Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1566FC60397311F1B92FAAD2CE1D38B0.roa
File: 1566FC60397311F1B92FAAD2CE1D38B0.roa (raw, json)
Hash identifier: T6WGs94vR9viw3pc2B0XaaiO27kt28pHjbTnWCMKpok=
Subject key identifier: A9:46:70:C1:05:3E:43:32:64:38:B0:9D:77:C6:18:5F:8A:4E:9C:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C58B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1566FC60397311F1B92FAAD2CE1D38B0.roa
Signing time: Thu 16 Apr 2026 09:03:07 +0000
ROA not before: Thu 16 Apr 2026 09:03:03 +0000
ROA not after: Wed 29 Apr 2026 09:03:03 +0000
asID: 63099
IP address blocks: 154.222.84.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116107 (0x1c58b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 09:03:03 2026 GMT
Not After : Apr 29 09:03:03 2026 GMT
Subject: CN=69e0a5cb-1f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:65:6a:03:f0:a3:81:e0:09:09:98:29:f5:18:
37:e6:80:4c:aa:f3:13:c8:2e:78:d4:9f:a1:f2:ec:
07:86:49:1b:34:a3:c7:98:ad:d3:f7:bf:8e:0e:d4:
7f:16:63:80:b6:69:a3:21:5e:10:6b:f3:1b:8a:0a:
c4:ed:ec:d2:ae:2c:cf:58:c7:c7:5b:13:37:b3:13:
1b:72:1e:90:23:47:55:37:92:71:41:73:36:0d:0c:
91:09:cd:73:b6:80:d1:80:6a:0b:5d:01:3c:76:98:
11:30:98:cc:bd:ef:2a:ac:9f:59:4c:95:75:eb:5c:
78:3e:7f:88:83:cf:85:2f:e6:43:15:4e:7f:78:ea:
dc:db:94:a8:af:cc:34:48:9a:b8:16:8e:5c:0b:8a:
f5:65:b2:7e:9b:c2:e1:4e:a0:f9:75:ce:e8:9f:c2:
18:3a:06:df:7a:ee:d5:48:79:dd:13:9a:67:04:90:
a2:d3:2e:78:71:03:8b:96:f8:8e:1a:11:9a:af:a8:
80:1f:24:13:df:71:e7:f9:65:3f:7c:eb:50:4b:c1:
2b:88:24:0f:23:9c:15:ea:6d:1b:4f:4d:96:a8:c3:
0d:ce:17:c4:b2:de:f0:44:66:52:39:1a:b6:14:90:
63:97:58:5e:63:a2:55:65:30:2e:bf:6f:99:78:1d:
e9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:46:70:C1:05:3E:43:32:64:38:B0:9D:77:C6:18:5F:8A:4E:9C:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1566FC60397311F1B92FAAD2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.84.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:08:cd:f0:5f:9b:3f:f1:9b:1e:61:d5:52:7b:b0:13:ac:b2:
64:8c:c9:a3:6a:90:02:cd:97:54:da:82:05:7e:0a:fc:b6:aa:
4b:c5:d4:9f:3d:49:77:03:cc:41:f8:57:f9:39:01:d0:db:f6:
20:07:b7:07:e1:93:1e:96:ee:96:73:ee:de:59:08:c0:fb:05:
8b:ae:10:49:96:a8:9a:df:4c:2a:9b:99:6a:ba:1d:3d:2e:bc:
80:04:26:2e:67:61:d0:e6:2f:0b:47:cd:d8:04:1a:54:29:1d:
d1:78:c4:15:2d:83:79:62:d9:4b:43:00:f2:37:47:01:89:28:
3a:68:59:10:8f:4a:d5:10:84:1a:60:11:57:aa:40:59:fc:c4:
bd:42:07:43:c8:3f:80:ae:24:ba:ee:47:a6:1c:6d:a5:c2:a9:
30:ff:8b:16:62:47:84:fb:30:dc:c3:ab:a3:fd:5a:ee:73:b2:
0a:79:e3:c3:56:e5:a2:1a:b0:c9:67:c9:7b:ec:ec:1c:28:2f:
91:84:17:13:9e:b5:35:c3:7e:5f:b6:93:00:ca:c7:b2:ae:0c:
a1:3b:05:a3:9d:26:d8:1f:2e:ce:06:93:ef:8d:d8:db:f0:a7:
36:1f:2a:eb:2a:19:a0:3d:50:90:19:b2:79:f3:02:41:5d:e4:
40:57:3a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:14:45 2026 by rpki-client