Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF5FDEF03E4511F1A6C859E5CE1D38B0.roa
File: AF5FDEF03E4511F1A6C859E5CE1D38B0.roa (raw, json)
Hash identifier: 4cGShrdnliXYSCm2afzjkdrWlAVe0tgWn956hgabn3E=
Subject key identifier: B7:B7:D7:03:71:2D:5C:00:44:F9:1A:DD:C2:81:8C:EB:84:10:AC:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C671
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF5FDEF03E4511F1A6C859E5CE1D38B0.roa
Signing time: Wed 22 Apr 2026 12:20:44 +0000
ROA not before: Wed 22 Apr 2026 12:20:39 +0000
ROA not after: Fri 29 May 2026 12:20:39 +0000
asID: 214143
IP address blocks: 154.197.25.0/24 maxlen: 24
154.197.90.0/24 maxlen: 24
154.197.127.0/24 maxlen: 24
154.203.196.0/22 maxlen: 24
154.203.208.0/22 maxlen: 24
154.203.240.0/24 maxlen: 24
154.208.72.0/22 maxlen: 24
154.222.72.0/23 maxlen: 24
154.222.80.0/23 maxlen: 24
154.222.82.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116337 (0x1c671)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 12:20:39 2026 GMT
Not After : May 29 12:20:39 2026 GMT
Subject: CN=69e8bd1c-6a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:21:cf:ab:6c:50:a4:2b:02:5d:63:4c:22:89:
25:d3:cc:a7:da:28:d2:76:b5:17:aa:97:95:d2:5c:
f0:fb:61:e3:13:72:bd:8e:6f:96:5a:8a:ad:7c:7a:
ca:c2:91:6b:1e:8f:b8:d9:f6:ac:e9:6c:54:9e:4e:
7d:bd:4a:82:f4:7a:ba:3f:71:2d:0d:35:0d:7e:3f:
25:f0:78:8f:19:ef:97:3f:af:1f:c3:f7:0f:1f:37:
71:63:8d:86:ec:91:d6:4b:a1:d6:db:eb:c5:14:22:
44:89:aa:45:5f:97:5f:ea:07:cd:67:6a:72:87:73:
6a:0e:d4:76:62:17:58:c2:1c:f4:35:a8:61:5a:23:
56:55:5c:4e:82:ae:35:06:33:6a:7c:a0:12:04:25:
a6:a1:bd:2c:85:5b:ca:fb:07:21:4a:9b:2b:da:91:
a1:cb:06:33:c4:56:25:4e:89:7c:2b:07:3b:f8:83:
b9:9d:a8:5b:d3:a6:80:54:ab:09:a2:79:59:81:3d:
65:c5:ec:b6:26:37:20:14:d4:3a:40:39:4f:45:b1:
93:49:64:67:fe:b4:8e:eb:b7:73:06:f6:36:10:a7:
a8:c2:a0:c5:c9:4b:58:72:38:d0:bb:2a:5a:28:9d:
f2:52:f3:d1:62:5d:7b:af:9b:9b:be:0d:04:65:dc:
09:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B7:D7:03:71:2D:5C:00:44:F9:1A:DD:C2:81:8C:EB:84:10:AC:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF5FDEF03E4511F1A6C859E5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.25.0/24
154.197.90.0/24
154.197.127.0/24
154.203.196.0/22
154.203.208.0/22
154.203.240.0/24
154.208.72.0/22
154.222.72.0/23
154.222.80.0/22
Signature Algorithm: sha256WithRSAEncryption
46:62:bc:0f:d1:db:3f:e2:b7:09:8b:29:9b:71:aa:55:1c:13:
08:b5:01:75:4b:42:97:f7:00:28:24:f1:d7:8e:ec:99:ff:f1:
f3:db:29:84:19:eb:ae:cd:04:d8:b0:c3:a0:77:68:02:c9:92:
12:82:52:a3:a4:1d:50:62:e4:38:b4:42:34:6d:ce:51:f4:cb:
85:e3:52:a5:a3:58:f4:f0:fb:4c:ab:2a:dd:40:d6:67:20:53:
32:38:28:79:97:40:97:c3:10:f3:7a:2a:15:ed:b8:38:d1:c2:
e1:f1:ab:4d:f9:85:f0:8d:2e:51:8c:f2:c8:fb:ff:dc:17:55:
b1:1e:be:6d:f8:68:56:b3:88:c8:35:0e:e5:6e:8e:ec:e5:fe:
eb:30:b8:81:95:c9:0e:a9:ee:fa:83:80:54:99:e6:df:f1:68:
d6:6f:92:74:22:ac:be:42:db:5a:6d:b5:dd:4c:b0:90:4b:22:
39:3f:78:06:41:ca:7f:d7:4a:60:76:ca:4e:bd:93:16:1f:9c:
fd:71:60:53:c4:ef:10:05:52:41:a7:5a:46:4e:4e:78:2f:a9:
8a:36:01:94:41:93:b6:ed:7a:45:cb:18:79:4a:e0:13:7c:8e:
36:03:c2:6c:22:d4:e8:a3:ec:fa:2b:3e:be:12:e0:79:e5:90:
46:ee:f9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:00:22 2026 by rpki-client