Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C97DE3AA3EFD11F19B577BD0CE1D38B0.roa
File: C97DE3AA3EFD11F19B577BD0CE1D38B0.roa (raw, json)
Hash identifier: JtxIRjo+icu0aWOJCP3k3O/JeO2Vjh0eJWthecT/qIs=
Subject key identifier: 70:74:30:F6:9F:4C:69:E8:DA:0E:FD:24:31:65:BB:DA:BC:6F:55:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C6DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C97DE3AA3EFD11F19B577BD0CE1D38B0.roa
Signing time: Thu 23 Apr 2026 10:18:36 +0000
ROA not before: Thu 23 Apr 2026 10:18:30 +0000
ROA not after: Sat 30 May 2026 10:18:30 +0000
asID: 9304
IP address blocks: 154.82.197.0/24 maxlen: 24
154.82.198.0/24 maxlen: 24
154.82.199.0/24 maxlen: 24
154.83.65.0/24 maxlen: 24
154.89.132.0/24 maxlen: 24
154.90.65.0/24 maxlen: 24
154.90.67.0/24 maxlen: 24
154.90.128.0/24 maxlen: 24
154.90.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116443 (0x1c6db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 10:18:30 2026 GMT
Not After : May 30 10:18:30 2026 GMT
Subject: CN=69e9f1fb-c665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d6:30:76:b1:d7:d7:90:d3:13:a5:c1:10:78:
78:57:72:57:8b:27:55:93:22:f4:ff:75:e9:39:80:
fa:df:19:f2:c1:31:62:e9:e3:56:e4:92:77:5f:46:
e1:4c:f6:04:2d:79:a9:85:8e:5d:30:c2:bb:88:d4:
6e:32:71:e7:94:31:29:1f:ba:d4:8c:67:fc:c4:85:
35:3e:3a:86:1c:15:11:71:52:1f:27:18:fc:28:6a:
97:54:ca:b6:8d:fb:9f:21:e0:1f:76:be:0f:97:7c:
a4:da:60:25:8b:cf:04:d5:60:89:b2:11:31:d3:ee:
6e:f7:79:82:74:4d:93:71:8f:d8:07:39:89:80:d3:
3f:c7:92:b6:c8:7f:a0:b0:1f:d6:1b:5d:aa:5b:1c:
59:97:c7:80:ca:33:5c:87:97:7d:d5:fd:b0:43:9b:
ce:f3:7d:a8:35:bb:88:23:3b:bc:d4:48:36:c6:98:
97:8e:74:68:3f:d9:d3:2b:d8:cd:90:19:ea:8c:25:
a5:af:4f:2a:e6:c1:3e:37:2c:8f:5e:e7:5e:b0:b3:
75:18:16:26:f2:3e:7f:63:ae:39:a8:40:df:dd:85:
e7:dd:74:a7:97:3d:38:ed:e1:38:7d:6a:81:c6:95:
21:62:2f:4c:20:9f:2e:bc:61:79:84:6f:56:9a:d5:
a3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:74:30:F6:9F:4C:69:E8:DA:0E:FD:24:31:65:BB:DA:BC:6F:55:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C97DE3AA3EFD11F19B577BD0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.197.0-154.82.199.255
154.83.65.0/24
154.89.132.0/24
154.90.65.0/24
154.90.67.0/24
154.90.128.0/24
154.90.189.0/24
Signature Algorithm: sha256WithRSAEncryption
52:c4:97:7d:a5:43:c4:de:7a:56:43:d7:e6:a2:06:d2:48:96:
3c:6a:cf:b4:3f:c7:f4:9b:32:5f:f3:65:73:3e:f7:b3:85:eb:
48:22:a4:8f:35:f3:e8:00:a2:63:de:e7:75:4b:ac:90:cb:51:
7f:74:9d:7a:63:68:ad:80:0f:ca:a0:99:2b:e3:6d:e6:cf:71:
d3:dc:f7:2f:4f:00:6d:bf:f0:73:d5:fa:ca:9b:f0:d7:4d:a7:
dd:d1:24:46:bd:05:b5:4d:fd:d3:b2:1e:84:12:e4:0b:1b:c3:
95:fd:96:80:d4:a9:8e:9f:b4:6a:4a:c1:20:42:3f:f9:83:c8:
a0:c3:e4:5c:c8:bf:ab:f7:54:eb:b7:43:19:8f:4e:b3:03:0a:
da:10:13:b0:07:0a:cb:5d:c5:c6:6b:f2:c3:f8:92:9c:50:27:
02:86:56:8f:7f:8f:80:9d:20:d3:04:4e:64:70:65:d3:ae:4c:
00:56:6e:2d:f8:76:c1:9b:76:7e:89:28:c3:63:2e:56:a7:81:
2a:13:13:d1:55:cd:92:c4:ce:3d:fc:12:9d:26:8e:44:b1:5b:
f9:1b:90:8a:00:32:af:22:f5:24:fb:76:68:32:f6:2d:17:4a:
b3:b2:b2:3e:f1:6d:b3:59:e7:71:d7:36:38:0c:da:cc:50:86:
4b:c1:c4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:45 2026 by rpki-client