Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C64881A4408D11F1AACCC7DECE1D38B0.roa
File: C64881A4408D11F1AACCC7DECE1D38B0.roa (raw, json)
Hash identifier: 4UxYQSbEC2hQU4pUH23Fq6wn0YRrp47YM+oOQu2k768=
Subject key identifier: A3:54:1C:1A:79:61:6B:2A:6B:27:D7:10:25:C6:10:52:AB:1F:BF:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C769
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C64881A4408D11F1AACCC7DECE1D38B0.roa
Signing time: Sat 25 Apr 2026 10:01:49 +0000
ROA not before: Sat 25 Apr 2026 10:01:43 +0000
ROA not after: Mon 01 Jun 2026 10:01:43 +0000
asID: 44559
IP address blocks: 154.203.216.0/24 maxlen: 24
154.203.218.0/24 maxlen: 24
154.203.219.0/24 maxlen: 24
154.203.220.0/24 maxlen: 24
154.203.221.0/24 maxlen: 24
154.203.222.0/24 maxlen: 24
154.203.223.0/24 maxlen: 24
154.203.226.0/24 maxlen: 24
154.203.227.0/24 maxlen: 24
154.203.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116585 (0x1c769)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 25 10:01:43 2026 GMT
Not After : Jun 1 10:01:43 2026 GMT
Subject: CN=69ec910d-7e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c0:32:e5:f3:e2:d0:2a:e1:7b:4f:11:6d:bd:
e8:6b:b3:77:1d:5d:68:c3:41:e4:3b:58:02:24:8e:
e7:92:13:ae:29:a1:3e:2f:04:9a:1f:9c:5a:b0:25:
0c:f1:91:91:4e:ec:2f:1a:f3:ba:c9:57:69:f7:2c:
3c:9b:de:a8:2e:52:5b:99:77:3e:3f:fb:32:17:1c:
66:dd:7b:01:67:67:75:1d:ce:fc:0c:46:d8:c9:19:
18:41:49:58:65:61:6b:48:57:d9:5e:0f:63:23:54:
32:62:36:ba:b4:72:89:c9:b3:86:06:64:5d:f8:bf:
c6:6c:c2:70:fb:d5:03:23:78:c3:65:f2:fe:e9:a9:
b7:43:5e:c1:58:97:82:b8:99:26:31:2c:dc:7b:31:
6b:f4:d7:0a:6a:8e:cc:ef:98:d5:5a:2c:3a:31:07:
9a:76:f2:31:4d:4b:76:6e:a2:a8:c1:de:76:71:e1:
85:e8:13:7a:40:4a:93:8f:2a:76:47:5c:d0:85:5d:
54:bf:06:7a:9d:96:5f:bf:3c:c9:bb:2a:20:fc:29:
aa:3d:41:1d:b4:c4:88:e1:83:04:a1:80:76:1a:32:
01:e5:5a:61:f9:f3:4b:8a:7a:62:2d:ff:f9:99:9a:
8e:69:fa:e5:e6:44:34:9a:c6:3b:c0:95:a1:dd:f1:
f0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:54:1C:1A:79:61:6B:2A:6B:27:D7:10:25:C6:10:52:AB:1F:BF:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C64881A4408D11F1AACCC7DECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.216.0/24
154.203.218.0-154.203.223.255
154.203.226.0-154.203.228.255
Signature Algorithm: sha256WithRSAEncryption
07:bc:13:fb:3f:38:ca:b5:15:ec:76:b7:2d:b0:7a:71:b7:05:
0d:56:44:2f:dd:30:2d:27:d6:25:c3:0a:2d:78:15:e6:12:d4:
65:10:a8:cd:e4:dc:6b:c6:fc:5b:86:bf:bb:51:b6:0b:b9:d1:
65:db:82:77:68:03:5f:6c:92:ef:8e:cd:fe:92:24:f9:7e:a4:
6a:34:6c:96:c0:e0:ea:be:e7:62:b7:e9:45:cf:8c:51:a6:39:
7d:fe:5b:c7:1a:9e:52:81:c0:f3:f0:13:06:11:c7:13:97:57:
47:29:c4:c3:49:a9:65:2a:a7:93:ea:8d:97:1a:b1:39:6e:5a:
d9:78:ea:a0:04:39:f8:07:11:6f:4a:21:23:ec:1b:3d:e5:e2:
05:d1:54:41:4c:73:93:e3:86:ce:07:10:93:57:d7:51:71:02:
ee:d1:a5:9b:01:db:50:20:eb:97:58:58:c4:f7:47:e1:f9:54:
a9:fd:2b:58:8f:43:10:e9:fe:4d:2e:04:00:48:b5:cc:9a:e7:
dc:01:d7:07:b8:f8:d1:72:7a:5a:bd:ac:59:94:59:9a:99:64:
cd:a5:d4:a0:d7:29:15:c1:90:9e:6c:58:27:b3:79:b5:76:dc:
a1:4c:d4:92:3e:89:25:58:f0:08:90:12:8c:f7:cd:42:6e:a4:
03:f9:79:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:06 2026 by rpki-client