Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADA7A34E1B7311F1BC94F6CCDAE4EC9C.roa
File: ADA7A34E1B7311F1BC94F6CCDAE4EC9C.roa (raw, json)
Hash identifier: 4S2R3rkMruWyPDctPYkYz3B5kYOyfPvQ/39E1GdeNoM=
Subject key identifier: 39:C7:FF:A5:AE:AE:E0:7C:EE:CC:C4:CC:BC:7A:6F:BC:5F:20:71:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE60
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADA7A34E1B7311F1BC94F6CCDAE4EC9C.roa
Signing time: Mon 09 Mar 2026 04:51:47 +0000
ROA not before: Mon 09 Mar 2026 04:51:43 +0000
ROA not after: Thu 16 Apr 2026 04:51:43 +0000
asID: 17497
IP address blocks: 154.193.8.0/21 maxlen: 24
154.193.8.0/24 maxlen: 24
154.193.9.0/24 maxlen: 24
154.193.10.0/24 maxlen: 24
154.193.11.0/24 maxlen: 24
154.193.12.0/24 maxlen: 24
154.193.13.0/24 maxlen: 24
154.193.14.0/24 maxlen: 24
154.193.15.0/24 maxlen: 24
154.196.135.0/24 maxlen: 24
154.196.140.0/23 maxlen: 24
154.196.140.0/24 maxlen: 24
154.196.141.0/24 maxlen: 24
154.196.164.0/22 maxlen: 24
154.196.164.0/24 maxlen: 24
154.196.165.0/24 maxlen: 24
154.196.166.0/24 maxlen: 24
154.196.167.0/24 maxlen: 24
154.196.216.0/21 maxlen: 24
154.196.216.0/24 maxlen: 24
154.196.217.0/24 maxlen: 24
154.196.218.0/24 maxlen: 24
154.196.219.0/24 maxlen: 24
154.196.220.0/24 maxlen: 24
154.196.221.0/24 maxlen: 24
154.196.222.0/24 maxlen: 24
154.196.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Mar 2026 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114272 (0x1be60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 9 04:51:43 2026 GMT
Not After : Apr 16 04:51:43 2026 GMT
Subject: CN=69ae51e3-92d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7e:99:6d:7c:71:b5:3f:47:9c:83:6e:6d:db:
37:9c:6e:45:1d:ea:0a:9b:81:fb:51:7d:11:ea:b7:
02:6f:54:64:6a:1d:ab:8a:47:72:d8:3f:51:12:18:
6b:32:4a:db:27:96:be:3d:ed:47:08:0d:eb:0c:07:
e3:57:07:86:b1:b1:07:19:18:81:ee:60:39:06:db:
a3:9c:c9:fc:7a:59:47:6e:9d:b7:20:90:d6:61:83:
3f:c6:3e:f4:17:19:cc:b3:6e:66:c3:83:d3:94:ac:
18:12:4c:3d:28:0a:e3:ec:0f:2c:20:ef:fc:e5:4e:
59:5f:f4:d3:ee:7b:de:96:dd:0c:54:aa:ba:fa:71:
06:cf:e9:75:fd:82:b7:89:1a:e5:80:2a:43:64:86:
8a:a4:aa:42:27:f9:a6:bb:b6:c2:94:ea:16:f1:22:
2b:6e:20:91:97:a1:71:72:a7:78:15:dd:78:41:43:
ed:86:e4:b3:59:67:1b:b9:52:1e:96:0c:1b:f3:0f:
fa:d6:48:df:53:57:f7:67:b2:da:86:ce:e2:96:15:
6e:fd:c9:4c:de:60:05:5f:34:1d:5c:2e:3b:5c:c9:
6b:2a:34:f7:20:aa:4d:24:0e:4e:b2:1a:55:d7:ff:
d7:83:c5:4d:4a:5b:79:84:66:26:ed:e4:ab:87:26:
1c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C7:FF:A5:AE:AE:E0:7C:EE:CC:C4:CC:BC:7A:6F:BC:5F:20:71:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADA7A34E1B7311F1BC94F6CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.8.0/21
154.196.135.0/24
154.196.140.0/23
154.196.164.0/22
154.196.216.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:ae:4b:da:32:b5:db:42:2b:c7:7b:09:b0:21:bc:fe:4b:12:
ac:fc:4c:91:94:f4:8a:34:d9:de:d9:1f:6f:7f:87:55:dc:f6:
d6:9c:ee:f3:a8:14:45:20:1e:a3:58:37:2b:2b:86:e9:66:64:
1e:59:48:46:d8:91:ac:d3:1e:20:0e:46:e7:b4:10:6c:9e:74:
30:cf:ba:c1:03:7e:1d:9c:6d:ca:40:fb:a0:61:2f:53:1c:bd:
c7:b5:91:20:6c:91:c4:02:1d:47:04:b7:b0:4f:2e:a3:09:b1:
7e:74:86:e8:6d:9f:47:e6:2d:f4:8e:37:2b:c0:ac:4e:1f:50:
60:b9:14:0f:41:3d:ad:8d:30:bb:06:e9:73:af:6a:11:14:13:
ba:0a:03:35:0e:44:ac:8e:f6:83:21:15:34:8f:2f:68:f6:ed:
28:01:58:2d:62:e0:3f:37:ca:e8:0b:53:b1:32:9c:aa:1b:20:
a0:c6:71:00:83:e0:a1:cb:0d:cc:47:f1:f9:24:23:f4:74:ea:
bf:96:d5:9c:f6:0e:19:c4:7f:eb:de:88:d8:bc:ad:64:63:a8:
4b:22:d9:55:6c:e4:8f:8f:83:3a:e1:6d:92:ef:6d:92:bf:44:
fc:c5:c2:65:b8:7f:0e:17:03:d0:eb:7d:23:cd:8d:b4:5a:2d:
8c:0c:f8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 09:28:18 2026 by rpki-client