Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10578F082AA211F1894AFADCDAE4EC9C.roa
File: 10578F082AA211F1894AFADCDAE4EC9C.roa (raw, json)
Hash identifier: 1Cb/IsX/wteA3bs1n9zAPkjVU/qQc0ZKLutdbv9ykdk=
Subject key identifier: DC:6B:35:3B:EF:C1:33:DD:5D:81:69:E1:48:2F:53:43:F9:9C:0F:BA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C15E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10578F082AA211F1894AFADCDAE4EC9C.roa
Signing time: Sat 28 Mar 2026 12:31:38 +0000
ROA not before: Sat 28 Mar 2026 12:31:33 +0000
ROA not after: Sat 16 May 2026 12:31:33 +0000
asID: 401701
IP address blocks: 154.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115038 (0x1c15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 28 12:31:33 2026 GMT
Not After : May 16 12:31:33 2026 GMT
Subject: CN=69c7ca2a-9fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e9:a3:aa:47:a6:84:26:08:30:04:25:eb:3b:
ce:40:d6:e3:fe:a7:62:89:8a:a7:1c:fe:9b:46:a6:
e5:82:3e:35:87:64:a1:82:8b:dd:ab:2c:bd:99:57:
74:e7:07:4a:e0:21:e3:3e:7c:0b:9a:7f:94:d6:da:
18:94:28:fe:e0:fd:a4:e9:c6:48:0c:a9:b1:5e:d5:
96:c3:22:e7:88:af:0d:f7:3d:c2:57:0c:6d:a9:fc:
d8:71:78:cb:9c:60:dd:80:90:2a:ce:78:2a:6b:73:
a7:0c:c4:87:99:87:5f:47:f8:12:91:7a:9d:f7:49:
d5:be:da:29:d8:87:65:06:fb:7e:ca:67:12:9e:c5:
bb:bf:22:29:94:2b:9b:cf:11:20:b9:8e:c0:71:fe:
5e:e1:af:1a:20:23:c8:fe:5a:0e:e7:40:d5:d1:d5:
f0:c5:84:e0:ce:48:a9:b8:32:46:5b:9e:9b:35:a2:
ca:b8:89:56:7a:23:9b:f4:58:87:9e:5c:0a:03:b1:
31:bf:e3:b0:85:89:6f:52:c8:e4:72:a0:13:73:69:
a1:c9:a4:32:c1:39:2f:42:79:de:2f:61:c2:80:92:
dc:fe:fb:6f:b1:fa:ca:9d:57:65:a0:fc:df:fc:a1:
bd:c6:5c:bc:59:7d:4c:a3:7d:7d:36:fb:f1:c3:c6:
5d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6B:35:3B:EF:C1:33:DD:5D:81:69:E1:48:2F:53:43:F9:9C:0F:BA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10578F082AA211F1894AFADCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
c7:e6:64:99:c6:88:45:56:91:53:7e:d0:2a:59:2c:85:50:eb:
68:c0:d2:0e:92:83:fa:ef:8a:d5:e3:7d:dc:05:4b:0c:57:b8:
80:66:5e:de:c7:40:cc:bc:a6:39:fd:ee:4f:64:a0:2f:8f:59:
ec:0b:b1:35:21:e8:12:f2:13:d8:51:a9:93:da:d8:01:ee:f2:
a5:44:81:93:de:b8:7d:8e:9f:99:a5:7c:16:47:4b:77:be:8d:
43:8d:db:67:88:59:83:d0:a3:98:79:23:dd:7e:5d:57:4c:f6:
dc:85:52:11:9d:36:f6:09:6f:ba:16:e3:dd:11:53:c1:bd:61:
70:a3:19:cd:27:d0:ff:96:b5:3d:21:4e:78:ec:86:df:0b:26:
a6:cb:59:b2:c9:d5:d9:9a:c1:37:ec:9b:4f:64:49:61:c5:42:
88:3d:60:de:4f:24:41:4d:15:d7:45:c4:b5:fc:83:fe:31:39:
c0:cb:41:51:4d:21:24:25:00:38:1a:e7:6b:ab:d3:d5:89:b5:
8a:c2:2f:13:f6:de:a3:f5:32:94:5e:e0:a0:4b:01:29:08:fd:
ab:ff:70:ee:d4:51:d2:a7:ab:cf:0e:55:25:5b:58:95:c3:76:
64:13:5c:31:99:e1:6f:38:ef:85:b7:4f:dc:12:68:c7:b3:ca:
e4:5a:1e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:23:54 2026 by rpki-client