Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D43417663FC911F1B55784B2CE1D38B0.roa
File: D43417663FC911F1B55784B2CE1D38B0.roa (raw, json)
Hash identifier: LyB7vE81aLCNVRVYfm2GX29Zglvf9w3oOsHElIjGVEY=
Subject key identifier: 0E:A6:0C:5A:B8:10:DB:68:64:28:4C:B0:1B:7A:FD:58:79:35:BE:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C742
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D43417663FC911F1B55784B2CE1D38B0.roa
Signing time: Fri 24 Apr 2026 10:39:11 +0000
ROA not before: Fri 24 Apr 2026 10:39:06 +0000
ROA not after: Sun 31 May 2026 10:39:06 +0000
asID: 62240
IP address blocks: 154.194.80.0/24 maxlen: 24
154.195.107.0/24 maxlen: 24
154.196.36.0/24 maxlen: 24
154.196.40.0/24 maxlen: 24
154.196.41.0/24 maxlen: 24
154.196.42.0/24 maxlen: 24
154.196.43.0/24 maxlen: 24
154.196.44.0/24 maxlen: 24
154.196.82.0/24 maxlen: 24
154.196.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116546 (0x1c742)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 10:39:06 2026 GMT
Not After : May 31 10:39:06 2026 GMT
Subject: CN=69eb484f-6af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8a:e5:59:26:32:8a:ec:e3:06:4a:73:c3:bb:
a6:78:62:38:65:e1:2e:62:13:a3:c8:78:ee:39:fc:
db:61:76:28:74:1e:27:a0:65:bd:bd:1b:53:b8:a5:
b3:bb:ca:12:ab:24:28:06:05:b8:4c:73:80:46:d5:
a6:9e:7c:a7:e8:8f:2c:ce:73:e8:77:5b:ec:06:2d:
51:b8:51:e0:35:52:96:d4:5a:18:cd:d7:e4:b8:5c:
67:94:12:f8:9d:44:db:f8:2e:93:10:29:2c:f2:8e:
1f:4d:a4:ef:e2:38:6d:33:7c:1a:ae:f0:e4:8b:f6:
f7:a7:45:bb:4c:a3:64:16:59:14:a4:6b:5e:4c:b9:
29:32:ca:a7:55:a5:96:31:41:1e:c7:f0:08:d8:8f:
63:e4:4d:f2:96:8a:39:2c:0c:79:2e:7e:b7:35:c2:
7b:bc:bc:1d:2f:92:72:18:44:2c:c9:39:72:d1:82:
fe:e9:2e:3a:e1:68:dc:f1:d4:b8:82:73:f4:98:91:
2f:d6:c5:5e:0f:75:6c:db:ab:5c:6d:20:08:f2:f1:
f9:6f:22:c3:be:e4:ba:58:5a:6a:9f:b7:8a:bb:7e:
19:a2:a2:7d:e1:f1:39:3a:9e:69:58:e2:c6:57:66:
cc:cc:cf:4c:38:d0:9d:9b:45:22:89:93:08:cb:4c:
8f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A6:0C:5A:B8:10:DB:68:64:28:4C:B0:1B:7A:FD:58:79:35:BE:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D43417663FC911F1B55784B2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.80.0/24
154.195.107.0/24
154.196.36.0/24
154.196.40.0-154.196.44.255
154.196.82.0/24
154.196.86.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:09:c4:bf:10:36:57:ef:24:42:01:e6:36:ef:35:11:84:f3:
40:60:6a:9f:14:90:8c:e5:f8:5f:eb:29:b1:cd:03:97:bb:70:
e3:3c:f0:48:01:a5:25:38:19:95:9e:19:df:25:d3:b0:13:ca:
be:f9:ae:b2:33:e2:ff:0d:ae:f9:63:76:d3:2d:f0:ae:cb:c3:
c3:3e:5e:1c:26:f4:1b:72:64:ee:84:1e:c2:e7:c8:78:23:85:
78:2a:d2:5f:bd:a2:8e:e8:68:e5:0a:1e:b7:3c:e5:6e:5f:0b:
bf:52:0e:a1:19:63:f7:82:e8:2c:00:a9:4b:39:62:8a:87:5c:
b3:0c:35:1c:98:52:cf:83:a5:47:17:f2:86:5b:de:39:ac:37:
c4:38:23:32:b3:dc:94:fd:ec:d9:8b:8a:7f:53:e2:18:1c:42:
f1:fe:96:3f:80:b7:fb:97:0b:34:41:9d:d0:e2:0b:86:9e:2a:
6a:7c:5d:ce:43:22:b0:7e:50:0c:59:ba:77:fe:e2:6e:ff:1c:
bf:1e:0f:95:a8:9f:cb:4f:2e:27:81:e3:d8:1b:6a:3a:7b:c0:
43:e2:b1:f5:9b:0b:81:4c:41:2d:96:3a:2b:18:2e:b5:88:e5:
cd:c5:5a:21:a3:09:94:20:1a:42:a5:eb:b2:e4:80:84:81:94:
c6:90:03:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:48 2026 by rpki-client