Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D52E7002449811F1954EEEF8CE1D38B0.roa
File: D52E7002449811F1954EEEF8CE1D38B0.roa (raw, json)
Hash identifier: hqPyKokbR7AQdeeYxT9YHZsYUt8HXmrbvDmq2G9ybGY=
Subject key identifier: 78:82:2F:1D:6C:43:C2:06:22:48:F2:26:84:E3:04:7A:66:3C:1C:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C847
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D52E7002449811F1954EEEF8CE1D38B0.roa
Signing time: Thu 30 Apr 2026 13:31:03 +0000
ROA not before: Thu 30 Apr 2026 13:30:58 +0000
ROA not after: Fri 05 Jun 2026 13:30:58 +0000
asID: 202656
IP address blocks: 154.219.237.0/24 maxlen: 24
154.219.238.0/24 maxlen: 24
154.219.239.0/24 maxlen: 24
154.219.240.0/24 maxlen: 24
154.219.241.0/24 maxlen: 24
154.219.242.0/24 maxlen: 24
154.219.243.0/24 maxlen: 24
154.219.249.0/24 maxlen: 24
154.221.52.0/24 maxlen: 24
154.222.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116807 (0x1c847)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 13:30:58 2026 GMT
Not After : Jun 5 13:30:58 2026 GMT
Subject: CN=69f35997-0995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:5e:32:d6:02:b9:55:d1:d1:df:4c:8b:bc:
71:9b:65:8f:e6:c1:10:ec:de:08:07:f2:ba:a8:f8:
3a:27:ec:32:1f:94:a4:55:c7:59:b7:db:ab:b8:04:
72:37:4b:8f:26:ac:ce:44:d6:ae:d2:00:0b:86:a2:
2f:c7:81:32:d4:3e:07:ff:8b:32:06:a7:c5:b3:8b:
f5:aa:d1:9c:85:ea:7d:73:f3:5c:25:85:c2:da:f7:
e4:4d:a3:5f:eb:bc:20:0b:52:87:03:ed:a9:ae:9c:
c1:99:65:b3:5b:9f:c3:88:52:88:d5:8f:2b:6a:36:
34:24:28:80:42:e5:21:8d:f7:d7:95:7b:15:a4:e7:
ad:dd:e1:a0:bc:5f:48:11:50:9f:8e:c4:35:c8:56:
ce:a5:c1:80:30:c7:a4:8f:9f:19:42:d8:a5:00:4f:
be:a0:a5:bc:4e:84:4a:24:4d:1e:59:24:07:11:86:
a3:a5:1f:20:c1:55:da:ed:46:7f:38:5a:96:d1:61:
af:29:f8:88:a8:85:af:5c:ba:f6:49:c8:3b:31:37:
cc:39:70:78:e2:21:f0:07:90:83:d1:54:4e:3c:e7:
d0:2b:f0:6c:9b:93:76:27:c3:b0:0e:e4:cb:1d:b1:
a8:9c:ad:58:c6:d2:7a:5f:4e:1c:6a:e7:aa:25:42:
3a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:82:2F:1D:6C:43:C2:06:22:48:F2:26:84:E3:04:7A:66:3C:1C:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D52E7002449811F1954EEEF8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.237.0-154.219.243.255
154.219.249.0/24
154.221.52.0/24
154.222.197.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:78:24:7b:1a:36:06:62:ef:c6:9c:c1:d1:bc:49:b0:43:39:
dc:60:b9:2a:88:20:43:31:f6:f3:05:aa:ac:d3:c9:37:a8:03:
6f:ca:b2:5d:99:8c:f0:98:bc:08:f9:4f:c8:64:22:33:b9:87:
31:a5:0e:19:e1:c4:87:cd:71:f3:4a:a9:4d:ab:f3:4a:4f:c8:
0e:53:4f:3b:db:69:bc:b9:df:c6:1f:3e:76:f6:c9:45:0c:e0:
c5:dd:cd:61:d0:bd:49:da:c8:6e:64:20:12:7a:15:f3:2c:c3:
36:9e:2e:eb:1c:02:7b:c5:16:0b:2f:66:f7:70:06:eb:1e:e9:
c4:2d:54:35:12:07:54:4a:b6:31:24:84:3e:a9:c2:1d:c9:7f:
a0:60:0e:68:54:7b:0f:20:75:4e:f7:ec:f0:bb:ba:eb:cb:67:
f0:49:26:23:b1:3c:3c:b4:aa:0a:68:1a:d3:de:e7:a1:33:8b:
fa:7f:0e:fb:1f:a7:37:03:2f:23:0a:01:ba:74:6b:8d:e9:45:
fa:da:36:1c:f8:6f:c8:2e:46:4f:de:11:1c:a3:98:6e:5a:88:
c3:34:2b:6d:dc:7f:6f:a6:53:5b:a2:4a:3d:8e:e6:72:ae:de:
08:07:2c:a6:e8:9a:4a:69:31:8f:1d:28:c4:ec:4b:13:3d:90:
c3:63:d4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:57 2026 by rpki-client