Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A36BB8884A4F11F1B07F6AB2CE1D38B0.roa
File: A36BB8884A4F11F1B07F6AB2CE1D38B0.roa (raw, json)
Hash identifier: EMvQzm+ZNnnmDP3Cq67wH5w6frw0FStu5XbPWFOqQus=
Subject key identifier: EB:B7:95:CE:F7:1D:D4:A1:D7:9D:9B:A8:1D:82:54:C5:56:9B:B5:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C9EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A36BB8884A4F11F1B07F6AB2CE1D38B0.roa
Signing time: Thu 07 May 2026 20:02:13 +0000
ROA not before: Thu 07 May 2026 20:02:09 +0000
ROA not after: Sun 21 Jun 2026 20:02:09 +0000
asID: 214143
IP address blocks: 154.196.214.0/24 maxlen: 24
154.197.25.0/24 maxlen: 24
154.197.90.0/24 maxlen: 24
154.197.127.0/24 maxlen: 24
154.200.72.0/21 maxlen: 24
154.200.109.0/24 maxlen: 24
154.203.196.0/22 maxlen: 24
154.203.208.0/22 maxlen: 24
154.203.240.0/24 maxlen: 24
154.205.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117226 (0x1c9ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 20:02:09 2026 GMT
Not After : Jun 21 20:02:09 2026 GMT
Subject: CN=69fcefc5-d3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:aa:f4:7a:f4:55:a4:59:30:23:fb:b6:6f:09:
22:ec:4f:41:85:25:00:46:c9:64:7f:c7:68:ca:f7:
8e:81:33:ae:c9:44:27:b8:d0:24:fe:e6:44:f1:61:
83:8a:ae:11:71:12:49:37:23:c3:b8:d3:18:8d:16:
f2:23:8e:41:f4:26:6d:40:6e:c3:2b:8c:b3:ed:97:
2b:0a:76:4d:8f:c5:9c:0a:fb:8f:4b:18:9b:36:4a:
8d:d3:38:48:06:5b:2b:97:3c:8e:d8:e5:45:90:0d:
ca:ca:da:b7:fc:9d:82:1b:f9:ca:85:8e:cb:88:28:
4c:05:07:90:44:d7:c7:48:48:1e:77:a2:d0:e0:46:
6d:16:ed:23:8c:d8:5a:5a:17:1a:4a:e5:cb:97:30:
7f:09:aa:f6:a8:1f:2f:1d:80:23:19:f0:3d:fa:48:
0d:ba:b4:5b:bb:ea:e5:5f:96:3a:2a:76:c6:0f:ad:
c4:e8:66:cb:9e:42:c6:6f:75:f3:da:2c:68:f6:d2:
c9:0c:2e:de:95:b5:d5:c6:06:0f:ba:fb:3d:e3:28:
91:52:2e:82:c0:e9:5b:4a:33:64:fe:2c:af:57:29:
aa:2e:54:4d:37:9f:97:3e:cd:00:05:f9:2a:12:27:
dd:fc:ce:45:d4:a5:91:cc:24:cd:56:eb:6a:a5:47:
08:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B7:95:CE:F7:1D:D4:A1:D7:9D:9B:A8:1D:82:54:C5:56:9B:B5:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A36BB8884A4F11F1B07F6AB2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.214.0/24
154.197.25.0/24
154.197.90.0/24
154.197.127.0/24
154.200.72.0/21
154.200.109.0/24
154.203.196.0/22
154.203.208.0/22
154.203.240.0/24
154.205.248.0/22
Signature Algorithm: sha256WithRSAEncryption
be:bb:64:d9:37:83:be:28:da:6c:b1:09:ff:a2:db:17:73:94:
1d:16:e4:80:fe:b7:7a:32:27:e6:23:85:95:ff:0a:a7:be:41:
f6:92:9d:95:97:81:3e:9c:1d:17:c1:b1:0c:be:43:61:b7:ce:
c3:64:3c:1c:2b:2e:7b:c0:75:bb:90:ec:e4:70:13:16:ee:85:
be:ac:89:c5:15:fd:c0:f3:e6:3f:d8:f1:5c:df:60:b0:2f:27:
fd:1e:08:e8:81:c8:e6:eb:b0:a5:86:58:eb:85:2e:16:80:ef:
77:f0:51:6b:ad:62:88:2b:5c:c1:13:68:24:b4:cf:85:cf:2a:
6e:a2:aa:2d:4b:b0:22:85:44:d5:12:b4:ca:79:99:9f:d3:7d:
40:b6:8c:6c:b5:f4:1f:76:ab:e4:be:92:ab:06:e0:3a:b1:af:
40:b2:c1:0a:11:c1:3f:f5:d4:c2:bf:75:46:61:bb:67:a7:16:
ed:a8:01:f7:52:ee:61:41:e3:f2:b2:b0:bf:ca:49:7d:91:76:
3f:7c:77:df:eb:b7:99:36:57:26:38:0c:2c:00:b9:2d:30:10:
e1:a9:47:33:fd:ed:df:a1:05:2e:af:c8:88:a8:2c:d1:2b:ee:
87:27:63:32:34:8f:07:e5:73:b8:4c:33:d5:34:da:91:50:37:
a9:c0:de:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:04 2026 by rpki-client