Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CA6CE223FB711F1A2A9CAC4CE1D38B0.roa
File: 9CA6CE223FB711F1A2A9CAC4CE1D38B0.roa (raw, json)
Hash identifier: 0UfjDtGpr26N8/2CMSCQqvlbkLJCI9PprCu9hpiRQLg=
Subject key identifier: 31:E3:42:65:74:34:75:E9:BC:B1:04:1F:04:C7:61:20:FA:68:F3:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C713
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CA6CE223FB711F1A2A9CAC4CE1D38B0.roa
Signing time: Fri 24 Apr 2026 08:28:47 +0000
ROA not before: Fri 24 Apr 2026 08:28:42 +0000
ROA not after: Sun 31 May 2026 08:28:42 +0000
asID: 62240
IP address blocks: 154.194.109.0/24 maxlen: 24
154.194.110.0/24 maxlen: 24
154.194.111.0/24 maxlen: 24
154.194.117.0/24 maxlen: 24
154.194.207.0/24 maxlen: 24
154.195.113.0/24 maxlen: 24
154.195.141.0/24 maxlen: 24
154.195.142.0/24 maxlen: 24
154.198.63.0/24 maxlen: 24
154.198.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116499 (0x1c713)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 08:28:42 2026 GMT
Not After : May 31 08:28:42 2026 GMT
Subject: CN=69eb29bf-1cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2d:9a:7f:b9:26:70:e4:13:30:06:cd:d5:95:
f5:5d:d1:22:96:38:b1:7f:52:b7:d4:ae:81:1f:3f:
69:da:49:67:5a:2a:f9:e5:29:19:fa:72:22:20:35:
84:b0:5c:09:58:9d:7d:38:4b:ca:2d:62:2e:e2:4e:
26:6c:71:33:ea:d1:3e:5b:dd:07:4c:29:79:e4:26:
90:3e:16:4d:e0:3e:50:7f:05:bd:b2:f3:72:fb:9c:
e8:57:50:35:4f:39:55:10:27:b6:4b:26:42:08:09:
d9:eb:b5:3d:a9:b2:e4:5d:3e:80:60:32:1d:a0:8a:
9e:94:46:f6:83:35:83:74:0f:f6:24:8e:ef:bb:15:
af:61:61:ea:62:50:85:da:ad:86:6b:fc:08:58:e6:
84:64:86:55:c6:17:b1:c8:87:65:22:21:07:80:a7:
86:58:a4:23:dc:6d:7a:e4:0a:3b:f5:85:21:e9:c7:
66:62:74:fb:d6:93:bb:61:bb:dd:2c:31:d6:72:85:
5c:0a:35:f6:02:d2:3d:6a:cb:40:15:9b:5f:b3:8f:
64:ad:c1:ba:40:ff:f9:a9:53:a4:86:ae:f1:8c:88:
45:6d:10:47:ba:d5:4d:6a:35:7c:7b:47:13:26:23:
c9:f3:dc:f4:aa:c9:71:b7:ed:75:3c:a8:a1:40:b1:
11:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E3:42:65:74:34:75:E9:BC:B1:04:1F:04:C7:61:20:FA:68:F3:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CA6CE223FB711F1A2A9CAC4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.109.0-154.194.111.255
154.194.117.0/24
154.194.207.0/24
154.195.113.0/24
154.195.141.0-154.195.142.255
154.198.63.0/24
154.198.191.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:ea:73:d9:59:db:05:86:e9:0c:1c:60:a0:10:71:24:10:e3:
b8:96:dd:19:1f:10:1a:9a:34:5d:10:41:e5:c9:57:9c:64:34:
d4:cd:b1:af:c8:d1:81:09:9c:ba:18:5c:71:01:f8:13:a8:d5:
ce:fb:33:46:bd:26:af:76:96:c2:30:13:6c:8d:b4:cc:06:37:
e4:49:86:6a:66:5d:1f:af:a6:88:b2:31:80:82:2e:d3:c7:fd:
8a:e4:9e:c7:b6:f4:aa:27:3c:8a:e7:39:dc:6a:44:d0:ba:78:
18:28:52:6a:fa:5d:bd:69:00:db:25:80:8d:8e:c2:39:99:58:
07:c5:cb:d8:80:23:9d:38:90:c5:eb:87:84:69:ec:dc:ff:a9:
09:a7:80:fe:3b:fc:1d:e2:ef:76:0d:ba:df:d7:39:18:4f:12:
09:0c:13:96:3a:1e:4c:fb:d7:23:bb:bd:f5:78:b5:c8:b5:9d:
80:c7:77:a7:f0:f0:49:ad:94:10:87:62:83:20:58:b0:9a:a4:
b1:0a:1c:f8:91:f5:2b:3a:b8:a8:54:5f:72:18:83:4f:2c:51:
68:e5:6d:a4:09:14:18:27:0c:37:69:28:60:66:7d:c9:75:33:
5b:e5:aa:e0:5c:a2:4d:5e:69:1c:f5:06:9c:83:36:93:9d:98:
72:2b:4a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:48 2026 by rpki-client