Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D803A3FE3C9311F1AB8FA0F4CE1D38B0.roa
File: D803A3FE3C9311F1AB8FA0F4CE1D38B0.roa (raw, json)
Hash identifier: dkLdOuTkSlCmhdtYB8xItRhRLK04j6/bIJVae+K66uE=
Subject key identifier: 4C:C3:0C:09:A1:18:F3:4B:2A:D4:32:DE:AF:F6:11:F0:A0:F3:D6:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C61C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D803A3FE3C9311F1AB8FA0F4CE1D38B0.roa
Signing time: Mon 20 Apr 2026 08:35:11 +0000
ROA not before: Mon 20 Apr 2026 08:35:06 +0000
ROA not after: Wed 27 May 2026 08:35:06 +0000
asID: 138915
IP address blocks: 154.203.128.0/23 maxlen: 24
154.203.130.0/23 maxlen: 24
154.203.132.0/24 maxlen: 24
154.203.133.0/24 maxlen: 24
154.203.134.0/24 maxlen: 24
154.203.136.0/24 maxlen: 24
154.206.116.0/23 maxlen: 24
154.206.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116252 (0x1c61c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 20 08:35:06 2026 GMT
Not After : May 27 08:35:06 2026 GMT
Subject: CN=69e5e53f-e7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f1:b0:56:9f:cc:d6:3e:08:b0:0b:ea:84:06:
7d:16:18:e6:24:7d:5e:53:c4:cb:99:a4:91:ce:ab:
30:c6:67:11:ce:e6:83:b2:fa:b9:c9:97:ff:15:81:
0b:55:48:2f:b2:52:5b:f1:e9:4b:ac:0e:28:d1:47:
67:b4:23:b0:fa:17:bb:8a:dc:fa:87:3e:f6:4e:65:
a0:ad:5f:02:0f:fe:a9:8c:e4:1a:33:25:f2:92:1f:
7e:e4:bf:2d:69:96:77:57:cc:0c:d9:36:e2:5f:ac:
c1:47:59:6a:76:67:ab:1a:9d:f8:42:95:5c:ef:49:
20:54:5e:4e:d6:19:67:79:cc:a7:5f:7d:1a:57:83:
ba:c0:bb:49:d1:4c:2c:9b:45:28:2c:7b:9b:ef:2c:
d7:e7:d6:0b:3c:1b:6b:4c:ab:0e:20:ff:79:64:e2:
69:2f:49:04:e1:3e:6b:6b:97:36:7e:31:29:d1:6b:
00:fe:98:0c:cb:93:27:3f:ad:0e:52:28:5c:67:a9:
db:43:b6:4f:b0:d4:07:73:75:87:a4:fe:d3:89:e0:
f1:67:23:24:8a:c1:f5:5f:9f:39:53:2c:85:87:47:
5c:d7:8c:4c:ef:9f:5c:ff:3e:4f:1d:8d:f0:a8:a8:
19:00:d9:a4:7e:d1:70:96:35:31:84:7c:54:8f:8e:
5c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C3:0C:09:A1:18:F3:4B:2A:D4:32:DE:AF:F6:11:F0:A0:F3:D6:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D803A3FE3C9311F1AB8FA0F4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.128.0-154.203.134.255
154.203.136.0/24
154.206.116.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:75:0b:b4:28:a4:e8:11:71:a4:a3:c3:cc:3e:32:9a:b0:8b:
46:24:e8:98:13:e6:a7:d0:ca:2a:14:ae:9d:bb:ef:7b:67:70:
4c:c9:1f:05:1d:fc:3d:b4:bb:ac:4b:5c:60:5f:0b:e9:b5:1f:
10:50:5e:77:d7:35:78:00:e5:91:5d:c4:c1:23:f1:20:0e:6d:
aa:08:5d:b7:5d:56:27:70:b0:f2:12:af:2a:62:27:b6:c9:21:
d0:c1:cd:f8:b8:91:3c:c2:9a:06:a5:c3:62:0f:ab:e5:bf:56:
f1:e5:44:d5:68:5b:47:0e:5d:5b:b9:c4:c9:a0:82:cb:b6:c8:
fc:70:77:f9:dc:13:f6:29:36:21:a3:4a:bc:90:09:2f:96:56:
8c:34:e8:35:f4:c5:c3:a2:65:cd:03:18:bd:92:f6:23:64:70:
8c:a6:7e:bc:75:fc:67:d3:84:9a:52:15:88:ec:9c:b6:5e:59:
be:07:8c:32:fd:26:74:4c:83:34:94:07:d0:fe:26:d0:48:20:
87:d3:76:f8:e2:fd:db:36:c9:8d:0f:33:33:e9:2c:00:80:4c:
5f:3f:82:0f:b9:29:44:47:86:53:2d:d1:3f:95:e5:71:52:f7:
6a:71:fa:e7:a2:79:0c:60:2c:26:10:3b:03:f2:5a:92:66:c2:
07:6a:e7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:03 2026 by rpki-client