Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EF36EDC2EE011F18D6B8FCDDAE4EC9C.roa
File: 1EF36EDC2EE011F18D6B8FCDDAE4EC9C.roa (raw, json)
Hash identifier: Z7AXtXOOaRUAZrpEh2DFVvBSicDznRxbxiBrS0qwkrU=
Subject key identifier: 8F:52:5D:69:06:46:49:ED:3C:F8:63:31:69:52:F1:6D:5B:C8:C7:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C28D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EF36EDC2EE011F18D6B8FCDDAE4EC9C.roa
Signing time: Thu 02 Apr 2026 22:05:56 +0000
ROA not before: Fri 03 Apr 2026 22:05:50 +0000
ROA not after: Tue 12 May 2026 22:05:50 +0000
asID: 212042
IP address blocks: 154.83.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115341 (0x1c28d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 3 22:05:50 2026 GMT
Not After : May 12 22:05:50 2026 GMT
Subject: CN=69cee843-bb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2e:d7:30:8e:c1:eb:50:8d:93:11:f3:0b:50:
01:2b:12:85:83:71:57:70:3f:2a:9f:6c:ba:fd:cd:
4c:f9:cf:f1:23:59:6b:a9:52:c6:14:06:73:6f:c8:
f4:5c:c2:3e:49:b5:3a:06:cb:c4:6a:24:61:81:8f:
15:42:ff:b3:79:a1:11:77:a9:df:fa:d7:d0:34:e9:
4c:bc:cc:4e:72:57:35:a0:6b:ee:03:19:54:8b:b5:
41:31:7a:59:e5:2a:1f:ae:73:b7:f2:b3:ea:96:04:
f9:bf:85:8e:bf:94:f4:a3:ae:71:e4:3e:58:6b:5d:
d8:b9:6c:f5:32:49:7e:40:aa:48:e2:f1:74:70:fc:
88:e9:da:f1:fe:49:e3:ec:52:35:56:d3:be:65:cb:
c7:2a:41:6b:58:02:17:a5:d2:c2:27:1b:1c:0b:7f:
01:97:d0:86:4f:b1:b3:55:8c:6b:ba:1b:2f:1f:f1:
95:a8:f3:8a:d1:9b:d7:d8:75:7a:f1:99:14:53:55:
b8:ff:cc:1c:20:14:8a:00:74:d7:23:4c:f7:5b:75:
e3:3f:12:a8:48:8e:d0:df:90:49:42:30:20:9d:31:
f6:d0:09:3f:01:80:87:68:69:f6:7b:59:5d:09:4c:
8a:1e:f0:11:fc:64:79:eb:8b:e0:fd:a7:2b:70:81:
7e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:52:5D:69:06:46:49:ED:3C:F8:63:31:69:52:F1:6D:5B:C8:C7:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EF36EDC2EE011F18D6B8FCDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.136.0/24
Signature Algorithm: sha256WithRSAEncryption
57:50:c9:a1:f2:ca:03:85:4b:d7:41:be:d6:d6:48:c4:9f:b1:
83:e1:8d:e4:9b:ba:64:31:84:9b:b7:ab:c8:7e:19:b4:a8:43:
4d:32:1c:9f:a9:65:0c:56:db:e6:17:70:af:37:2d:f0:f1:5b:
6a:96:bf:22:76:61:9d:22:8d:25:d2:b1:2e:93:cc:5d:5f:3c:
0a:32:60:09:8f:dc:90:7e:d1:38:22:c4:26:69:08:75:08:85:
4f:fa:14:bb:88:91:4b:88:f6:6f:be:e4:5b:ca:d8:6b:de:41:
6a:01:2d:6f:73:d1:f7:09:84:e9:2e:18:33:5b:16:04:ff:a6:
05:b8:0c:87:d8:25:32:30:67:d9:06:99:5b:25:13:02:b0:f7:
bb:f2:ee:12:69:35:16:2f:d8:36:17:e7:54:ca:ed:a6:a4:8b:
01:10:76:fc:e8:c8:96:06:20:ef:43:61:e3:0d:ba:cf:94:8c:
d6:c0:bb:de:97:06:b3:71:6b:4a:c1:7f:df:49:18:bb:7f:19:
11:97:44:12:4d:21:3f:4a:36:3d:21:9b:b0:a2:4f:0b:df:3d:
b7:55:3b:26:96:25:a5:c0:97:65:77:97:b4:da:a9:58:83:93:
1d:01:27:9e:38:9d:05:b4:ec:d3:3a:07:e5:fc:52:f7:1c:88:
e2:2a:e0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:01:52 2026 by rpki-client