Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C79A0C4C3C9811F186A43A11CF1D38B0.roa
File: C79A0C4C3C9811F186A43A11CF1D38B0.roa (raw, json)
Hash identifier: VZROox2wO4v1wExFqMVG54wUGXt9DOTN/nYfRXaxK64=
Subject key identifier: 75:E2:B0:71:40:AF:D3:C1:B2:4E:38:55:32:3E:4E:47:FD:6F:BE:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C628
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C79A0C4C3C9811F186A43A11CF1D38B0.roa
Signing time: Mon 20 Apr 2026 09:10:31 +0000
ROA not before: Mon 20 Apr 2026 09:10:25 +0000
ROA not after: Wed 27 May 2026 09:10:25 +0000
asID: 63139
IP address blocks: 154.203.172.0/24 maxlen: 24
154.203.173.0/24 maxlen: 24
154.203.174.0/24 maxlen: 24
154.203.175.0/24 maxlen: 24
154.203.176.0/24 maxlen: 24
154.203.177.0/24 maxlen: 24
154.203.178.0/24 maxlen: 24
154.203.179.0/24 maxlen: 24
154.203.180.0/24 maxlen: 24
154.203.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116264 (0x1c628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 20 09:10:25 2026 GMT
Not After : May 27 09:10:25 2026 GMT
Subject: CN=69e5ed87-8f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6a:c0:2e:df:99:93:fd:e1:af:fb:29:19:90:
cf:e6:25:9f:58:80:03:32:b1:13:55:06:5d:d6:36:
ac:db:eb:a1:46:c7:0e:b5:0d:41:2a:48:30:a6:a2:
60:9e:2f:53:0d:61:e2:17:8a:5c:94:48:c9:b8:d6:
ae:c1:64:a7:84:43:8e:c4:12:93:3b:27:01:ff:45:
36:55:62:f1:34:8b:ad:ad:21:12:62:9b:ce:95:6e:
f9:90:20:77:5c:71:5c:5a:9c:4a:52:1d:99:32:52:
11:8f:1c:f7:72:a6:54:ed:2a:ad:89:ac:9b:90:59:
06:c3:9a:05:e6:9d:a1:76:20:2a:3f:74:88:f2:b0:
02:c9:36:74:ed:94:af:2c:7b:4d:69:c8:13:60:0b:
bc:e5:13:f9:81:f8:33:bd:18:13:a4:8a:c6:1d:36:
e5:0d:28:69:6c:b5:ff:f8:5b:bc:0e:b8:d2:f2:b1:
d8:c1:4f:e6:93:84:38:95:29:90:55:ba:29:f3:78:
5c:10:8e:6d:1a:98:64:2f:a3:05:22:5d:9c:7e:a0:
95:7c:b6:15:72:2e:3a:c0:2c:d4:eb:ae:ac:fb:af:
3e:f7:ed:ec:9e:c9:74:6f:85:a9:ad:27:6e:f8:b5:
46:39:5e:98:0f:85:04:21:97:bb:2e:89:f7:d4:ec:
dc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E2:B0:71:40:AF:D3:C1:B2:4E:38:55:32:3E:4E:47:FD:6F:BE:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C79A0C4C3C9811F186A43A11CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.172.0-154.203.181.255
Signature Algorithm: sha256WithRSAEncryption
0d:fa:8c:dd:d7:27:1b:6a:05:7b:a2:2d:6d:da:04:7e:e9:2f:
48:7d:ee:9f:1a:8a:06:37:2b:01:d4:86:f4:ed:8f:03:22:10:
80:5e:1a:b3:68:8f:a9:38:3e:1c:18:27:de:97:eb:39:40:ce:
95:a3:88:f7:17:1e:42:7b:a5:93:76:9d:be:b0:5d:95:7f:cf:
51:14:70:7f:f4:d4:08:e9:8f:fe:93:ec:07:e2:63:40:93:4b:
a1:36:1b:13:4f:e2:20:4d:6d:7e:52:0b:40:fb:2f:ae:d1:a1:
45:81:da:02:bb:7e:83:33:9d:00:7c:b0:97:8f:24:69:9f:cf:
52:13:98:58:12:73:89:36:c2:c4:73:02:b0:e2:ad:1d:73:1c:
3b:81:c2:e4:36:03:84:63:8e:ae:1e:b1:e2:b9:e2:b2:78:da:
a4:59:2f:66:d8:7d:a4:d3:e8:df:e4:91:f1:1a:46:a7:4e:af:
1e:f4:18:9d:cf:2e:d1:f8:74:74:c6:d2:58:73:cd:a1:3a:2a:
bd:fb:0f:3a:8b:23:79:ea:f6:34:10:4a:49:2d:43:58:4a:f4:
1c:87:70:ff:7c:28:dd:40:5b:28:50:37:fc:47:b0:29:ed:cf:
7f:02:03:e4:eb:cc:15:04:e0:82:84:66:3e:0c:88:44:7d:74:
52:eb:d8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:58 2026 by rpki-client