Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09D69CE830A411F18317F890DAE4EC9C.roa
File: 09D69CE830A411F18317F890DAE4EC9C.roa (raw, json)
Hash identifier: NfFVwksbfAh0eYViX7hIhXYmxbDOQ58art4xBAGsFWg=
Subject key identifier: 52:17:75:94:85:73:72:33:96:D6:0F:DE:44:46:B5:E1:52:A0:3F:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C2D8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09D69CE830A411F18317F890DAE4EC9C.roa
Signing time: Sun 05 Apr 2026 04:00:55 +0000
ROA not before: Sun 05 Apr 2026 04:00:40 +0000
ROA not after: Fri 08 May 2026 04:00:40 +0000
asID: 45194
IP address blocks: 154.84.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115416 (0x1c2d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 5 04:00:40 2026 GMT
Not After : May 8 04:00:40 2026 GMT
Subject: CN=69d1de77-bdde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b1:81:43:5f:cd:9c:21:a5:10:54:1a:20:10:
52:11:8c:d2:c9:3c:df:17:24:ad:0a:37:a0:b2:5d:
71:b6:94:5f:6b:13:37:b3:a5:26:ab:f0:c8:83:bf:
d8:59:2d:1a:b7:46:55:56:16:db:90:3d:3c:f1:05:
b7:1d:ec:8f:67:e7:71:49:3f:1f:1d:ee:70:6d:3d:
44:34:a6:f6:fd:76:39:49:0d:f8:d7:80:01:97:b3:
d4:79:ba:e8:e7:26:63:37:91:00:23:31:be:86:25:
fb:09:1e:3b:64:8b:39:e7:1a:2c:24:2d:be:cf:85:
06:3a:c3:cd:25:63:e3:67:28:ed:47:30:cf:49:d9:
6a:6b:42:4a:66:41:1c:c9:49:34:74:21:a0:96:f9:
4e:27:02:92:d9:f9:fa:a3:52:6a:7c:09:dd:60:2d:
c9:41:8d:77:7e:7d:69:d8:a3:62:0c:7c:ca:b9:c5:
98:38:2d:ab:25:51:1d:5e:c4:14:9a:93:e0:1d:4e:
b1:d9:46:a0:cc:fc:23:b1:b0:ec:40:70:a6:58:51:
a3:fe:b2:d3:55:20:8d:36:a7:10:d6:a9:1f:2e:ac:
64:04:02:33:03:33:a4:da:be:79:f9:2d:61:62:d1:
96:1d:5b:ec:1b:ff:5d:5e:e9:1c:19:fa:a1:9b:fe:
6d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:17:75:94:85:73:72:33:96:D6:0F:DE:44:46:B5:E1:52:A0:3F:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09D69CE830A411F18317F890DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.213.0/24
Signature Algorithm: sha256WithRSAEncryption
24:e4:ba:01:0a:45:b6:04:be:06:cf:df:0b:5a:0b:4c:59:88:
1f:f9:85:94:f3:34:79:cb:ce:cf:0f:d8:14:c9:d1:d9:99:81:
4e:64:2a:e9:72:34:63:70:a3:f6:55:6b:0f:95:d9:85:93:98:
a4:e7:35:12:a1:a1:07:22:5d:b6:fb:9d:03:10:16:fb:09:f0:
f3:1c:d3:69:8b:86:79:1e:21:f5:a3:dd:a3:cb:b1:bd:31:26:
19:98:c4:82:a2:7b:d4:8b:18:5f:13:2b:25:3d:f4:93:5a:cc:
00:ce:80:b7:31:9e:28:27:33:f7:c6:8b:63:ed:55:68:7e:ea:
dd:a4:fd:a7:24:6e:28:63:89:dc:63:4b:77:d6:c8:30:5a:00:
a3:41:0f:c7:39:f7:d7:af:f0:cd:db:f2:0a:24:99:6f:0e:f5:
95:49:be:78:16:b9:2a:fa:89:e1:4f:4e:ff:38:5f:0c:60:9c:
82:12:4a:19:54:a1:39:ea:ea:a7:fb:38:bd:db:bd:0e:41:5e:
8d:9e:5b:ee:a1:9e:f3:92:0b:46:de:bc:a8:2a:36:d8:47:3e:
7c:22:01:2f:67:0b:44:87:30:7c:c7:37:a6:67:45:b8:86:8f:
ea:6c:ab:13:7e:f5:0a:cd:3b:26:6e:16:42:d4:c6:cd:49:6c:
00:16:7b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:58:38 2026 by rpki-client