Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC9AC3E03C8E11F1B4F2B4D7CE1D38B0.roa
File: BC9AC3E03C8E11F1B4F2B4D7CE1D38B0.roa (raw, json)
Hash identifier: P23LYViWLv+yiOtrYAc/YGC6Wj2JkLg3mbDdBWcMPn0=
Subject key identifier: 58:BD:9E:0D:53:31:EB:19:32:E4:49:00:2F:80:1B:66:C8:5F:EC:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C610
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC9AC3E03C8E11F1B4F2B4D7CE1D38B0.roa
Signing time: Mon 20 Apr 2026 07:58:37 +0000
ROA not before: Mon 20 Apr 2026 07:58:33 +0000
ROA not after: Wed 27 May 2026 07:58:33 +0000
asID: 138915
IP address blocks: 154.203.135.0/24 maxlen: 24
154.203.137.0/24 maxlen: 24
154.203.138.0/24 maxlen: 24
154.203.139.0/24 maxlen: 24
154.203.140.0/24 maxlen: 24
154.203.141.0/24 maxlen: 24
154.203.146.0/24 maxlen: 24
154.203.147.0/24 maxlen: 24
154.203.148.0/24 maxlen: 24
154.203.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116240 (0x1c610)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 20 07:58:33 2026 GMT
Not After : May 27 07:58:33 2026 GMT
Subject: CN=69e5dcad-ae87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:1c:62:7c:16:63:e5:a1:98:1e:13:1e:6e:
ce:b1:72:d8:93:70:8d:b9:40:3f:e5:fa:91:93:68:
91:12:8e:a9:94:db:74:13:4b:1d:a8:f9:0f:88:ae:
0f:b1:1f:39:1c:1c:1a:30:f6:a6:b3:0c:f3:8a:22:
b6:4f:b5:c8:35:43:36:a8:16:d1:5e:60:b7:91:4a:
2f:d0:70:c0:30:4f:21:bd:8e:57:d7:da:23:5b:6c:
fb:f7:6a:4f:d5:a0:2b:b9:8a:6c:62:9f:33:de:b3:
e0:b5:92:4c:39:af:ef:9c:c4:4c:2a:6f:31:cf:e8:
ce:e6:ec:5c:79:97:61:d8:53:fc:0b:6d:a9:e9:90:
ae:80:43:2f:89:b0:9d:3e:87:b5:d8:23:c0:6f:40:
47:98:b7:83:2f:ef:3d:39:e6:d7:8f:7d:da:53:fa:
5c:0a:ac:c4:67:fe:8d:3a:c7:bc:9f:20:db:4c:b9:
9b:0a:22:d0:a2:9f:b3:20:9c:08:26:00:93:8e:63:
14:82:3e:c0:75:61:56:9d:70:11:78:cd:23:98:ef:
fa:8b:e2:69:dd:dd:dc:e9:13:f9:fa:13:bc:99:d6:
0b:c4:8f:e7:cb:fe:ae:90:9a:6c:02:9f:8a:23:86:
88:9d:54:65:45:d3:7a:8a:1a:15:a8:e1:80:7d:10:
44:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BD:9E:0D:53:31:EB:19:32:E4:49:00:2F:80:1B:66:C8:5F:EC:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC9AC3E03C8E11F1B4F2B4D7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.135.0/24
154.203.137.0-154.203.141.255
154.203.146.0-154.203.148.255
154.203.169.0/24
Signature Algorithm: sha256WithRSAEncryption
af:5f:c7:ac:90:8a:71:1f:70:a1:b4:db:8e:f3:4f:04:1c:db:
ce:54:89:2f:d2:20:75:6a:84:6e:99:a0:ca:3b:d7:12:73:bf:
10:bf:6d:61:e4:8a:af:cd:7f:65:7e:4e:5c:07:32:08:11:12:
28:43:d8:76:a2:a1:2d:01:e1:e5:4c:26:34:ad:0b:2b:8c:20:
f4:52:08:5a:e1:d6:82:31:20:16:64:c5:6c:0f:2d:90:5f:00:
0c:81:d1:38:58:46:29:57:4a:56:6d:46:2d:08:32:b1:40:86:
b8:db:c8:ec:a7:64:b4:b8:71:10:f0:33:f0:0e:02:e3:07:b1:
e1:98:80:93:b0:9b:1a:e3:1e:97:42:6d:3a:34:c6:5f:b1:a0:
f5:3b:4c:7d:aa:61:de:2b:02:a5:c0:f2:74:09:a3:fd:45:56:
d8:09:32:b2:3f:51:f2:91:87:1d:ba:66:a8:70:f5:83:e5:7b:
51:74:6e:f0:48:70:b0:7d:cd:04:13:31:c0:08:3c:db:14:23:
d2:a6:15:10:79:b6:95:cb:26:68:b5:8f:bf:88:d5:07:56:1a:
5d:23:6a:ec:70:f6:79:a7:07:14:01:92:3a:e0:98:f0:cc:08:
49:8b:e2:38:8e:c7:11:1b:21:8a:1e:f8:36:8f:63:f8:fa:95:
f9:b1:c1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:00:12 2026 by rpki-client