Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F41BCD7A4BA511F19993E3DFCE1D38B0.roa
File: F41BCD7A4BA511F19993E3DFCE1D38B0.roa (raw, json)
Hash identifier: L1M1p96IcaRiLcVjIw9N5yBh4socduCV9XbTwYzkZYo=
Subject key identifier: C1:14:11:05:D9:7D:C4:76:B3:D3:93:AE:33:B8:57:FA:D3:D4:CC:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CAA6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F41BCD7A4BA511F19993E3DFCE1D38B0.roa
Signing time: Sat 09 May 2026 12:52:37 +0000
ROA not before: Sat 09 May 2026 12:52:32 +0000
ROA not after: Mon 08 Jun 2026 12:52:32 +0000
asID: 151347
IP address blocks: 154.84.201.0/24 maxlen: 24
154.84.202.0/24 maxlen: 24
154.84.203.0/24 maxlen: 24
154.84.204.0/24 maxlen: 24
154.84.205.0/24 maxlen: 24
154.84.206.0/24 maxlen: 24
154.84.207.0/24 maxlen: 24
154.84.208.0/24 maxlen: 24
154.84.209.0/24 maxlen: 24
154.84.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117414 (0x1caa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 12:52:32 2026 GMT
Not After : Jun 8 12:52:32 2026 GMT
Subject: CN=69ff2e14-6250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d8:4d:bb:6a:34:a4:67:07:63:c1:18:7c:ed:
13:05:05:b9:bc:be:a5:d5:59:25:32:5f:f8:d7:af:
fd:15:de:79:01:ca:2e:37:ab:cd:95:93:28:70:e6:
05:eb:7a:dc:84:b8:c5:c8:fb:cf:de:51:4a:82:98:
7c:ad:13:24:77:57:1d:0f:7f:9f:58:40:23:80:90:
46:a9:17:d1:43:02:03:64:f2:3b:7b:7f:9e:78:20:
0c:91:9a:3f:3c:f3:e5:d7:68:76:f6:82:4c:d7:98:
d5:d0:df:d6:f8:7e:3c:7f:a1:75:0c:50:3d:84:ca:
85:3b:ed:28:50:6a:aa:9c:48:f6:5e:46:10:82:95:
01:92:af:7b:92:fe:59:a9:25:b9:16:bb:e4:49:e5:
f1:d0:b5:13:92:b8:10:03:90:45:7a:7b:0e:73:41:
90:26:bf:91:af:0c:5a:67:03:b4:c3:e2:ea:26:82:
e5:8c:2a:a7:aa:4c:b7:4f:8c:93:a0:b4:3e:98:a2:
1a:b1:ba:a9:f9:bb:18:ed:3f:cc:0d:1e:cc:64:f2:
10:61:a0:c9:9d:7e:33:97:e7:52:23:e3:e6:f4:0c:
c8:32:98:a7:48:bc:c2:82:3f:8e:7f:36:66:94:a9:
9e:f0:e0:0b:39:bf:3a:7d:32:5b:ee:81:e1:cb:dc:
07:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:14:11:05:D9:7D:C4:76:B3:D3:93:AE:33:B8:57:FA:D3:D4:CC:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F41BCD7A4BA511F19993E3DFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.201.0-154.84.210.255
Signature Algorithm: sha256WithRSAEncryption
b6:14:29:73:b5:84:e6:1d:fd:a3:48:92:90:17:26:6c:6e:34:
c3:98:7a:9e:5c:6c:fa:d5:77:e9:01:ae:7e:69:2a:27:bf:b7:
e8:2b:de:e0:05:43:6a:ee:65:2d:41:16:e8:86:c4:e5:cd:9f:
be:a4:aa:1c:10:89:87:0f:45:96:56:7e:4c:c2:e5:3a:43:6f:
3e:ac:ea:ee:71:da:bf:12:11:f5:d7:e8:80:c4:04:49:87:90:
f4:a9:52:7b:13:7b:85:25:12:f7:32:12:7d:a6:a3:04:9b:7c:
be:23:63:b5:fe:ba:69:12:d5:6d:b4:4a:7f:22:3e:72:14:76:
2c:fe:45:fc:b4:ac:b9:0b:21:ee:e5:67:54:6b:a8:36:ce:8c:
3b:22:e4:12:94:0d:86:ed:2f:11:c0:60:35:7b:a5:67:14:e9:
3f:7d:d0:1d:d0:73:1f:d5:f8:63:37:f8:de:43:5d:60:3d:cf:
18:5c:39:8d:82:51:cf:d7:a3:a4:3b:fd:13:86:33:4d:5f:7f:
49:d2:73:2c:54:98:de:7e:00:cc:5f:9a:d8:3e:02:fd:33:ad:
48:e8:bd:7c:4f:da:a9:92:11:38:ac:22:c5:53:2a:6d:19:71:
ec:8b:ab:da:f4:a8:a8:a3:d6:09:de:86:68:38:98:65:dc:e6:
5f:e5:df:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:35 2026 by rpki-client