Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CE1FD2438A511F18FEE95EBCE1D38B0.roa
File: 1CE1FD2438A511F18FEE95EBCE1D38B0.roa (raw, json)
Hash identifier: 8BAQl5zb1EQpt55MBokhTnkjF6kl1ApXOK1HbJOVpp4=
Subject key identifier: 7F:AE:2B:9D:51:14:83:CD:9C:64:DE:FF:8F:97:CB:90:13:F7:0C:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C54E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CE1FD2438A511F18FEE95EBCE1D38B0.roa
Signing time: Wed 15 Apr 2026 08:28:43 +0000
ROA not before: Wed 15 Apr 2026 08:28:39 +0000
ROA not after: Wed 06 May 2026 08:28:39 +0000
asID: 273937
IP address blocks: 154.88.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 15:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116046 (0x1c54e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 08:28:39 2026 GMT
Not After : May 6 08:28:39 2026 GMT
Subject: CN=69df4c3b-6212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:51:24:27:a7:10:52:34:5b:d1:b7:9b:e2:6a:
88:9b:3d:8e:6d:13:aa:6f:ce:49:bd:aa:9d:ae:2b:
ec:27:d0:4a:4f:1e:47:99:8b:8c:38:33:7b:7f:b0:
94:c7:7d:50:0a:d0:43:96:14:5d:1a:9e:77:0d:73:
82:24:59:81:ba:d5:a7:a8:fa:64:88:49:29:19:e7:
f4:ea:aa:f1:60:bf:b7:2f:36:94:e6:17:9f:6c:88:
a4:87:57:9f:c6:a1:20:a2:e2:f4:ed:13:76:90:3e:
59:16:b1:3a:81:e9:e4:39:85:60:28:c9:31:53:ed:
2c:14:a2:6d:44:24:c1:88:b9:78:85:0c:f5:8a:ed:
1e:86:63:a0:57:bb:5f:87:6a:92:92:da:b0:12:64:
77:13:46:fd:fd:b6:74:5d:41:91:7b:31:0f:be:31:
25:23:7e:9a:bd:1f:61:f3:50:55:27:d2:ca:52:4c:
2f:f0:38:bb:b2:a6:ec:08:1a:19:dc:02:4e:28:e5:
00:87:71:22:26:a1:b6:b3:b4:bd:1f:d1:cb:ad:e6:
a4:4e:63:74:72:e9:37:4f:0e:04:9d:58:a8:c1:0d:
ed:82:17:5e:5c:a8:38:1e:d1:8b:24:dd:e1:a1:5f:
f4:da:3e:42:ab:4b:ae:a8:73:b5:69:8f:c6:97:8f:
11:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AE:2B:9D:51:14:83:CD:9C:64:DE:FF:8F:97:CB:90:13:F7:0C:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CE1FD2438A511F18FEE95EBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.186.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:23:f0:3a:6b:ee:0c:cb:96:d7:3d:f0:6b:71:1e:69:1b:b3:
2d:07:e0:eb:a1:b9:ee:94:eb:1a:00:7d:96:ed:3c:b1:ba:ea:
5f:da:54:f6:a4:52:95:48:ef:93:d0:59:80:a6:30:b4:ea:d4:
3e:5f:1a:2d:c7:85:df:b9:51:a0:c1:6e:72:e2:0a:c6:c9:ff:
58:a8:9a:89:b2:2c:5f:b4:0b:df:60:7b:9b:d9:76:63:ca:0c:
09:37:92:45:de:15:ec:ac:86:d0:ad:a9:e8:ef:12:0e:3c:48:
ce:13:82:63:ad:d5:53:8f:01:35:20:4d:99:b6:cf:ea:8f:39:
e1:3a:db:dd:b3:cd:53:21:8d:68:48:0a:82:43:b8:5e:5c:d8:
73:ed:4d:95:ec:68:86:be:d3:a8:de:fa:df:86:04:0f:ff:e7:
c4:2d:0b:55:34:8c:7f:c8:28:ff:a2:9d:00:d2:68:18:7a:08:
b3:9e:45:62:df:a4:ec:08:11:cd:c5:8f:b1:cf:0d:82:98:76:
46:87:22:c0:c1:4f:d1:d1:60:a5:dc:7e:c3:70:c6:fc:78:24:
e3:e4:40:fd:fa:f5:f1:90:97:f2:96:59:ac:14:84:97:01:3b:
14:a3:1e:e4:84:a7:0e:26:9c:2d:2d:5d:13:87:af:e5:2f:de:
31:29:f6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:49:58 2026 by rpki-client