Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A532CE6649E311F1842012B3CE1D38B0.roa
File: A532CE6649E311F1842012B3CE1D38B0.roa (raw, json)
Hash identifier: EUtoL0/nAQrjFj5xIsJqCKtf+FWQ3kwwyfW5In121PE=
Subject key identifier: EB:04:1E:BD:AF:58:06:3F:96:C8:2C:DD:68:5E:19:6E:3F:B3:82:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C9BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A532CE6649E311F1842012B3CE1D38B0.roa
Signing time: Thu 07 May 2026 07:09:11 +0000
ROA not before: Thu 07 May 2026 07:09:06 +0000
ROA not after: Sat 13 Jun 2026 07:09:06 +0000
asID: 9304
IP address blocks: 154.203.0.0/23 maxlen: 24
154.203.204.0/23 maxlen: 24
154.203.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117180 (0x1c9bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 07:09:06 2026 GMT
Not After : Jun 13 07:09:06 2026 GMT
Subject: CN=69fc3a96-bef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bd:4c:4d:c0:c2:8b:22:15:80:25:9f:e2:a0:
fb:d9:4c:07:61:62:09:f3:60:5f:fb:bb:4a:79:07:
28:00:59:6d:48:f9:9d:a9:2c:ef:ec:47:b7:2a:c0:
c1:cc:47:2f:2b:bf:ae:46:55:42:95:89:0a:cb:c5:
06:99:f5:05:14:94:93:20:3b:59:b5:01:d1:b5:f9:
1f:87:e1:b4:2f:e4:04:49:c2:5b:75:bc:42:55:d9:
ef:b4:dc:b6:be:79:b8:77:bd:c9:1a:67:0f:21:32:
72:6f:5b:22:7e:0a:92:46:5d:ad:4a:40:a4:75:b4:
30:af:8c:7a:ed:04:66:26:6c:0e:1c:b1:7b:8b:d4:
59:4e:d3:2f:68:0f:82:c5:89:37:29:2c:3c:73:3f:
ed:09:33:f7:69:38:85:1c:9a:0a:78:02:35:12:7c:
9d:5a:c6:82:1f:7e:57:83:82:5d:fa:3a:d2:55:e5:
08:1c:80:a3:0f:d1:c3:94:cb:d5:d6:9f:6c:68:45:
91:b7:10:d0:0f:7f:b6:d2:9a:90:b2:08:fd:cb:2f:
4f:c2:31:a3:87:50:02:ea:d7:60:ac:80:c5:37:47:
35:26:f0:b5:b7:72:e8:87:78:b4:b9:94:bf:e1:7f:
fc:71:d3:13:12:ae:da:e7:e3:6e:2a:25:81:c3:ad:
d2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:04:1E:BD:AF:58:06:3F:96:C8:2C:DD:68:5E:19:6E:3F:B3:82:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A532CE6649E311F1842012B3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.0.0/23
154.203.204.0/23
154.203.244.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:6e:06:87:7a:b0:0e:5b:fc:60:00:93:35:73:9e:15:61:9b:
f4:52:96:46:88:78:a4:0d:43:80:c9:ad:8e:d2:a6:6f:55:e2:
80:81:d9:48:52:c6:d7:ee:e1:d3:48:b9:33:47:8c:e9:00:78:
79:12:8c:4a:56:3d:38:fa:d0:44:5b:99:29:a3:d5:f7:15:ab:
c7:27:f1:9d:ba:79:90:6b:4d:29:8f:93:66:03:03:70:ad:70:
f9:04:f9:1f:ed:88:fe:1e:c7:92:dd:6f:4b:5e:0f:4f:89:3f:
f8:27:a1:96:f4:9b:9f:d3:4b:47:0e:b9:8d:91:b5:83:39:b3:
fd:55:0b:6f:98:ac:f1:e3:cf:7b:cc:89:b4:b1:c9:68:45:fd:
e7:dd:cc:81:3c:1c:ac:02:9a:8a:29:eb:14:d0:be:e7:10:f4:
7c:d2:b2:c4:2f:4e:ab:39:55:aa:9d:ec:fe:83:8e:3a:dc:06:
60:95:a2:38:14:61:b3:a1:2c:e3:98:c4:7d:3b:f7:e9:e7:fa:
e3:65:2a:d6:5e:58:95:25:f1:5c:5e:42:1d:6c:b9:dd:c3:a0:
25:25:61:e8:f8:c0:f0:c1:5a:da:ed:cc:f6:25:e3:83:c7:5b:
24:c4:ed:27:65:98:db:5d:79:c1:08:0f:0c:56:65:4b:73:11:
31:41:71:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:50 2026 by rpki-client