Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88E5445C493C11F195A3D6B2CE1D38B0.roa
File: 88E5445C493C11F195A3D6B2CE1D38B0.roa (raw, json)
Hash identifier: 4AWBRdSjCHCokRm7xCibSHnEZRGjL5SfK+V9YAeXTc0=
Subject key identifier: B4:27:F3:FD:A5:D4:7E:97:63:89:A5:C6:3A:39:45:67:07:7D:53:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C9AB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88E5445C493C11F195A3D6B2CE1D38B0.roa
Signing time: Wed 06 May 2026 11:12:57 +0000
ROA not before: Wed 06 May 2026 11:12:52 +0000
ROA not after: Sun 06 May 2029 11:12:52 +0000
asID: 17561
IP address blocks: 154.85.248.0/24 maxlen: 24
154.85.249.0/24 maxlen: 24
154.85.250.0/24 maxlen: 24
154.85.251.0/24 maxlen: 24
154.85.252.0/24 maxlen: 24
154.85.253.0/24 maxlen: 24
154.85.254.0/24 maxlen: 24
154.85.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117163 (0x1c9ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 11:12:52 2026 GMT
Not After : May 6 11:12:52 2029 GMT
Subject: CN=69fb2239-25a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:d8:76:25:c9:9f:d1:f1:92:4b:5d:5b:23:
60:e1:52:cd:3a:9c:a4:fc:b2:ee:24:4b:e3:81:3d:
12:b8:87:76:be:df:f0:79:f7:7b:1b:e7:b2:33:a3:
56:e6:1f:06:8b:20:08:b2:40:f5:0f:8c:4d:71:16:
d7:20:91:89:8f:5d:c4:a9:ed:9c:3e:14:ea:2b:d0:
a6:5e:4e:59:73:e1:2c:95:c6:b5:56:64:9d:0d:c2:
d9:77:6c:5d:eb:7a:b4:d1:27:bb:8d:dd:a7:3b:eb:
c4:80:ed:20:68:d5:73:35:b9:3b:c3:3a:ec:9a:66:
a3:e8:da:0e:ea:33:8b:5a:26:2c:2d:2f:b9:17:10:
ad:dd:6b:9d:b0:43:de:bb:f8:8d:ee:d2:2f:3f:8f:
11:68:17:3f:c0:77:39:15:5d:e3:1d:df:af:f1:a7:
9d:df:1c:e4:a3:04:ed:d5:d8:c7:3c:2b:18:33:bc:
12:a4:f2:bc:36:b2:90:9d:b5:6a:64:f8:78:63:29:
9b:61:f2:52:f4:44:c4:32:95:69:e7:5a:9a:40:bb:
c1:a7:0f:46:1b:f7:fb:ba:af:d6:70:a0:1b:50:22:
70:18:9d:e4:78:7c:4b:7e:0f:6b:46:e0:9c:8d:31:
81:dd:fd:40:6e:34:71:e0:a7:ad:9b:2d:2a:fd:82:
67:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:27:F3:FD:A5:D4:7E:97:63:89:A5:C6:3A:39:45:67:07:7D:53:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88E5445C493C11F195A3D6B2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.248.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:64:06:fa:5a:c5:86:a0:64:26:df:34:7e:03:19:db:cc:50:
90:4c:08:c1:7d:37:9e:ce:16:74:45:85:c6:56:08:c9:c4:67:
a9:c6:16:1a:41:dd:29:35:99:08:f3:68:b5:0e:33:cc:b7:29:
2c:60:32:79:19:d8:31:20:bc:25:95:f0:c8:e4:30:7b:06:7c:
e3:bc:4c:0f:a0:4a:83:cd:9e:e0:55:96:a5:1a:49:70:80:30:
e1:d8:8a:ef:8a:c5:6a:b5:7a:3e:99:68:a3:08:36:00:fd:9e:
f5:ce:2d:7e:08:59:72:16:d4:23:b4:b4:ec:81:2e:4e:3d:a9:
00:a9:56:49:fa:4e:26:a9:ee:d3:dc:1b:bb:06:5f:23:88:4c:
47:26:05:f4:f3:ef:2f:9c:25:90:97:d8:78:b5:c8:82:67:7e:
b4:4c:e3:13:e1:bd:b0:45:31:2a:ef:c1:a1:cc:48:39:21:67:
62:c6:ce:3f:b1:fd:e2:8f:16:10:06:77:6c:fa:d1:41:b2:f2:
ee:90:ee:ad:eb:3c:e7:ce:1d:de:fc:78:71:55:d9:29:48:93:
43:f3:4e:69:1a:3a:32:f9:d2:f3:ac:9d:5d:db:ff:35:8a:58:
53:63:6e:23:15:95:d4:9b:a6:b5:4d:f6:30:f3:08:1e:34:e0:
5c:38:fa:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:03:41 2026 by rpki-client