Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB34D096454E11F19EBB1CCFCE1D38B0.roa
File: FB34D096454E11F19EBB1CCFCE1D38B0.roa (raw, json)
Hash identifier: HgF/PlC4vLXE6ojzTk+D8ofv396KwG3bdi3TC0VrHsU=
Subject key identifier: 16:7C:29:7F:14:06:94:C8:B9:E8:81:CA:82:87:55:72:44:7F:43:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C871
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB34D096454E11F19EBB1CCFCE1D38B0.roa
Signing time: Fri 01 May 2026 11:14:55 +0000
ROA not before: Fri 01 May 2026 11:14:49 +0000
ROA not after: Fri 05 Jun 2026 11:14:49 +0000
asID: 199707
IP address blocks: 154.193.158.0/24 maxlen: 24
154.202.4.0/24 maxlen: 24
154.222.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116849 (0x1c871)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 11:14:49 2026 GMT
Not After : Jun 5 11:14:49 2026 GMT
Subject: CN=69f48b2f-cf7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:17:9e:ae:e8:7f:60:ab:97:45:01:09:61:1b:
04:ed:3b:ef:6e:c3:ae:a2:a3:90:fd:fb:8e:d4:15:
3a:2a:25:9d:25:2b:54:a4:f2:cb:ec:17:11:89:9f:
1f:f1:79:c6:af:47:57:3f:ca:9d:ae:a0:f9:b7:8c:
b8:b1:ac:15:e8:cf:3c:b7:2f:4e:cb:d4:41:2d:dd:
0d:62:17:be:61:82:0a:87:3a:7c:66:bb:67:47:cd:
3e:4e:20:4f:d8:02:92:b3:f4:b8:fd:39:3d:a1:e1:
df:8c:18:10:53:97:92:ef:94:ce:e2:c6:8c:47:e4:
32:7f:02:91:45:9d:44:43:7e:36:79:00:78:96:10:
cf:42:bf:07:c2:ee:b4:d6:f6:37:ed:3e:0f:d3:3c:
49:c4:cd:81:6c:08:7a:a6:51:1c:7b:28:11:c3:77:
53:ba:8c:ad:3a:c0:fa:82:23:b9:2e:ea:28:1a:d6:
ab:c9:fe:d0:ba:e4:da:a8:6d:de:dd:c4:af:fe:e5:
98:8f:b2:d7:6c:a2:10:8d:ba:53:e0:0a:ac:68:56:
89:b2:a7:e1:f9:b9:01:b1:42:ad:12:67:a8:bc:f5:
6d:68:0a:2e:58:b2:d5:ed:99:79:83:e8:e8:fe:71:
8b:5b:38:57:70:54:93:23:5e:cf:00:35:17:6c:9d:
17:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7C:29:7F:14:06:94:C8:B9:E8:81:CA:82:87:55:72:44:7F:43:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB34D096454E11F19EBB1CCFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.158.0/24
154.202.4.0/24
154.222.132.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:89:34:b8:23:35:94:42:72:9b:65:d3:a4:3b:81:c8:7e:2b:
d3:b3:7f:bf:26:e7:0f:78:73:a6:7c:a9:2b:34:9d:84:ca:33:
1e:bf:f8:89:39:cb:59:74:7a:40:6e:a2:40:a8:68:dc:2f:fd:
15:21:4c:cf:2e:ab:2c:3e:ba:26:dd:db:3b:92:9e:35:85:22:
4f:37:9a:9f:7e:c2:46:9a:63:f7:52:a4:f7:6c:94:fb:ac:7e:
e5:13:65:5a:75:48:df:e4:5a:66:41:bc:ef:86:4a:b0:89:09:
9d:00:fb:e0:47:e2:30:5d:66:b2:39:bf:98:a5:aa:4b:ed:83:
ca:5c:36:06:ce:24:8a:9e:ab:45:42:27:3b:bf:3b:fe:21:8f:
e1:41:e9:75:e6:22:4c:e8:44:9e:0d:ac:fc:db:13:63:9f:b7:
0d:ff:79:59:c0:f2:b4:2e:a6:6a:bc:07:53:14:5a:e4:42:df:
94:8f:cb:7c:aa:8b:f7:c9:d7:96:fd:9a:73:f7:84:81:94:b0:
6a:7e:24:cc:3d:84:c9:59:c4:ac:68:a7:66:75:fa:0e:5d:e1:
c5:05:ec:5e:75:67:4d:d5:99:9c:cb:2f:82:a0:72:5e:75:23:
21:e2:0b:28:68:05:e0:a0:20:ce:14:67:e4:06:8f:f0:9f:cd:
a4:e2:c0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:04:00 2026 by rpki-client