Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A29628483C8111F19A3B7F07CF1D38B0.roa
File: A29628483C8111F19A3B7F07CF1D38B0.roa (raw, json)
Hash identifier: crgs1nRFOxB25wy/oRCxvDuxj6cOn1q5l2ZTojyZYOE=
Subject key identifier: 77:3D:F1:B1:D4:BF:EE:0A:74:C6:BC:E2:38:4A:C5:90:96:DA:3F:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C604
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A29628483C8111F19A3B7F07CF1D38B0.roa
Signing time: Mon 20 Apr 2026 06:24:50 +0000
ROA not before: Mon 20 Apr 2026 06:24:45 +0000
ROA not after: Wed 27 May 2026 06:24:45 +0000
asID: 63139
IP address blocks: 154.93.67.0/24 maxlen: 24
154.93.68.0/24 maxlen: 24
154.93.69.0/24 maxlen: 24
154.93.70.0/24 maxlen: 24
154.93.71.0/24 maxlen: 24
154.93.72.0/24 maxlen: 24
154.93.73.0/24 maxlen: 24
154.93.74.0/24 maxlen: 24
154.93.75.0/24 maxlen: 24
154.93.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116228 (0x1c604)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 20 06:24:45 2026 GMT
Not After : May 27 06:24:45 2026 GMT
Subject: CN=69e5c6b2-cf07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e8:87:d6:19:47:c4:6c:dd:9f:12:c5:5d:91:
fc:16:44:ba:84:36:03:8a:0a:b3:f6:fe:df:b6:8b:
97:c2:2e:51:5d:e2:dd:fd:78:44:99:04:89:ca:e0:
e5:e1:ba:9d:89:29:b1:31:ed:9b:e5:40:b8:7c:e2:
29:71:88:78:2e:b0:89:f8:cf:f4:c8:05:ba:02:06:
fe:73:8e:94:ad:de:a3:06:73:3e:48:0c:96:c2:99:
02:e7:7e:7d:11:bd:4a:69:ce:08:e4:93:ea:ed:e4:
87:05:db:be:03:4f:ea:6b:2a:c5:2b:ab:20:07:aa:
90:91:4c:1a:90:87:c3:11:93:7a:d1:64:88:36:c6:
e5:59:cc:11:ee:68:76:8f:68:8b:3d:59:92:db:a5:
00:e2:16:40:53:f4:7c:08:52:4b:7c:b8:f1:83:4d:
76:42:f2:7f:96:81:d6:43:c9:d0:3d:35:9e:81:6c:
49:4a:d6:1c:68:fa:7c:66:4f:93:82:ae:a7:9e:7e:
6f:5b:8b:e9:a3:63:b2:2d:be:2a:81:c8:c1:16:d4:
75:fd:36:03:32:e4:65:b2:1a:a1:37:b5:b2:fd:01:
34:58:96:13:80:f1:07:80:0f:2c:df:2a:f3:fb:14:
32:0b:90:a6:1b:98:47:e5:c9:ec:a2:38:f9:f2:b9:
29:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3D:F1:B1:D4:BF:EE:0A:74:C6:BC:E2:38:4A:C5:90:96:DA:3F:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A29628483C8111F19A3B7F07CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.67.0-154.93.76.255
Signature Algorithm: sha256WithRSAEncryption
35:36:61:b8:56:44:86:0d:4f:03:67:c2:a2:a2:65:81:05:d9:
9e:a0:77:70:ca:08:0f:f3:e1:8a:57:70:ee:d3:52:0c:c7:6f:
f6:d1:9d:3f:b4:3b:9d:71:7b:8a:cf:ea:e2:9c:43:53:13:0c:
ea:b4:4d:8d:75:ef:51:c9:a7:39:7d:77:62:82:1d:df:44:e5:
21:0e:97:a4:bf:e2:e1:63:40:e8:81:17:67:e8:6f:5d:67:9b:
f1:10:cd:05:4f:88:44:c8:25:96:19:97:0e:06:76:37:0a:b8:
de:32:c5:73:d8:84:ce:4a:4a:86:32:09:d8:b3:1b:b3:34:4d:
84:57:3e:aa:ea:93:44:40:a1:a5:14:2f:12:42:0e:60:7d:f6:
65:d3:f7:3d:6c:01:91:0c:37:72:fc:38:f7:c9:39:e0:94:cf:
65:58:9e:33:3a:11:70:08:f6:a1:ce:dc:99:02:32:0c:6b:c5:
f3:b8:ad:14:e3:b0:f8:c6:42:57:83:69:e7:ef:c6:d5:a5:3f:
d1:98:59:ca:c6:0a:91:2c:9a:2e:9d:be:00:81:d8:94:fa:32:
df:fc:22:7f:d7:2d:e4:05:ad:c6:16:35:11:e4:9f:3e:af:38:
cf:b5:15:1c:af:e4:72:9c:9e:dd:2d:3d:da:b9:a5:94:62:f0:
96:90:80:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:15 2026 by rpki-client