Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F130BF64449111F1AF55F1CFCE1D38B0.roa
File: F130BF64449111F1AF55F1CFCE1D38B0.roa (raw, json)
Hash identifier: e9tJEBGiQZUq3nrepvZUxDHnlk7Uq9LEiXGMDD6vVAI=
Subject key identifier: 9E:1E:65:50:46:A5:AC:FC:F8:45:BD:66:45:A9:D5:E8:28:B3:FB:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C837
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F130BF64449111F1AF55F1CFCE1D38B0.roa
Signing time: Thu 30 Apr 2026 12:41:43 +0000
ROA not before: Thu 30 Apr 2026 12:41:39 +0000
ROA not after: Fri 05 Jun 2026 12:41:39 +0000
asID: 202656
IP address blocks: 154.219.1.0/24 maxlen: 24
154.219.4.0/24 maxlen: 24
154.219.17.0/24 maxlen: 24
154.219.18.0/24 maxlen: 24
154.219.19.0/24 maxlen: 24
154.219.20.0/24 maxlen: 24
154.219.21.0/24 maxlen: 24
154.219.22.0/24 maxlen: 24
154.219.26.0/24 maxlen: 24
154.219.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116791 (0x1c837)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 12:41:39 2026 GMT
Not After : Jun 5 12:41:39 2026 GMT
Subject: CN=69f34e07-c8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d0:f3:8b:c7:69:54:10:34:db:04:1c:12:28:
42:0e:c6:a2:70:e4:cc:0b:00:ec:8e:60:81:28:95:
2d:ff:a7:8c:d2:b7:1f:26:6b:94:95:06:ad:a2:e2:
fb:54:1c:12:e9:fb:a0:5a:3e:d0:e7:94:58:d8:fa:
c9:14:89:0a:1c:c6:e2:cc:c9:39:56:ab:79:f3:7b:
8d:f7:a2:26:11:8c:c8:ee:c2:a1:45:7c:b2:f9:4a:
c0:c6:37:49:59:e1:64:ac:90:3e:ba:b1:d9:1c:9d:
ae:31:19:05:c0:63:06:9e:6a:f9:b9:81:f6:8f:91:
e0:58:cc:be:2a:22:87:b3:da:88:0f:3c:3a:d3:e9:
f5:23:f7:25:e8:1b:70:b5:f7:4f:dc:55:a7:c0:74:
15:26:e9:87:c4:f1:ad:7c:76:7f:8e:bb:ad:be:35:
ea:4d:f2:48:53:3c:c3:e8:73:7d:56:3c:da:9c:0d:
e0:73:ef:93:1e:fd:9f:d4:85:74:4f:21:3e:da:50:
9c:a4:5f:b6:66:01:05:30:74:eb:fd:07:5f:f2:74:
c4:b1:86:35:ca:fb:66:31:48:19:f2:e7:35:0f:06:
1c:d2:d8:ea:74:63:82:6c:f7:48:ce:a3:e6:7c:ad:
db:52:45:d4:6c:d6:ad:85:f2:55:dc:40:c0:cf:1e:
6b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1E:65:50:46:A5:AC:FC:F8:45:BD:66:45:A9:D5:E8:28:B3:FB:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F130BF64449111F1AF55F1CFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.1.0/24
154.219.4.0/24
154.219.17.0-154.219.22.255
154.219.26.0/23
Signature Algorithm: sha256WithRSAEncryption
95:32:4c:bb:69:c6:af:27:60:a7:5b:95:62:0b:81:36:5b:3b:
27:1a:5e:33:58:7b:49:e7:bd:2e:8c:29:c6:2b:39:ac:84:bd:
2d:00:d3:68:03:66:fd:15:c1:e6:af:43:5f:75:16:15:e4:97:
ea:f6:88:69:dc:06:a6:cf:7c:d7:52:3e:81:06:68:b7:1c:09:
f4:b6:da:6d:e4:60:29:ed:bb:f1:d9:24:ac:da:82:d5:86:29:
5e:9e:45:84:06:cc:8d:f3:f0:5d:af:25:62:7a:33:51:46:49:
e9:82:d6:2c:3f:e0:58:5c:60:fe:d5:16:42:a8:26:c0:e6:c7:
c4:7e:46:af:0c:7b:53:24:ab:33:9f:b0:b1:19:0b:32:e0:46:
18:e1:53:25:98:f6:de:34:72:8a:cf:5d:02:dc:3d:4a:a7:f8:
65:cf:14:80:64:7e:60:d6:fa:6b:00:6b:15:bd:d8:b1:1c:65:
71:91:e1:45:b3:e2:87:31:72:a8:eb:22:d0:51:b6:44:e7:32:
9a:99:75:3b:b3:80:7f:16:99:6e:57:79:db:3b:77:37:ca:43:
af:30:fe:d1:cb:53:8a:88:a8:e5:ab:7c:3a:32:d9:87:dc:52:
c9:ac:79:e1:c8:11:52:31:06:32:72:fd:a5:cf:9e:07:f7:a5:
a5:64:bd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:00:25 2026 by rpki-client