Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE4B64EC3FBE11F1B10935EECE1D38B0.roa
File: FE4B64EC3FBE11F1B10935EECE1D38B0.roa (raw, json)
Hash identifier: hgsMF/g83WaEp6ruicStkFeLFyoCPExpHiUaQMvDoq4=
Subject key identifier: A7:B3:56:32:A2:98:FC:FC:36:B5:6C:17:30:03:4E:F5:CC:5A:1C:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C725
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE4B64EC3FBE11F1B10935EECE1D38B0.roa
Signing time: Fri 24 Apr 2026 09:21:37 +0000
ROA not before: Fri 24 Apr 2026 09:21:31 +0000
ROA not after: Sun 31 May 2026 09:21:31 +0000
asID: 62240
IP address blocks: 154.194.79.0/24 maxlen: 24
154.194.89.0/24 maxlen: 24
154.194.92.0/24 maxlen: 24
154.194.93.0/24 maxlen: 24
154.194.98.0/24 maxlen: 24
154.196.18.0/24 maxlen: 24
154.196.22.0/24 maxlen: 24
154.196.50.0/24 maxlen: 24
154.196.52.0/24 maxlen: 24
154.196.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116517 (0x1c725)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 09:21:31 2026 GMT
Not After : May 31 09:21:31 2026 GMT
Subject: CN=69eb3621-072e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:62:77:b2:cb:32:b4:5d:6b:41:0c:41:23:de:
20:bd:37:e3:17:2e:94:f7:be:ac:67:fd:d7:ae:a7:
cb:77:aa:a1:f6:e7:15:c9:f7:a8:16:0d:e0:2d:47:
ea:0a:51:93:00:88:cc:ae:20:1d:d3:12:92:e9:81:
65:00:20:bb:56:0c:68:9d:ca:19:54:a7:c9:11:1c:
5f:67:99:36:bf:0a:2c:67:e3:6b:8a:37:01:98:81:
c7:08:ed:a5:c2:64:49:05:3f:f0:8a:4f:65:1e:a1:
af:9c:85:5e:65:69:70:fa:54:a1:10:f7:48:2b:e0:
60:5a:e1:16:c1:8d:0a:e2:d8:1d:6e:b7:91:7e:62:
53:6f:d0:1f:7d:94:23:0b:db:48:56:da:b1:43:f2:
66:60:62:5e:94:b1:52:5b:6c:8d:04:f3:8a:18:de:
d2:7a:9e:51:df:37:d2:4b:d6:c4:b1:20:8c:8e:8b:
c2:c2:c4:13:f0:fc:eb:6a:51:93:2c:d8:f7:a9:03:
18:e1:ea:3d:56:13:ff:40:38:7e:13:c5:40:e4:91:
db:76:25:54:55:02:79:ee:82:2d:25:3b:a5:51:4c:
ff:af:4d:ce:2d:73:88:64:f5:fd:54:65:93:f0:46:
45:06:46:e0:89:f0:14:73:e1:21:4e:c1:f2:40:dd:
84:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B3:56:32:A2:98:FC:FC:36:B5:6C:17:30:03:4E:F5:CC:5A:1C:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE4B64EC3FBE11F1B10935EECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.79.0/24
154.194.89.0/24
154.194.92.0/23
154.194.98.0/24
154.196.18.0/24
154.196.22.0/24
154.196.50.0/24
154.196.52.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:f7:ff:05:b0:40:ab:b0:55:e5:af:29:8e:32:31:cb:07:a0:
aa:d0:26:c5:39:c2:a3:9a:0c:92:85:31:9f:81:45:c3:7a:e2:
d6:e3:47:66:94:60:bd:f4:d4:78:a7:d0:32:fe:bd:c5:39:bf:
d2:11:27:47:6d:73:bc:a7:e2:ca:89:cb:5d:bf:78:cf:49:e6:
3f:22:93:e1:8e:78:98:58:68:8e:3b:96:36:90:c1:8c:8d:01:
5b:c6:52:15:d9:da:7f:20:5a:52:d3:86:9a:7f:14:76:b2:da:
9c:ec:4c:a1:92:83:0e:be:d4:ba:74:ea:5d:15:fa:49:3b:3f:
66:cf:eb:5b:29:46:59:d7:70:3e:29:f2:9b:1e:ed:ef:ff:19:
8d:bc:d9:8a:b4:ba:81:68:52:cc:a7:9b:5f:9c:ec:fe:32:72:
20:17:08:0f:b5:a7:63:43:14:b1:6c:ea:ba:18:9e:ce:7b:2d:
73:fb:2b:cd:82:6b:f7:1b:16:e1:a3:7a:59:18:23:e7:09:ae:
5d:27:6a:12:82:6f:4f:9a:43:a4:14:65:d3:8f:31:71:6d:86:
3e:a0:07:74:43:9b:f2:38:ce:c1:0d:f9:45:57:17:5f:f0:2f:
cb:78:52:ae:fe:39:55:b9:5d:fb:de:f5:0c:bf:11:71:6f:ac:
68:f7:c7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:00:11 2026 by rpki-client