:55:65:5f:53:9a:55:73:90:cb:2c:99:
0e:16:6c:04:30:4c:c8:06:31:b8:f8:55:92:b6:e3:6a:67:04:
8f:3c:f0:2e:29:a0:5c:ce:75:82:37:f1:a3:ae:50:f6:df:cd:
4e:68:52:bb:e9:4f:23:da:c2:b8:05:29:b2:32:a1:73:1a:55:
0b:b1:f2:2d:55:42:c2:cf:7e:45:26:9b:19:e3:cb:a4:a2:3b:
90:46:27:0f:5e:5d:0d:b8:d0:6c:91:f9:99:16:5a:a3:ed:bb:
3d:b4:8c:7e:45:d3:b8:a3:90:cd:05:36:5d:4a:98:25:dd:80:
bc:18:44:42:e4:8a:5a:1f:c5:47:6f:21:85:6b:be:30:a3:d7:
bc:1e:a2:7f:ba:b7:b7:4b:c4:58:9b:2f:c1:b7:43:32:05:95:
ff:75:bb:3a:bf:e0:9d:c6:c4:8f:87:2a:59:58:c2:19:1c:4c:
9e:58:09:63:0f:7d:07:4b:ec:fc:95:d2:28:bc:1a:6d:38:6d:
14:63:e3:8b:44:53:7d:63:3b:e5:b0:2b:34:8c:09:c1:d4:18:
7e:6d:70:22:26:27:2d:71:03:f1:2e:86:a7:da:ed:9f:52:2a:
62:68:38:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:31 2026 by rpki-client