Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24827B3C2CCD11F1B961CFC7DAE4EC9C.roa
File: 24827B3C2CCD11F1B961CFC7DAE4EC9C.roa (raw, json)
Hash identifier: Tk40YNMBT/hEtmcbEdxeQtEkjOzHPwxsc95I5tixaCc=
Subject key identifier: 8C:88:B3:C4:F4:40:34:19:42:C8:D3:D9:29:9C:6D:31:50:9D:F6:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C1CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24827B3C2CCD11F1B961CFC7DAE4EC9C.roa
Signing time: Tue 31 Mar 2026 06:45:02 +0000
ROA not before: Tue 31 Mar 2026 06:44:57 +0000
ROA not after: Wed 07 Apr 2027 06:44:57 +0000
asID: 13335
IP address blocks: 154.81.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115150 (0x1c1ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 31 06:44:57 2026 GMT
Not After : Apr 7 06:44:57 2027 GMT
Subject: CN=69cb6d6e-b501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:03:33:24:6c:43:7b:77:78:86:87:82:01:74:
21:dc:12:92:8e:12:c3:86:46:8e:c4:01:35:44:d4:
25:22:56:58:d8:ca:05:5f:41:fe:a6:98:62:a3:18:
f3:b1:30:25:27:81:88:98:94:af:bb:ed:ed:20:81:
3a:09:10:e6:27:ed:5f:f3:85:85:d5:be:3c:31:5b:
69:c3:09:c2:20:27:9d:9f:9a:c0:2c:4d:64:03:f6:
2d:15:27:4b:dd:ee:0d:e4:5c:63:5b:f5:e5:a3:7b:
cd:f5:15:41:6c:7f:a5:15:24:c0:14:29:fc:43:26:
01:b7:bd:65:d6:78:c4:cc:b3:7e:0f:37:68:fe:b2:
22:87:f7:89:9f:a0:ef:f1:8b:ae:e8:6c:bb:1a:23:
dd:5c:83:ce:d6:cc:a5:87:01:92:f0:4f:1f:be:2c:
97:2d:0e:b3:ca:8d:26:71:55:36:a1:1b:5e:b4:79:
ca:0a:95:a3:83:55:02:f8:97:07:82:17:ae:19:0e:
3a:cd:68:5a:2e:17:0e:f2:14:2b:09:2e:2c:7d:bd:
1b:5f:2d:1d:6f:49:f6:29:94:b6:81:b3:8b:16:2f:
70:2b:73:f2:06:62:5e:fc:43:f9:85:47:16:a3:83:
97:d4:11:d7:96:2e:69:bb:76:37:2c:75:37:54:a4:
39:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:88:B3:C4:F4:40:34:19:42:C8:D3:D9:29:9C:6D:31:50:9D:F6:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24827B3C2CCD11F1B961CFC7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.141.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:6e:c8:23:93:8d:ae:79:80:ad:6c:84:ba:0e:50:d3:5a:04:
58:82:c7:4c:0b:0d:f7:d5:42:17:46:b9:ce:f2:ba:e5:2e:b6:
87:c2:6a:0e:7f:da:f7:5f:5e:c4:f3:62:b0:10:1c:d0:0e:81:
4d:e4:59:70:f0:c5:e4:e4:ad:1c:66:67:4f:77:a0:ca:53:86:
96:71:4a:dc:2b:c5:57:15:31:2d:c2:08:c2:87:c4:93:c5:4c:
c3:2c:c7:f2:60:41:0c:65:c1:b1:25:71:4c:86:29:cd:c5:8e:
36:4b:29:9f:a6:53:4d:ee:02:54:71:57:bf:d6:40:ec:27:ca:
05:29:97:14:a6:7a:4c:db:ef:08:e7:44:ed:7a:fe:70:c3:cc:
b0:4d:00:e6:b5:db:82:df:0e:93:1f:e4:85:4b:45:61:94:ba:
a6:3d:bd:f5:8f:b5:fa:c7:34:c3:63:f6:f4:17:30:7f:4c:21:
f3:e8:83:f6:18:31:36:7a:2c:87:a3:b9:10:c3:b8:be:81:64:
21:2c:81:38:ec:9c:0d:e3:7a:67:58:ae:9e:23:da:56:1f:5e:
3d:ae:1d:38:db:28:05:ce:e1:17:bd:f4:91:0a:af:82:ca:75:
ec:91:4b:65:5e:54:be:aa:fb:c2:9f:1d:a6:b4:1d:65:f8:29:
a7:44:02:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:59:44 2026 by rpki-client