Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/123F2654376E11F18B4DD0F0CE1D38B0.roa
File: 123F2654376E11F18B4DD0F0CE1D38B0.roa (raw, json)
Hash identifier: 0Nn+yS/LmKi3Pd4V222h3fb13C2dtBdtmQbpn0UBRP4=
Subject key identifier: 0A:56:12:B7:8F:1F:14:04:15:1F:8E:D1:64:A5:25:47:A0:8C:46:7C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C520
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/123F2654376E11F18B4DD0F0CE1D38B0.roa
Signing time: Mon 13 Apr 2026 19:22:12 +0000
ROA not before: Mon 13 Apr 2026 19:22:07 +0000
ROA not after: Wed 13 May 2026 19:22:07 +0000
asID: 17497
IP address blocks: 154.217.232.0/23 maxlen: 24
154.217.232.0/24 maxlen: 24
154.217.233.0/24 maxlen: 24
154.222.128.0/24 maxlen: 24
154.222.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116000 (0x1c520)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 13 19:22:07 2026 GMT
Not After : May 13 19:22:07 2026 GMT
Subject: CN=69dd4264-2c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3d:54:95:28:cd:fd:ac:b1:9d:a1:57:82:a3:
22:bc:75:ae:f6:5e:a2:8a:fe:b7:9d:98:48:e4:1f:
a4:f1:eb:9c:a7:69:13:cf:bc:7c:89:9c:c4:5b:f4:
1b:2c:c9:10:38:ff:cd:e4:02:91:c6:7d:8e:f8:4a:
8a:51:5c:4e:45:1f:a6:33:f4:2f:65:e1:3d:d4:a6:
e3:9a:07:7c:0a:6d:09:95:48:9b:be:c9:7d:3a:92:
3c:b9:fd:9b:be:fa:c1:0a:b0:4d:c2:68:42:7b:2e:
00:e2:cf:11:98:11:b7:56:34:e4:a5:de:30:db:b1:
f5:57:a5:e0:a1:2a:c2:40:c4:ee:dd:b0:ab:c8:b7:
d3:59:06:1e:29:cf:e0:73:61:53:0f:88:3e:24:b4:
ff:6d:b2:26:79:1e:a3:0f:7a:7f:25:72:ee:da:8b:
e7:40:3b:5c:ba:46:ee:26:8e:95:40:b4:07:f9:db:
4c:0d:e2:fb:0d:92:7d:93:2d:02:f3:13:b2:f9:e8:
5f:c1:68:d6:7c:a1:ca:81:55:44:26:cd:23:6d:6a:
52:06:93:78:75:6a:be:3d:f8:e2:bb:ee:d5:65:92:
72:f9:d3:43:53:ea:cd:70:a4:1f:a9:f9:8f:57:21:
76:fb:89:d6:5e:a1:67:8f:2b:ae:b5:4a:6a:5e:26:
de:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:56:12:B7:8F:1F:14:04:15:1F:8E:D1:64:A5:25:47:A0:8C:46:7C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/123F2654376E11F18B4DD0F0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.232.0/23
154.222.128.0/24
154.222.140.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:08:c5:ec:d6:ac:58:f4:56:d6:aa:45:3d:8d:a3:c7:18:7d:
2a:46:52:27:2b:e4:83:b8:63:27:5a:eb:46:3b:e4:67:89:bd:
ee:b4:c4:60:92:35:b3:90:f8:ef:19:f4:a1:fd:bd:9e:48:95:
33:b3:ce:b0:52:9e:17:2c:fa:8f:6a:29:9b:7a:f6:15:ba:67:
f1:87:38:8b:08:4c:81:c5:bc:dd:13:f9:09:bd:98:a7:78:d4:
33:8d:18:66:40:ee:ba:f4:0e:08:8b:58:d0:ed:d4:e1:f4:e8:
e9:27:b1:9b:e4:74:fe:bd:81:b9:67:b3:aa:65:6c:ea:d2:2a:
9f:3c:96:05:e3:b5:ce:27:bf:9f:9e:1a:75:d4:2f:95:1a:68:
f4:00:a4:dd:fa:7c:ff:25:f2:c9:bb:ec:24:dd:68:5e:e5:a7:
57:32:3c:4b:05:a0:df:cc:9c:e0:64:66:bd:b2:72:61:ee:dc:
9a:f2:de:49:ba:4f:b0:9a:ef:2e:17:92:66:d6:d0:17:06:c1:
6b:81:89:82:72:e1:20:56:81:f6:1b:61:f0:d7:6d:58:cc:f1:
3f:bb:9e:fa:af:aa:8f:9c:12:4c:36:ff:b7:33:a1:b5:b0:21:
0c:8a:13:9a:da:57:c7:05:02:0e:db:ba:62:82:e2:d6:ef:37:
ed:0a:c1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:25:29 2026 by rpki-client