Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/678FAB464C5011F1BE13ECEECE1D38B0.roa
File: 678FAB464C5011F1BE13ECEECE1D38B0.roa (raw, json)
Hash identifier: xw3Fo9ttkBGpwVu91p0zh0m44xbOOSi9BHmGrZAd6nA=
Subject key identifier: A2:5C:1B:ED:14:46:88:0D:D2:81:A6:B0:5F:14:76:BA:56:8D:0A:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CAAF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/678FAB464C5011F1BE13ECEECE1D38B0.roa
Signing time: Sun 10 May 2026 09:12:45 +0000
ROA not before: Sun 10 May 2026 09:12:40 +0000
ROA not after: Wed 10 Jun 2026 09:12:40 +0000
asID: 139646
IP address blocks: 154.204.0.0/24 maxlen: 24
154.208.12.0/22 maxlen: 24
154.208.16.0/20 maxlen: 24
154.212.128.0/24 maxlen: 24
154.215.0.0/24 maxlen: 24
154.218.0.0/24 maxlen: 24
154.221.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 05:45:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117423 (0x1caaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 10 09:12:40 2026 GMT
Not After : Jun 10 09:12:40 2026 GMT
Subject: CN=6a004c0d-453b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cd:2f:f0:0e:9d:a8:0d:31:8f:f5:a5:93:5c:
fe:44:68:1f:de:2e:3e:23:17:80:35:91:97:8b:4c:
2e:a9:53:4d:c8:11:55:63:6e:7e:3f:37:23:92:57:
6f:8a:5c:6c:f2:b2:a2:61:b9:21:63:e2:1d:24:84:
05:bb:a0:0f:5b:e4:11:7e:a7:a9:ca:a2:dd:46:a7:
fd:f3:15:ca:d5:c9:d3:99:3d:c1:83:ff:c3:04:1c:
85:70:5d:04:90:ad:c5:8a:66:06:7f:46:26:5e:1d:
a2:4f:06:79:c7:29:88:16:1f:d4:d1:ae:9b:34:5b:
0a:a8:3c:a6:34:ae:dc:f0:7f:f3:8e:4e:5d:8e:25:
44:d0:df:ee:b6:e2:e6:cf:e9:3b:8d:b3:85:f5:48:
84:d7:65:01:c6:4c:a0:92:c4:22:d3:fb:3b:99:ea:
b0:3b:38:98:e9:89:c9:18:ad:6b:2a:5c:be:ec:e8:
24:5d:01:79:bf:33:bc:1b:d0:b1:1f:28:22:1b:f1:
3d:11:a7:05:3c:78:9a:f9:89:83:d0:17:60:d5:0d:
e2:d1:58:6b:05:b8:4d:65:2f:c1:f3:17:08:e5:c1:
7a:2d:00:70:37:40:94:2c:22:94:1d:c9:41:f5:63:
4e:ee:3e:9a:83:09:bb:bb:04:80:e0:44:97:9f:fe:
fa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5C:1B:ED:14:46:88:0D:D2:81:A6:B0:5F:14:76:BA:56:8D:0A:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/678FAB464C5011F1BE13ECEECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.0.0/24
154.208.12.0-154.208.31.255
154.212.128.0/24
154.215.0.0/24
154.218.0.0/24
154.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:5d:3b:07:cc:1f:9a:d9:a4:38:b1:48:1c:1f:4d:12:fb:92:
5c:9e:78:a8:74:9a:74:f0:3a:06:71:13:a4:7b:45:e2:63:df:
ea:87:52:53:91:c2:ca:6d:a9:5a:32:6f:02:53:65:08:a4:d9:
4c:ab:4d:bf:1a:36:17:67:4f:dc:9b:76:4f:13:2c:eb:c3:e7:
4a:da:05:a2:a6:35:32:a5:46:38:ea:18:44:13:6f:99:d2:e6:
ab:78:ec:cb:f3:1c:c0:3d:c5:d8:55:3f:f5:49:5f:40:95:5a:
93:70:e0:b1:d6:b7:66:35:e9:38:0a:66:4a:be:4a:79:03:01:
ef:a1:95:94:a9:07:80:35:25:83:ef:ff:22:f7:ec:b2:e6:e0:
12:bf:c8:85:33:1e:59:05:40:31:d1:33:61:bf:94:06:aa:a5:
fb:23:b6:65:95:1c:63:ba:6f:2c:25:82:c6:2d:36:38:88:0f:
0e:54:0b:e1:98:ff:77:0a:4c:82:1a:0e:bc:f6:38:b9:42:e5:
4a:d0:cd:fa:a5:2a:f2:27:c3:f9:8c:72:e7:f1:ad:76:b6:16:
e8:3f:a8:a2:fc:cb:f0:7e:4c:78:ca:90:f1:d0:19:90:90:10:
95:c5:be:94:6b:57:00:50:6a:dc:50:c1:3d:fb:3e:b1:ef:fd:
26:3d:dc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:20:33 2026 by rpki-client