Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1225C123FD811F1B79FC408CF1D38B0.roa
File: E1225C123FD811F1B79FC408CF1D38B0.roa (raw, json)
Hash identifier: yUHQ2nhBIMQLWjnpQHQ54+pM9gkRFXmPGWIU9qt4ujk=
Subject key identifier: AA:50:59:E5:28:CA:E7:0D:1C:98:EF:23:F6:F0:5C:9B:0B:3F:38:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C748
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1225C123FD811F1B79FC408CF1D38B0.roa
Signing time: Fri 24 Apr 2026 12:26:55 +0000
ROA not before: Fri 24 Apr 2026 12:26:49 +0000
ROA not after: Sun 31 May 2026 12:26:49 +0000
asID: 62240
IP address blocks: 154.85.26.0/24 maxlen: 24
154.85.97.0/24 maxlen: 24
154.85.99.0/24 maxlen: 24
154.90.1.0/24 maxlen: 24
154.90.129.0/24 maxlen: 24
154.90.130.0/24 maxlen: 24
154.90.131.0/24 maxlen: 24
154.90.142.0/24 maxlen: 24
154.90.143.0/24 maxlen: 24
154.90.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116552 (0x1c748)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 12:26:49 2026 GMT
Not After : May 31 12:26:49 2026 GMT
Subject: CN=69eb618f-2816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f3:5e:af:7e:de:9e:bf:9e:35:af:3e:b2:fa:
28:a2:2b:86:59:56:98:4f:57:77:e5:65:ac:7d:49:
e2:97:8b:bc:31:8f:93:72:a4:9d:29:bd:0a:4f:d7:
19:46:08:7b:55:77:65:4d:80:4f:37:89:99:74:2f:
01:a9:5a:cc:6b:be:9e:99:22:45:5a:b6:5e:b2:ac:
0a:c3:63:53:d1:92:9e:80:da:c8:71:c7:f1:e0:d9:
93:5b:45:a7:21:dc:09:35:a9:d0:09:3e:39:46:ac:
6e:77:b8:9d:9c:21:a0:95:9b:f6:63:1c:2e:3a:27:
18:0d:75:16:8e:75:52:ce:e2:85:41:4a:ba:5d:8c:
2c:c5:19:e5:80:1c:8f:de:46:10:81:0b:f4:76:d9:
4b:1f:53:cf:10:47:7d:dc:61:b7:1f:3e:2a:58:75:
df:81:7d:50:2a:90:cb:46:b0:8b:4a:dc:30:7b:21:
7d:67:0f:27:e6:02:ba:07:51:cb:2d:71:79:be:c0:
56:28:55:96:5b:18:06:e5:d2:e4:c6:b7:fd:4a:6d:
6f:72:f8:c2:9f:3c:b8:b1:c1:9e:41:d3:b0:94:a0:
04:de:06:b3:14:fc:b6:ca:4c:9b:2e:ae:60:29:c9:
f3:28:de:3e:8c:05:35:81:79:0e:5d:be:27:5b:6a:
91:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:50:59:E5:28:CA:E7:0D:1C:98:EF:23:F6:F0:5C:9B:0B:3F:38:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1225C123FD811F1B79FC408CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.26.0/24
154.85.97.0/24
154.85.99.0/24
154.90.1.0/24
154.90.129.0-154.90.131.255
154.90.142.0/23
154.90.172.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:e0:b3:c0:5e:a8:0a:e5:79:d6:f8:b9:6e:33:05:b8:5a:c5:
6d:13:fa:71:d5:e2:b1:23:ae:21:20:d2:1f:06:46:70:33:99:
86:eb:e7:4c:66:38:66:c4:5e:27:dd:c1:42:3c:f0:9a:9d:92:
fe:da:42:ba:e6:f9:eb:1e:41:85:95:6c:ee:60:63:7d:0c:18:
03:19:42:1c:39:b4:21:4b:97:bd:8c:c2:40:c1:93:49:e0:23:
de:84:c8:c9:f0:13:af:d0:b3:c5:f8:e7:2f:d1:28:3d:95:60:
3e:c2:76:a2:b9:0d:39:ba:f0:ca:37:96:f7:32:d0:d2:8e:ed:
14:a1:2b:c9:5c:f8:14:73:a2:1c:d0:bc:14:c8:3f:64:e9:1b:
05:a5:21:69:b1:21:c9:46:f2:5f:63:74:7b:17:33:0c:8c:94:
d8:ab:74:04:a5:52:2b:35:94:58:01:bf:68:90:03:62:28:a6:
f6:72:25:70:0f:d5:4c:c5:ca:ac:d5:f5:2a:67:10:a0:97:36:
1f:2e:c9:16:d9:9d:00:81:b6:17:b3:be:12:5d:a2:8c:0b:42:
bb:b2:0a:d1:ec:50:9f:2b:c7:93:cb:83:a7:8d:98:70:39:6a:
ea:8c:a1:93:ca:f1:f3:b4:05:de:25:2f:06:b2:35:f8:23:22:
41:e8:e8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:05 2026 by rpki-client