Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFB622A64A8411F19ECA52FACE1D38B0.roa
File: FFB622A64A8411F19ECA52FACE1D38B0.roa (raw, json)
Hash identifier: /T/2tbgcp4qc/vTeknpB4VVOf85YZVdKzxqmuyZiKxs=
Subject key identifier: 83:83:71:68:D6:17:3E:FD:0A:9A:3F:2D:A2:73:B4:F2:24:65:65:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CA30
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFB622A64A8411F19ECA52FACE1D38B0.roa
Signing time: Fri 08 May 2026 02:24:11 +0000
ROA not before: Fri 08 May 2026 02:24:07 +0000
ROA not after: Mon 07 May 2029 02:24:07 +0000
asID: 17561
IP address blocks: 154.208.156.0/24 maxlen: 24
154.208.157.0/24 maxlen: 24
154.208.158.0/24 maxlen: 24
154.208.159.0/24 maxlen: 24
154.208.160.0/24 maxlen: 24
154.208.161.0/24 maxlen: 24
154.208.162.0/24 maxlen: 24
154.208.163.0/24 maxlen: 24
154.208.164.0/24 maxlen: 24
154.208.165.0/24 maxlen: 24
154.208.166.0/24 maxlen: 24
154.208.167.0/24 maxlen: 24
154.208.168.0/24 maxlen: 24
154.208.169.0/24 maxlen: 24
154.208.170.0/24 maxlen: 24
154.208.171.0/24 maxlen: 24
154.208.172.0/24 maxlen: 24
154.208.173.0/24 maxlen: 24
154.208.174.0/24 maxlen: 24
154.208.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117296 (0x1ca30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 02:24:07 2026 GMT
Not After : May 7 02:24:07 2029 GMT
Subject: CN=69fd494b-b9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e0:84:dd:24:5e:6a:e3:a5:54:6b:23:b1:bd:
73:c7:db:f0:b4:57:ff:d6:6f:91:18:50:72:11:bb:
8c:43:18:83:26:14:a4:16:19:62:1c:5d:06:90:e9:
e0:5a:9f:a5:e1:46:c3:13:3b:8a:f2:c1:5b:ea:32:
dc:e0:43:0b:41:92:65:20:df:19:02:8a:36:88:72:
71:50:98:8c:68:23:06:99:92:e7:1a:c4:42:6d:6b:
e1:18:42:ae:fe:09:e3:d9:2f:1c:4d:d0:33:cc:e3:
1f:e4:33:9f:93:f3:d9:4d:c3:7d:12:69:dc:cf:b2:
1b:77:34:b4:ac:dd:c1:f5:4d:04:0e:16:0d:97:be:
fa:37:35:1f:92:32:ea:96:66:e4:cb:46:b2:31:ab:
2d:5d:7e:02:75:cf:0c:95:9f:bd:06:ad:50:ed:35:
84:78:26:e3:88:1b:f1:ea:4d:b2:a4:5b:83:ff:d1:
8d:ac:26:8b:ce:a8:86:67:b7:08:ac:78:1e:e7:0f:
42:83:f7:4b:7b:8d:39:e2:6b:c4:1f:d1:43:e8:fb:
84:c2:04:ec:19:d4:33:17:9d:0d:4b:c6:76:e8:40:
9a:77:be:0c:2c:5b:c5:d1:ad:be:45:f8:82:20:b0:
e1:d7:9a:6d:e5:c8:41:bf:a8:26:2d:63:59:b2:8f:
c0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:83:71:68:D6:17:3E:FD:0A:9A:3F:2D:A2:73:B4:F2:24:65:65:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFB622A64A8411F19ECA52FACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.156.0-154.208.175.255
Signature Algorithm: sha256WithRSAEncryption
52:d5:6d:db:de:25:01:72:97:b7:cd:eb:6d:39:03:41:e9:f0:
9f:75:5a:2f:1f:90:c4:94:5a:d3:43:a9:2b:8b:d3:fc:b8:41:
50:81:af:f2:c7:0a:81:eb:7a:f0:39:64:98:ee:79:93:d0:c0:
a2:3c:68:e8:8f:43:0b:b6:35:fa:b0:88:22:84:99:74:6b:72:
50:11:dd:32:cc:12:73:12:df:6e:14:61:e0:1b:28:67:60:5d:
9b:ee:b2:80:37:ce:d9:e1:bb:27:79:c8:3c:27:fe:90:bd:a6:
b1:66:a3:31:a2:cb:2c:bf:e6:35:96:88:c6:01:13:b1:c4:07:
ac:0d:22:a5:28:6f:fb:11:46:7e:e7:0a:93:a8:d8:aa:90:29:
99:d2:09:ae:5d:46:f8:81:25:49:50:19:b2:c3:a9:0f:91:97:
33:d0:5e:70:00:a8:cd:df:2e:15:e2:03:69:20:ff:ec:a0:d4:
ef:03:a7:99:bc:92:cd:b1:8d:6d:3b:ca:6b:e1:5c:36:36:b3:
9b:20:c4:d3:8e:5f:83:7d:07:1f:df:e8:10:56:c2:bd:49:ae:
fa:e7:1b:f2:b5:56:dd:88:53:66:ac:3f:28:3c:2c:0b:08:ee:
d1:47:39:ec:77:02:b9:cc:fb:80:4f:30:73:d3:2d:22:95:6a:
c2:84:e9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:04 2026 by rpki-client