Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4E3553C4EDB11F1B8B998DFCE1D38B0.roa
File: A4E3553C4EDB11F1B8B998DFCE1D38B0.roa (raw, json)
Hash identifier: SYroq4+fRqgyQskuZLWdTFJCf4n3kDV3YfAYccOrngY=
Subject key identifier: 27:F6:AD:3E:41:DE:0E:EB:A2:C3:83:AE:43:53:E7:6A:36:B7:93:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CB73
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4E3553C4EDB11F1B8B998DFCE1D38B0.roa
Signing time: Wed 13 May 2026 14:54:30 +0000
ROA not before: Wed 13 May 2026 14:54:24 +0000
ROA not after: Fri 19 Jun 2026 14:54:24 +0000
asID: 11404
IP address blocks: 154.194.236.0/22 maxlen: 24
154.199.96.0/19 maxlen: 24
154.199.128.0/19 maxlen: 24
154.211.192.0/20 maxlen: 24
154.211.224.0/19 maxlen: 24
154.214.16.0/20 maxlen: 24
154.215.16.0/20 maxlen: 24
154.215.32.0/19 maxlen: 24
154.216.16.0/20 maxlen: 24
154.222.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117619 (0x1cb73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 13 14:54:24 2026 GMT
Not After : Jun 19 14:54:24 2026 GMT
Subject: CN=6a0490a6-10a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:95:5e:96:0f:d1:f4:f5:eb:98:ad:f8:c9:76:
28:f6:4a:fc:a7:1f:5d:3c:cc:ae:25:4b:91:c7:23:
fe:06:62:d3:ab:be:1f:f5:4a:ef:05:2e:63:0f:2b:
83:4a:63:43:c8:ac:9e:fb:cb:82:f4:30:8e:ab:82:
17:4a:0f:98:b0:9c:a6:66:ec:1f:60:1e:52:f9:eb:
10:04:56:d7:d8:7d:3f:21:ed:b5:4e:89:3b:81:05:
be:42:db:c3:26:65:3d:71:56:54:e6:ed:d7:2b:cf:
4f:35:53:fb:45:eb:9b:cd:a0:54:4a:6c:29:9f:a4:
8c:33:0a:0e:23:3e:d9:dc:06:52:e2:0b:dd:0f:58:
11:f9:2f:ed:44:96:c9:d7:31:ba:df:80:bc:18:68:
a9:2a:96:12:0e:a1:fc:8b:47:e2:54:e6:eb:79:a0:
43:70:e0:d6:56:83:39:4b:e0:f4:cc:d0:08:68:e0:
c0:39:af:86:2a:ee:d1:f4:f1:a2:40:f4:f7:1e:fd:
7b:32:55:d6:34:cd:03:44:f7:f3:79:b8:44:3c:fd:
62:8b:92:06:89:46:9f:b6:7a:f8:08:b5:96:11:7a:
12:24:d0:f5:0d:14:5e:5b:3a:ba:2f:ae:15:2c:d9:
af:da:c8:08:4e:8b:bc:94:41:e1:46:4c:9d:07:2d:
3f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F6:AD:3E:41:DE:0E:EB:A2:C3:83:AE:43:53:E7:6A:36:B7:93:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4E3553C4EDB11F1B8B998DFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.236.0/22
154.199.96.0-154.199.159.255
154.211.192.0/20
154.211.224.0/19
154.214.16.0/20
154.215.16.0-154.215.63.255
154.216.16.0/20
154.222.160.0/19
Signature Algorithm: sha256WithRSAEncryption
60:a8:82:e4:13:0a:d7:a3:62:c1:2f:72:f0:70:a8:bc:e7:98:
b5:27:11:24:6c:90:2e:8c:1a:7e:98:58:f9:66:26:e4:eb:58:
73:ba:48:2c:7f:7b:9b:0c:43:60:d7:7f:4d:1c:56:0a:cd:6b:
aa:a0:26:29:2c:12:02:3c:da:21:be:d2:73:d2:f0:86:88:6e:
f4:a4:23:25:cc:95:3c:90:e8:ba:74:23:bc:db:ec:3c:e5:79:
a8:59:b7:03:49:78:ff:f2:c8:dd:4a:3b:fb:89:e8:30:bb:39:
cd:9f:c2:fa:23:6b:15:80:c9:d2:ce:39:98:df:b3:63:0d:68:
3e:ce:4c:68:13:d2:7a:77:98:50:6f:1b:bf:39:f8:e6:7f:93:
82:0f:e1:ed:fd:41:53:d6:33:f2:7b:cd:7f:e4:db:96:d9:e9:
f3:9b:44:dd:67:85:fd:49:0d:35:1f:75:f0:e9:fe:76:23:fe:
8b:e4:6d:ec:f2:9c:43:4d:e9:30:11:8c:a5:fc:1c:77:17:db:
9b:63:4b:61:ea:ab:60:db:9e:f8:df:0f:9c:66:23:bb:33:ac:
4f:54:52:e2:75:3b:7c:45:39:06:e0:09:6a:71:01:35:c0:d7:
bb:a6:0a:d8:d2:a2:4d:be:14:1f:49:df:0c:b3:1f:6f:f3:82:
26:a6:7e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:12:10 2026 by rpki-client