Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B18D73483E6011F1AC898007CF1D38B0.roa
File: B18D73483E6011F1AC898007CF1D38B0.roa (raw, json)
Hash identifier: fZPAkPV8qulHXFk1V/W9W7HDVfM3odkx9wNjxOMFKPA=
Subject key identifier: B5:7A:99:95:3B:0B:DE:17:CE:E9:5B:66:1E:0D:46:4E:27:C6:49:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C68D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B18D73483E6011F1AC898007CF1D38B0.roa
Signing time: Wed 22 Apr 2026 15:34:06 +0000
ROA not before: Wed 22 Apr 2026 15:33:58 +0000
ROA not after: Sun 31 May 2026 15:33:58 +0000
asID: 9304
IP address blocks: 154.92.192.0/24 maxlen: 24
154.92.193.0/24 maxlen: 24
154.92.194.0/24 maxlen: 24
154.92.195.0/24 maxlen: 24
154.92.200.0/24 maxlen: 24
154.92.201.0/24 maxlen: 24
154.92.202.0/24 maxlen: 24
154.92.203.0/24 maxlen: 24
154.92.204.0/24 maxlen: 24
154.92.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116365 (0x1c68d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 15:33:58 2026 GMT
Not After : May 31 15:33:58 2026 GMT
Subject: CN=69e8ea6e-829e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:75:79:64:75:d8:3f:9a:aa:ff:cc:e0:99:9b:
49:48:1d:b4:f6:06:e2:e3:c3:f5:3b:b1:1b:0d:31:
26:ed:c6:31:ba:0d:86:73:79:25:59:f1:96:56:ff:
5d:60:c0:33:08:ab:a8:15:47:4a:0b:ce:18:fe:08:
80:4e:01:f3:fc:33:de:68:7e:ec:f7:d0:01:55:7f:
af:93:6d:b5:17:c6:b7:69:22:9d:f3:52:35:73:10:
aa:d2:92:71:7c:19:5b:f6:ee:80:6e:9c:2e:65:93:
86:0e:a3:7d:0f:a2:aa:f4:7a:65:d8:21:f7:3d:40:
e1:4b:0d:d6:6c:96:3b:f3:99:b3:42:bc:2d:96:5f:
e3:ed:57:37:34:00:42:27:35:7d:f0:39:8f:28:92:
59:22:57:c2:7c:9d:4e:57:3f:e3:13:0e:d3:c0:43:
e1:8b:9b:e7:dd:ea:d1:2a:3c:33:0a:3f:f5:80:90:
f2:c8:e6:c3:c0:52:e0:aa:6d:93:fa:3f:cb:ad:47:
72:66:eb:fb:a2:25:a2:e1:73:a1:f9:10:5d:29:7a:
26:52:65:e2:65:55:a8:ac:6f:86:03:da:46:0b:7f:
37:d8:99:e1:d6:a2:54:a2:ec:cf:46:ec:42:50:a3:
6c:09:e5:5b:80:62:6f:af:c1:9b:a9:b1:3b:64:45:
e9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7A:99:95:3B:0B:DE:17:CE:E9:5B:66:1E:0D:46:4E:27:C6:49:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B18D73483E6011F1AC898007CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.192.0/22
154.92.200.0-154.92.204.255
154.92.216.0/21
Signature Algorithm: sha256WithRSAEncryption
c0:01:22:af:bb:19:75:eb:64:04:62:2c:49:51:6c:bc:b0:d2:
3c:65:3b:da:d7:9c:18:aa:5f:cc:43:39:8b:5b:1a:35:d2:d7:
d3:be:2e:2d:06:ff:08:0e:58:a3:92:0a:63:21:af:2f:cb:4b:
60:1a:a6:ad:ad:bf:c1:b7:76:a3:a7:9c:ed:c0:de:b3:8c:8c:
a1:8e:99:aa:e4:c2:e9:b5:4a:87:b1:32:d2:37:aa:23:36:de:
c6:2b:14:d3:a4:b8:eb:9d:73:0d:f4:51:31:f5:02:4e:01:8f:
c5:5d:33:ea:1c:34:1e:8e:e4:c2:72:fb:4b:60:87:81:01:a7:
a1:08:2b:e6:39:50:69:02:94:cd:a4:d1:2c:55:9f:f2:3f:89:
1b:98:13:43:00:f4:fa:64:37:7c:c7:92:49:14:49:3d:a9:6a:
7d:f8:b0:d3:e1:6a:10:e0:60:70:d4:2f:44:d0:ca:17:9c:8d:
f1:53:f3:85:b5:12:5b:b0:2b:76:87:7a:bf:00:e2:f5:d7:5c:
a0:69:26:13:92:17:1b:a0:37:67:b8:a6:1d:7d:41:5b:e3:a9:
a4:81:9a:74:8a:4b:26:e1:4a:3d:47:35:34:31:63:e6:e7:cd:
f8:f5:0a:c2:59:6f:48:ad:e4:ac:f2:a7:6c:ce:a3:a8:a9:3b:
cc:2f:3b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:44 2026 by rpki-client