Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96A19D2A3C8F11F181E7E1DBCE1D38B0.roa
File: 96A19D2A3C8F11F181E7E1DBCE1D38B0.roa (raw, json)
Hash identifier: pBPM2zF6FWTRsL+2uxB+kaRnzXtlJ/3R7ybZ8nLXuOo=
Subject key identifier: A0:CC:D4:5C:E9:A0:6F:D9:B2:9E:73:37:DA:19:79:4F:45:C0:17:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C612
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96A19D2A3C8F11F181E7E1DBCE1D38B0.roa
Signing time: Mon 20 Apr 2026 08:04:43 +0000
ROA not before: Mon 20 Apr 2026 08:04:38 +0000
ROA not after: Wed 27 May 2026 08:04:38 +0000
asID: 138915
IP address blocks: 154.203.149.0/24 maxlen: 24
154.203.150.0/24 maxlen: 24
154.203.151.0/24 maxlen: 24
154.203.152.0/24 maxlen: 24
154.203.153.0/24 maxlen: 24
154.203.154.0/23 maxlen: 24
154.203.156.0/24 maxlen: 24
154.203.157.0/24 maxlen: 24
154.203.158.0/24 maxlen: 24
154.203.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116242 (0x1c612)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 20 08:04:38 2026 GMT
Not After : May 27 08:04:38 2026 GMT
Subject: CN=69e5de1b-4dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6b:fb:93:81:c3:6c:b2:d5:83:ab:75:a6:fe:
c1:d8:38:e7:16:7f:e6:81:d5:f7:aa:3f:de:fa:69:
3d:c4:a1:f8:d6:f9:ee:c3:50:54:8a:7a:3f:89:9d:
7b:ab:2c:d2:5f:05:49:34:71:e8:de:d7:0a:67:7c:
80:35:30:79:da:c7:dc:ef:f3:ac:05:2e:67:1d:aa:
41:40:ae:01:6a:8d:ac:ce:6f:5d:a6:96:59:ba:4c:
09:71:3d:f7:69:32:32:c8:a3:aa:02:e6:50:b0:7d:
62:b5:13:e0:1a:4a:ef:c2:e4:97:9e:24:3f:ba:95:
45:b5:c6:e9:84:fe:b1:a1:e3:c6:e2:1d:90:46:5a:
bd:89:7f:ae:9a:35:5d:92:92:73:f8:f9:4d:5c:07:
a0:59:c4:3a:b8:14:35:14:ad:5d:6b:29:94:ee:45:
5b:6d:68:85:da:e5:e2:6d:c4:be:f5:36:2b:f7:b2:
d6:ce:06:db:b7:ff:40:ea:0f:2c:52:79:34:4a:67:
74:1b:44:10:44:dd:39:03:24:f4:54:5f:c6:61:25:
3a:16:e4:5d:2b:31:c8:89:6b:3a:93:c9:1c:ac:f1:
83:6e:62:0e:05:23:ad:2a:1a:1d:74:08:e0:b6:66:
a3:91:2e:b4:42:d1:30:4c:8f:4c:f1:df:d3:d6:2e:
08:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CC:D4:5C:E9:A0:6F:D9:B2:9E:73:37:DA:19:79:4F:45:C0:17:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96A19D2A3C8F11F181E7E1DBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.149.0-154.203.159.255
Signature Algorithm: sha256WithRSAEncryption
5a:78:d2:76:62:43:c8:9b:cc:8e:2c:80:d8:65:5f:87:d2:43:
87:19:ae:2b:df:45:a7:3d:98:c7:b4:e3:1f:5e:71:26:57:e2:
21:ab:49:3d:f2:fe:b0:c5:f0:4c:32:23:01:58:08:99:09:41:
18:ea:39:a5:cf:c3:16:a9:2d:cb:a0:2f:18:35:ca:e3:83:cf:
71:ad:95:f0:51:79:5d:52:94:4d:4b:d2:e1:9b:16:94:70:cb:
4a:db:5b:75:10:d2:97:5d:ab:53:cf:bf:dc:f5:39:30:1a:63:
b7:5a:c2:27:30:68:f1:94:90:08:9c:f1:ab:1d:16:e6:c5:31:
16:5f:0e:f1:44:aa:6b:5f:bf:35:54:b5:6c:12:71:d7:3a:af:
b7:59:18:50:3a:06:53:88:3f:0d:f8:63:2e:67:cc:d1:ca:e1:
dd:98:fd:6e:eb:66:74:2d:a1:4f:a4:26:57:ea:1c:e6:7b:f1:
24:7b:c7:32:c3:8e:11:ba:bb:7c:1c:c6:f4:01:54:13:88:0a:
42:36:90:58:30:dc:f0:90:76:02:cc:cc:74:3c:7a:52:38:b6:
0b:0b:b2:95:1b:e8:62:b4:f5:38:59:64:57:78:9a:5e:ad:ef:
99:30:d4:bd:6d:6e:ea:02:9c:94:34:06:b9:26:85:25:1a:34:
ba:fe:43:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:03:01 2026 by rpki-client