Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6D5BB6A460511F1B1F693ACCE1D38B0.roa
File: B6D5BB6A460511F1B1F693ACCE1D38B0.roa (raw, json)
Hash identifier: 8vOH8apeQqGWEX8d4gs1NM1tl0sHpVBnXYkKddhT9MI=
Subject key identifier: DB:DA:38:53:BB:29:80:CD:72:B7:E5:C8:94:DF:91:45:B2:E4:91:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C914
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6D5BB6A460511F1B1F693ACCE1D38B0.roa
Signing time: Sat 02 May 2026 09:02:58 +0000
ROA not before: Sat 02 May 2026 09:02:54 +0000
ROA not after: Tue 09 Jun 2026 09:02:54 +0000
asID: 138915
IP address blocks: 154.223.16.0/24 maxlen: 24
154.223.17.0/24 maxlen: 24
154.223.18.0/23 maxlen: 24
154.223.20.0/24 maxlen: 24
154.223.21.0/24 maxlen: 24
154.223.22.0/24 maxlen: 24
154.223.23.0/24 maxlen: 24
154.223.24.0/24 maxlen: 24
154.223.26.0/24 maxlen: 24
154.223.27.0/24 maxlen: 24
154.223.28.0/23 maxlen: 24
154.223.30.0/24 maxlen: 24
154.223.32.0/24 maxlen: 24
154.223.33.0/24 maxlen: 24
154.223.34.0/23 maxlen: 24
154.223.37.0/24 maxlen: 24
154.223.40.0/23 maxlen: 24
154.223.42.0/24 maxlen: 24
154.223.43.0/24 maxlen: 24
154.223.78.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117012 (0x1c914)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 09:02:54 2026 GMT
Not After : Jun 9 09:02:54 2026 GMT
Subject: CN=69f5bdc2-004a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:d9:5d:1e:a5:cb:90:78:46:30:f8:35:67:
0b:74:63:63:68:79:07:14:8e:14:31:ea:c8:f4:35:
0d:62:5c:e1:04:06:f0:9f:44:8e:3d:3a:d6:49:ed:
09:95:64:73:fa:76:4c:99:98:10:d2:af:09:1b:78:
65:b4:ac:c4:53:ad:83:7b:d3:b4:26:94:f9:bf:cf:
8b:3a:57:ba:8a:d9:19:dd:c0:88:51:97:45:80:b6:
9d:51:a5:dc:17:ff:d9:0b:5a:de:88:2a:ab:00:ff:
f1:af:15:13:55:29:78:65:ce:78:46:a7:71:c0:8d:
66:7a:55:59:d0:0e:7c:25:75:e7:6c:d9:55:55:01:
a5:43:64:45:27:a1:7c:13:f1:65:f9:f8:52:9f:94:
20:cb:c0:6a:51:08:ca:05:d2:14:ce:aa:d8:3b:b2:
03:66:af:ec:f1:5e:1b:94:10:55:05:7c:71:a9:55:
6f:23:9e:cb:ab:64:a1:43:2c:12:64:40:3c:b6:44:
9a:7a:83:a1:64:61:e4:60:72:a1:25:87:bd:3d:a8:
f4:c7:d8:e8:30:07:89:1c:c2:33:41:32:d0:75:47:
2b:d1:9c:5e:17:26:8a:91:5a:f1:98:36:a5:51:b3:
f4:11:a2:78:35:44:6e:69:c5:da:16:9f:e9:a1:0f:
c4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DA:38:53:BB:29:80:CD:72:B7:E5:C8:94:DF:91:45:B2:E4:91:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6D5BB6A460511F1B1F693ACCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.16.0-154.223.24.255
154.223.26.0-154.223.30.255
154.223.32.0/22
154.223.37.0/24
154.223.40.0/22
154.223.78.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:a0:30:99:7c:82:0f:1b:7d:9b:74:12:91:a5:2c:44:07:e5:
fc:dc:ae:5d:59:45:75:eb:f2:a0:e6:c4:25:19:25:d1:e5:ff:
b4:01:47:19:67:ac:6b:c9:c4:bf:2e:44:e9:f1:9d:42:2e:2b:
36:e2:d5:12:38:f2:8c:a0:98:d6:cf:66:b0:f9:e3:40:d2:1c:
22:b2:67:13:98:4c:73:fe:37:b1:0c:e5:71:48:e0:11:2f:8f:
98:f1:0a:b1:06:d6:54:ad:45:da:4b:7a:3a:5d:44:09:11:4b:
0d:76:3d:43:dc:c2:11:5b:36:01:69:62:ce:9c:5a:e7:95:25:
b1:c7:54:a1:1a:8d:1d:03:d7:aa:a0:41:26:f1:be:35:57:d6:
57:1f:c3:8a:f1:be:ab:43:ff:e6:fa:f6:bd:9e:6b:6b:d2:88:
53:d3:82:1c:f5:a5:e5:a3:47:36:25:2e:d0:82:35:df:cc:45:
25:60:72:69:4a:b3:a6:fe:be:0e:b2:67:87:f0:5b:58:0c:43:
4b:e3:83:38:7b:a3:be:88:61:a0:7d:af:2d:81:23:d9:8e:6f:
cb:ee:34:83:49:33:c0:e3:16:31:b7:47:15:ee:ac:92:67:ea:
5b:e3:4b:16:07:30:f5:84:d9:25:1f:2f:b8:49:d3:b5:a8:bc:
1a:7f:be:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:03:48 2026 by rpki-client