Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1D6BEE8459111F1B03A71DCCE1D38B0.roa
File: C1D6BEE8459111F1B03A71DCCE1D38B0.roa (raw, json)
Hash identifier: C1+ob2aPpOfgSs/9ladmH31PkcHbdQbpJhFE07zw1WU=
Subject key identifier: 30:F8:4C:86:D2:67:95:0E:88:2A:43:E9:E5:F8:EA:B4:14:BF:F2:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C8ED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1D6BEE8459111F1B03A71DCCE1D38B0.roa
Signing time: Fri 01 May 2026 19:12:55 +0000
ROA not before: Fri 01 May 2026 19:12:50 +0000
ROA not after: Fri 05 Jun 2026 19:12:50 +0000
asID: 48031
IP address blocks: 154.218.20.0/24 maxlen: 24
154.218.21.0/24 maxlen: 24
154.218.23.0/24 maxlen: 24
154.218.24.0/24 maxlen: 24
154.222.207.0/24 maxlen: 24
154.222.208.0/24 maxlen: 24
154.222.209.0/24 maxlen: 24
154.222.210.0/24 maxlen: 24
154.222.211.0/24 maxlen: 24
154.222.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116973 (0x1c8ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 19:12:50 2026 GMT
Not After : Jun 5 19:12:50 2026 GMT
Subject: CN=69f4fb37-2ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:02:20:1e:60:d4:fb:b1:ae:70:f6:d0:24:59:
08:98:f5:c1:a9:2c:06:61:ba:f3:5f:9d:84:e9:d5:
9c:35:65:18:6f:58:95:e1:e4:96:61:f7:a3:01:96:
c2:6f:c2:9c:e7:3c:ef:f9:b8:3f:20:f7:c4:97:6c:
58:f9:0b:d4:b1:92:63:f0:32:b1:ad:ba:19:d7:1f:
44:dc:56:f5:e9:4e:34:9c:8e:3a:97:72:a5:37:d7:
28:06:1c:4d:f9:92:b2:81:1f:cc:a0:8a:9d:60:ba:
1b:8f:d3:8b:e0:c1:c2:5d:d3:6f:0b:c9:6c:56:4a:
bb:15:dd:bc:62:d2:8a:70:a6:38:37:cd:44:1a:29:
d0:0a:93:1c:70:6d:ec:8a:a7:3a:05:8f:c8:53:e1:
28:a4:02:ed:7e:f7:76:7c:ad:84:9e:45:16:5a:88:
03:a0:e9:f7:8f:c3:24:c1:ff:68:65:2f:fe:96:4f:
88:5c:2d:2f:af:8e:a4:96:99:61:e2:ff:d3:08:e2:
0c:74:3f:8d:c4:8c:5b:c4:7f:2f:2c:25:ef:1b:5a:
dd:00:98:11:46:92:68:16:09:90:d8:03:e7:1b:c4:
cd:94:61:bb:29:79:f2:f3:44:ee:56:7a:24:b4:f7:
bf:7c:16:3c:2f:fc:ed:db:a8:bf:32:ac:d6:0c:8c:
fd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F8:4C:86:D2:67:95:0E:88:2A:43:E9:E5:F8:EA:B4:14:BF:F2:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1D6BEE8459111F1B03A71DCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.20.0/23
154.218.23.0-154.218.24.255
154.222.207.0-154.222.212.255
Signature Algorithm: sha256WithRSAEncryption
2a:0c:a9:8c:2e:13:b8:eb:24:68:f3:ac:d7:4b:9c:b0:ec:b8:
32:f9:87:02:94:56:e7:a2:36:4f:a0:12:bf:d7:b3:dc:42:3f:
de:88:ac:6d:45:37:e6:bc:71:ff:0e:5d:b8:64:ff:3b:b5:2b:
58:6d:ed:cd:d5:cb:7f:d5:33:fe:52:0e:45:d6:ea:d5:96:58:
f6:09:ed:6a:ac:ed:a1:a4:c3:9f:4f:6d:5f:a3:d8:b0:48:e8:
39:f4:f6:5b:46:13:1c:53:45:32:c6:a3:c2:2b:e7:6d:89:e0:
87:50:9b:42:f6:14:43:15:d8:ec:aa:16:83:c4:46:a3:e9:89:
ef:44:a9:a2:c7:74:bf:fd:51:fc:62:9c:e6:d1:d9:8e:f8:1c:
62:a4:ad:b4:16:64:35:67:ab:2b:5b:cb:66:82:f8:68:2f:c7:
98:97:77:1d:fb:2b:4e:cb:f1:97:c3:1a:e1:09:81:0c:71:f8:
4a:2b:79:a6:2e:79:58:bc:06:6d:5a:f0:b2:f9:fd:61:85:ab:
42:e2:6f:68:83:a8:48:2f:b2:98:16:e4:61:ac:0e:d5:7c:dc:
44:52:90:e8:e8:f0:5d:eb:be:0d:4a:ec:62:24:a8:3b:f4:2a:
9b:e7:8b:50:a6:00:84:7f:b9:3e:41:36:b3:24:4f:79:c7:e3:
a0:d7:31:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:48 2026 by rpki-client