Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/398B620E3CD211F18D4C01E8CE1D38B0.roa
File: 398B620E3CD211F18D4C01E8CE1D38B0.roa (raw, json)
Hash identifier: z4NyTAilkRby1WJ+NYtJJyiUOB8EBWvO3IDmnHmEUz0=
Subject key identifier: A0:7B:8E:20:9B:D7:40:27:49:0C:70:B6:71:85:F2:9A:58:7A:16:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C640
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/398B620E3CD211F18D4C01E8CE1D38B0.roa
Signing time: Mon 20 Apr 2026 16:01:43 +0000
ROA not before: Mon 20 Apr 2026 16:01:39 +0000
ROA not after: Wed 27 May 2026 16:01:39 +0000
asID: 138915
IP address blocks: 154.93.109.0/24 maxlen: 24
154.93.110.0/24 maxlen: 24
154.93.111.0/24 maxlen: 24
154.93.114.0/24 maxlen: 24
154.93.115.0/24 maxlen: 24
154.93.116.0/22 maxlen: 24
154.93.120.0/24 maxlen: 24
154.93.121.0/24 maxlen: 24
154.93.122.0/24 maxlen: 24
154.93.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116288 (0x1c640)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 20 16:01:39 2026 GMT
Not After : May 27 16:01:39 2026 GMT
Subject: CN=69e64de7-ec9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5c:0d:56:15:3a:e2:0f:41:67:5b:f2:54:f0:
5c:c1:10:87:25:5b:e0:ca:6f:f6:8e:05:1f:3b:86:
2e:20:d4:d4:7a:2b:f2:99:e0:75:54:22:01:cf:b7:
be:8d:55:a0:2f:59:2d:1b:9f:5e:0a:76:03:2d:48:
0e:90:12:5a:8d:ec:e9:49:f4:fa:d5:ef:86:20:75:
c6:9f:fe:8d:5e:dc:0d:47:db:44:d5:95:6f:2a:19:
02:79:91:e5:12:10:f0:79:31:06:a5:a7:f4:dd:b0:
05:b7:e4:ed:9c:75:29:b7:b1:e9:ff:d5:ac:ed:30:
97:d9:fb:ef:03:10:57:f2:2f:77:75:aa:56:a3:bd:
2f:a2:95:3d:12:53:8a:01:fb:b8:f7:99:9e:4f:63:
98:0b:e2:f0:a8:58:81:d4:e0:80:df:64:f2:73:62:
63:99:7a:76:26:ea:56:c1:8d:18:e3:07:32:c4:3f:
66:0f:4a:f5:aa:0d:46:5c:e6:bb:68:e0:59:35:a2:
b1:0a:8e:86:c5:59:98:74:12:67:63:7a:76:4c:b0:
ff:65:f4:46:8c:90:11:34:29:2b:21:55:11:86:fe:
de:73:42:99:02:ee:44:e8:47:85:e7:d4:24:87:72:
a7:26:8e:d7:ae:c7:bb:03:b9:99:4c:ac:33:3f:09:
c4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7B:8E:20:9B:D7:40:27:49:0C:70:B6:71:85:F2:9A:58:7A:16:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/398B620E3CD211F18D4C01E8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.109.0-154.93.111.255
154.93.114.0-154.93.122.255
154.93.124.0/23
Signature Algorithm: sha256WithRSAEncryption
51:52:60:55:f3:46:76:37:46:da:87:77:ba:bf:76:39:72:6d:
b1:9a:0d:ee:8d:02:d4:6f:75:e2:4b:79:dd:66:69:25:0a:3b:
fc:e1:d4:6a:fd:77:54:f3:ba:b9:cd:2d:24:6c:40:a7:cc:5a:
f3:eb:13:17:54:0a:0e:b2:3e:ff:e3:4f:59:a3:2b:b4:94:56:
87:d0:d2:42:96:da:7c:26:e4:a9:7c:ee:fd:42:cc:88:d1:c2:
ec:8e:3c:e3:63:4c:47:1b:05:77:5f:38:59:7a:7c:58:ba:cf:
09:61:b8:7c:f6:a0:e6:06:22:88:e2:a1:f7:89:18:b3:54:1e:
2d:b1:6d:7e:10:9a:d9:67:e0:c9:c4:3c:55:f3:2a:f5:ab:20:
67:81:64:44:fd:74:83:fc:5a:c8:68:10:ca:6e:60:cc:65:9a:
20:1d:ed:89:15:ab:a9:f8:4a:fb:77:6e:8e:a3:1e:bf:b1:9a:
d1:19:4f:1a:4d:01:52:64:61:b4:96:fd:cd:f5:0a:ce:1c:0a:
90:bc:30:86:52:58:5a:f3:b4:76:60:b4:80:fb:cb:9d:5a:4a:
2f:5a:a6:53:43:67:d4:3a:0c:68:a5:68:bb:6f:3d:48:96:7a:
0a:30:f0:d5:9b:42:a5:0b:6f:dc:89:4d:8b:34:69:46:ff:03:
22:8f:bb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:56:54 2026 by rpki-client