Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC76AAD24A8111F1863F4CE4CE1D38B0.roa
File: FC76AAD24A8111F1863F4CE4CE1D38B0.roa (raw, json)
Hash identifier: PAukZtUSK3hLGve2+28SWa6Yq/JdHHdz+AUQpXbVTIo=
Subject key identifier: 8B:A2:12:4F:70:C4:53:AB:84:DF:C5:33:98:5F:79:79:81:2B:83:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CA27
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC76AAD24A8111F1863F4CE4CE1D38B0.roa
Signing time: Fri 08 May 2026 02:02:37 +0000
ROA not before: Fri 08 May 2026 02:02:33 +0000
ROA not after: Mon 07 May 2029 02:02:33 +0000
asID: 17561
IP address blocks: 154.208.0.0/24 maxlen: 24
154.208.1.0/24 maxlen: 24
154.208.64.0/24 maxlen: 24
154.208.65.0/24 maxlen: 24
154.208.66.0/24 maxlen: 24
154.208.67.0/24 maxlen: 24
154.208.68.0/24 maxlen: 24
154.208.69.0/24 maxlen: 24
154.208.70.0/24 maxlen: 24
154.208.71.0/24 maxlen: 24
154.208.80.0/24 maxlen: 24
154.208.81.0/24 maxlen: 24
154.208.82.0/24 maxlen: 24
154.208.83.0/24 maxlen: 24
154.208.92.0/24 maxlen: 24
154.208.93.0/24 maxlen: 24
154.208.94.0/24 maxlen: 24
154.208.95.0/24 maxlen: 24
154.208.112.0/24 maxlen: 24
154.208.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117287 (0x1ca27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 02:02:33 2026 GMT
Not After : May 7 02:02:33 2029 GMT
Subject: CN=69fd443d-f83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:92:91:d5:ef:89:45:31:8d:7e:48:88:c4:5d:
9c:7a:b2:1b:5d:0d:07:ec:cb:01:5d:e0:d9:74:db:
d2:ef:20:47:1f:a9:6e:df:ea:de:5f:a1:19:c7:c0:
91:aa:81:fd:f9:cf:ae:7b:51:a2:0d:11:31:f7:2f:
55:6d:d8:a5:f3:9e:1a:ae:17:4a:ca:8b:a5:bd:76:
5e:5d:85:79:81:d9:c8:72:9c:99:b2:99:a7:43:a4:
81:30:bc:25:3d:e6:5e:0b:05:e4:fb:22:11:9a:c5:
b1:81:34:71:c3:51:6d:40:5a:cc:35:8b:8a:d6:df:
ff:49:00:a2:07:29:6a:da:b8:d4:14:80:e5:d4:50:
bb:8d:1a:a8:09:37:8b:d9:34:84:1a:4c:6b:bb:9c:
51:f4:86:a1:e2:b1:b5:fa:ad:b5:33:ca:55:4c:94:
fe:40:08:a0:d2:d7:6c:65:2e:19:c7:6b:77:ea:49:
22:aa:08:42:60:6c:34:4b:8a:44:b9:8d:f0:59:1e:
31:17:a4:56:5e:d2:e7:3c:58:9b:c3:c2:e5:51:07:
f0:d4:bd:3c:5c:23:47:80:a1:3b:b5:f2:58:fe:f7:
7b:0d:cd:dd:eb:fa:4f:d9:93:0c:d7:07:65:3b:76:
d1:1e:4e:de:7f:c5:cc:ea:2e:95:6a:ab:3e:1c:f4:
54:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A2:12:4F:70:C4:53:AB:84:DF:C5:33:98:5F:79:79:81:2B:83:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC76AAD24A8111F1863F4CE4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.0.0/23
154.208.64.0/21
154.208.80.0/22
154.208.92.0/22
154.208.112.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:c4:a3:91:2a:82:36:73:58:3d:28:92:da:d4:a9:de:67:e2:
ee:88:bd:ce:2e:6d:39:fa:68:c6:c4:08:90:cc:13:18:c7:ca:
79:10:44:48:d5:b7:a0:3b:50:b4:0a:ec:15:a2:bd:df:d8:81:
6a:b0:6a:8c:42:ef:62:f8:0d:67:f6:c5:70:ac:d7:ad:ab:6c:
39:2c:91:c7:fc:6b:6c:c5:b8:90:8c:3b:45:90:14:eb:13:34:
44:2f:15:f4:0a:17:b3:ae:62:5f:5d:0a:d5:3f:09:8a:1a:91:
46:4b:93:10:51:a2:22:97:37:2b:b5:07:75:3a:b9:ea:3c:12:
2a:57:20:d5:0c:3f:5e:a1:95:3e:a3:3f:18:2f:6c:fb:32:99:
81:25:77:1d:72:92:d6:5e:34:1f:9f:2f:01:73:68:8a:77:48:
14:fd:93:05:ea:aa:dc:73:ec:fc:4a:04:4e:15:6b:fe:58:7b:
49:c9:77:9e:b2:94:76:42:84:54:7a:13:fb:1d:fa:37:12:4e:
e3:af:25:91:13:2d:eb:86:93:05:3c:e2:fe:81:bc:5e:63:39:
1f:69:17:e2:ba:57:21:76:75:7d:91:0c:01:f5:66:8b:41:ee:
24:49:7f:9a:cc:27:2d:1b:19:49:91:f9:b0:b3:ef:b3:ad:cb:
e3:a9:f8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:00:13 2026 by rpki-client