Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C68141EA4A4E11F197FF3AAECE1D38B0.roa
File: C68141EA4A4E11F197FF3AAECE1D38B0.roa (raw, json)
Hash identifier: WpGzOvVaFeZsULJ97wFa1JM4KsQ47Wb+rJnY2rFmoB4=
Subject key identifier: 50:90:6B:EE:74:D2:59:EA:53:5E:69:94:A4:A6:18:57:39:78:29:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C9E8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C68141EA4A4E11F197FF3AAECE1D38B0.roa
Signing time: Thu 07 May 2026 19:56:03 +0000
ROA not before: Thu 07 May 2026 19:55:57 +0000
ROA not after: Sun 21 Jun 2026 19:55:57 +0000
asID: 32043
IP address blocks: 154.194.5.0/24 maxlen: 24
154.197.104.0/22 maxlen: 24
154.200.22.0/24 maxlen: 24
154.200.38.0/23 maxlen: 24
154.200.40.0/24 maxlen: 24
154.200.47.0/24 maxlen: 24
154.200.110.0/24 maxlen: 24
154.203.8.0/22 maxlen: 24
154.203.12.0/22 maxlen: 24
154.203.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117224 (0x1c9e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 19:55:57 2026 GMT
Not After : Jun 21 19:55:57 2026 GMT
Subject: CN=69fcee52-235e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e6:22:bc:ff:71:ce:b9:66:af:ac:7e:a0:57:
bf:a4:cd:49:db:b4:22:a9:17:2b:ed:80:61:92:eb:
48:24:4a:47:9a:f8:08:32:9f:93:db:4a:c6:ab:0d:
88:8a:35:0a:32:43:64:ad:72:9c:58:59:f7:61:7a:
47:f9:b1:88:a7:0c:93:6e:9d:7a:ef:10:c7:c1:31:
70:e8:32:b0:29:f2:b8:e4:01:1f:25:c8:e4:ab:9f:
1c:f4:b5:2d:63:e0:e8:d4:c0:2d:f6:a6:ed:c9:92:
b8:50:99:42:52:95:06:8f:0e:88:76:9c:79:7f:2d:
c4:46:07:a5:0f:7b:d5:f2:d0:f2:fe:db:cf:aa:60:
81:7f:69:71:10:e4:6c:1f:ff:ce:ab:7f:7e:df:b2:
6f:4c:a0:0f:c8:58:d8:58:9e:d7:7d:b1:76:df:c0:
35:5d:21:5d:f7:36:a5:4a:4b:87:fb:5c:73:39:bf:
8a:49:a4:1d:19:7d:26:63:bd:71:6a:dc:38:c6:01:
a2:f3:03:71:d5:08:50:c0:06:76:97:78:15:48:df:
d3:76:f2:1f:28:62:b1:63:eb:10:79:ab:12:28:cd:
47:0b:f0:cb:f2:1f:77:e0:e7:63:21:e3:78:d5:41:
be:f7:91:61:61:d2:67:ff:f4:3e:f5:93:2b:c9:cb:
fd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:90:6B:EE:74:D2:59:EA:53:5E:69:94:A4:A6:18:57:39:78:29:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C68141EA4A4E11F197FF3AAECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.5.0/24
154.197.104.0/22
154.200.22.0/24
154.200.38.0-154.200.40.255
154.200.47.0/24
154.200.110.0/24
154.203.8.0/21
154.203.243.0/24
Signature Algorithm: sha256WithRSAEncryption
86:b9:c9:d3:9b:70:84:8a:61:83:dd:c5:34:e1:4e:9b:b6:c6:
47:2d:46:cb:60:4e:4c:2f:89:f8:1e:38:7f:15:96:3e:8e:1c:
40:60:37:58:71:84:2e:42:69:e4:df:dd:4f:47:44:a4:af:40:
a4:af:42:41:94:22:2e:42:5b:de:0b:d2:57:2c:9b:61:7d:af:
3b:82:07:4c:d0:62:2b:09:c6:ff:44:5c:05:87:ff:72:90:18:
81:6f:5b:18:92:fd:33:3c:4c:9b:78:94:28:5f:92:51:ee:e3:
65:73:e7:92:54:39:69:92:88:dc:34:d8:f8:84:5b:1f:09:44:
eb:f9:e1:c0:5a:48:18:d8:26:aa:9f:a7:30:43:c7:f1:fd:11:
c5:1b:61:ce:12:3f:14:52:5f:56:4c:fd:7a:9b:a9:2c:e3:6c:
22:2e:17:e4:5a:47:ba:62:3f:62:cf:f8:b2:a0:ea:16:29:8a:
a2:4a:a4:2f:d3:60:d9:43:84:c8:30:1d:aa:c2:39:fb:32:ca:
9c:7a:a4:85:b9:aa:0f:02:be:8c:a5:b1:c4:b4:80:73:e7:f4:
d5:b1:bb:aa:8f:66:f0:29:b7:67:8b:02:82:a4:65:6d:e1:1a:
ee:1f:8b:33:31:ff:f0:d6:5f:68:e5:18:ca:ad:80:ff:13:45:
69:4a:28:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:03:01 2026 by rpki-client