Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1A6E6C4493411F18796EF05CF1D38B0.roa
File: F1A6E6C4493411F18796EF05CF1D38B0.roa (raw, json)
Hash identifier: gMYXnoGrAyp4D3N2ZeifnLIHNf6whlTkCMYwUR7N6Wo=
Subject key identifier: 90:7B:47:D5:C0:DF:85:C7:4A:A8:A2:97:5A:BD:01:F9:F4:BD:C2:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C993
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1A6E6C4493411F18796EF05CF1D38B0.roa
Signing time: Wed 06 May 2026 10:18:37 +0000
ROA not before: Wed 06 May 2026 10:18:32 +0000
ROA not after: Sun 06 May 2029 10:18:32 +0000
asID: 17561
IP address blocks: 154.85.158.0/24 maxlen: 24
154.85.159.0/24 maxlen: 24
154.85.160.0/24 maxlen: 24
154.85.161.0/24 maxlen: 24
154.85.162.0/24 maxlen: 24
154.85.163.0/24 maxlen: 24
154.85.164.0/24 maxlen: 24
154.85.165.0/24 maxlen: 24
154.85.166.0/24 maxlen: 24
154.85.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117139 (0x1c993)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 10:18:32 2026 GMT
Not After : May 6 10:18:32 2029 GMT
Subject: CN=69fb157d-a55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8d:d2:12:b0:49:0a:29:85:aa:be:82:f9:e8:
d8:76:3e:db:94:3a:f9:70:d3:69:e3:3d:4d:28:02:
ce:92:a2:29:c5:27:f7:9d:41:5e:c5:0a:7c:6a:ab:
e7:76:bd:f7:9a:ba:03:e8:ad:6d:cf:2d:6e:20:98:
a8:5a:46:67:01:95:a1:16:fe:1e:d7:99:5c:77:8d:
db:7b:2e:c4:eb:26:38:9b:83:23:3c:ac:1b:a3:9e:
58:09:eb:62:94:0b:26:74:4e:45:ff:d4:db:75:17:
1f:7c:54:bf:9e:db:aa:12:31:a6:51:a4:5f:98:81:
d1:1d:38:d8:d6:3a:61:b8:9d:97:ba:32:1f:f1:47:
90:e9:b7:23:34:3d:c6:44:84:30:9d:04:39:95:ae:
9c:19:95:05:d8:b2:08:40:a2:f7:40:53:87:cd:a1:
1a:6a:d1:df:09:16:f6:cb:7f:8d:9f:c3:93:c6:da:
c1:ce:59:59:42:1b:ce:0c:a7:20:1a:58:9a:14:e3:
9d:61:bd:25:69:49:5c:21:df:f7:94:2e:6d:80:19:
8e:3f:fa:dd:c5:4a:01:bb:e8:f9:cb:a6:c3:06:04:
ae:40:4c:9c:db:4b:ac:fc:a1:44:a9:da:17:4d:51:
ab:52:64:0b:3f:35:99:4f:49:41:37:97:7a:43:1a:
80:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7B:47:D5:C0:DF:85:C7:4A:A8:A2:97:5A:BD:01:F9:F4:BD:C2:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1A6E6C4493411F18796EF05CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.158.0-154.85.167.255
Signature Algorithm: sha256WithRSAEncryption
6c:36:24:02:a7:27:52:1b:9c:43:23:63:bf:97:47:49:fe:d2:
2a:c9:e9:6f:ee:9e:66:c1:0c:dd:1d:e8:88:e4:14:10:8c:99:
1b:1c:10:b0:c9:3d:44:14:b1:47:3b:0b:45:f7:f1:62:0b:8d:
e1:79:bd:00:93:00:25:5d:92:75:ab:16:f4:a4:7e:9d:d5:fc:
23:ca:78:86:4c:01:64:e5:e7:94:c9:a2:20:b2:86:0c:92:2d:
71:c7:8f:dd:cc:82:3c:e9:d2:a9:1c:ef:cb:ef:0e:26:79:fc:
8b:b9:b6:26:8b:6d:8f:8f:12:5d:a6:da:9c:11:3f:da:33:e9:
26:1a:0c:0d:97:5a:7a:a9:ea:fe:fb:c8:b8:06:bf:22:06:0d:
ad:bd:74:1f:62:da:3b:3e:b5:7a:66:0b:c1:f8:5a:65:1b:df:
cb:d8:5c:0b:f1:d6:67:c4:29:b3:86:71:5f:f1:81:95:a8:b9:
37:f5:df:a1:90:0c:cc:9b:a5:ae:c5:03:f5:ca:04:8e:a8:c2:
c4:f6:b1:9f:ff:6d:ac:bc:73:a3:2b:ed:3a:0f:f8:43:5c:db:
72:15:18:07:4c:f1:3a:8f:03:39:c9:ef:9e:00:49:37:dc:60:
12:32:ff:67:f0:b9:01:f9:88:12:03:c7:f8:3a:38:ee:cf:6c:
0e:c2:4c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:33 2026 by rpki-client