Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB848DF2479911F1A2B8BDC2CE1D38B0.roa
File: DB848DF2479911F1A2B8BDC2CE1D38B0.roa (raw, json)
Hash identifier: EVxlg9NWcHFHUbh9oxTRKhD9cXeSfxS06AG27IAlggA=
Subject key identifier: 74:4D:D9:2D:18:26:DF:A8:8C:52:D4:A8:2F:2F:94:25:78:83:DE:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C955
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB848DF2479911F1A2B8BDC2CE1D38B0.roa
Signing time: Mon 04 May 2026 09:15:57 +0000
ROA not before: Mon 04 May 2026 09:15:51 +0000
ROA not after: Mon 08 Jun 2026 09:15:51 +0000
asID: 45194
IP address blocks: 154.84.200.0/24 maxlen: 24
154.84.201.0/24 maxlen: 24
154.84.202.0/24 maxlen: 24
154.84.203.0/24 maxlen: 24
154.84.204.0/24 maxlen: 24
154.84.205.0/24 maxlen: 24
154.84.207.0/24 maxlen: 24
154.84.208.0/24 maxlen: 24
154.84.215.0/24 maxlen: 24
154.84.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117077 (0x1c955)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 4 09:15:51 2026 GMT
Not After : Jun 8 09:15:51 2026 GMT
Subject: CN=69f863cd-f7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ad:4b:15:c7:5b:f3:69:e9:cc:0f:c8:20:dd:
72:a5:77:39:f7:6f:d4:06:95:42:44:4f:f3:92:22:
db:ec:f6:1e:c7:37:28:1b:61:27:d1:cd:5c:b1:1a:
c2:0c:b4:84:24:10:fe:78:11:09:81:d6:08:68:df:
08:a5:a9:7b:39:61:b3:8d:38:7f:5a:68:59:af:f3:
a3:81:03:af:86:3d:46:78:2f:86:b2:cd:28:2f:ac:
25:5a:f4:e5:3a:7a:02:a7:e4:2f:d6:af:72:79:f9:
6c:da:d1:48:cf:41:2b:0c:0a:ba:be:50:1b:49:05:
b7:e9:a6:d1:b5:eb:4b:30:35:06:e9:0d:cc:f9:ee:
a6:09:c2:e3:1f:be:ec:27:d1:89:74:40:71:37:18:
c5:dd:94:d5:95:49:cd:cb:5c:d7:10:e9:1e:1f:3f:
5f:6f:44:ec:80:74:35:9b:2d:f2:d5:ac:2c:6e:11:
16:e8:50:0b:66:4d:7c:f7:7a:dd:25:65:28:2c:0c:
8c:f5:63:d0:af:87:b6:8a:b0:ff:29:77:29:76:49:
47:b0:17:81:e2:1b:ab:1d:01:02:bf:d5:de:69:92:
7f:f9:1e:62:31:5d:c9:11:89:d9:7b:08:b8:ef:5d:
a6:e1:02:a6:81:92:2f:79:eb:7a:c3:88:19:cf:6b:
27:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4D:D9:2D:18:26:DF:A8:8C:52:D4:A8:2F:2F:94:25:78:83:DE:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB848DF2479911F1A2B8BDC2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.200.0-154.84.205.255
154.84.207.0-154.84.208.255
154.84.215.0-154.84.216.255
Signature Algorithm: sha256WithRSAEncryption
a7:d7:ab:67:e1:4e:89:59:2f:08:4b:c8:27:42:98:d3:ac:c8:
2e:cf:94:bd:8e:ef:0f:e9:50:ea:f4:15:97:e0:3e:02:4a:52:
41:b9:ef:47:e1:9c:17:b0:b7:aa:c5:6a:13:d2:ac:5b:2f:34:
2d:56:47:ac:15:1d:48:48:2c:be:25:63:75:4e:cf:05:21:77:
e9:8c:7b:ca:2d:ec:56:ca:e7:17:db:0f:cb:f1:95:21:67:04:
fc:12:a4:95:a9:53:a4:70:2d:f1:9c:e6:2f:8a:f0:bc:ac:0c:
47:ab:84:18:0d:23:35:f2:08:f9:8d:f6:f4:e8:c7:f4:b3:aa:
87:32:0f:fd:2c:1e:8e:ad:d1:11:c1:ef:33:df:45:59:8f:d5:
b1:d7:ef:db:55:7b:46:be:98:38:28:ff:1b:3e:ea:34:f7:30:
45:7f:7b:c3:4b:85:a6:8d:ed:5a:26:29:81:07:fd:76:57:8d:
7a:f0:96:6a:19:3b:b3:b7:4c:a8:09:30:e2:ae:e0:55:2b:4e:
02:11:76:de:46:cb:c6:59:0c:57:71:59:cd:88:f6:2f:32:82:
0b:47:2e:e4:29:1a:0e:51:5f:46:aa:f7:36:25:97:8d:97:c4:
66:ee:aa:21:ff:7a:f1:c8:08:ec:29:17:58:22:69:9e:17:3a:
03:a7:d1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 10:59:55 2026 by rpki-client