Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24CC328E326511F18B7802CFDAE4EC9C.roa
File: 24CC328E326511F18B7802CFDAE4EC9C.roa (raw, json)
Hash identifier: HT1Ok0WJ6oBxegMBrCCLhMewxNXUBNP0G4TCtvSnUCA=
Subject key identifier: 26:13:B1:4A:A5:7B:81:26:67:30:DE:0D:9C:01:55:AE:FF:DD:9D:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C371
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24CC328E326511F18B7802CFDAE4EC9C.roa
Signing time: Tue 07 Apr 2026 09:35:42 +0000
ROA not before: Tue 07 Apr 2026 09:35:37 +0000
ROA not after: Sun 17 May 2026 09:35:37 +0000
asID: 209242
IP address blocks: 154.197.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115569 (0x1c371)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 7 09:35:37 2026 GMT
Not After : May 17 09:35:37 2026 GMT
Subject: CN=69d4cfee-5573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:42:31:50:d2:11:23:57:55:18:8e:e6:63:16:
cd:06:2e:a2:51:b1:f0:5a:2c:a0:ae:61:ce:5f:a3:
a1:13:8f:47:e1:13:26:db:4f:32:94:e2:a5:2c:92:
7f:45:d7:d7:7b:8b:ef:83:f1:c1:eb:4c:6f:b4:25:
2a:9a:e0:57:0e:2a:05:54:92:1a:d0:6b:0d:f6:e9:
bb:ec:5e:8e:b4:9d:2e:e4:de:f9:2f:1c:b1:c1:14:
15:6a:79:36:c0:d7:92:97:86:21:00:3e:54:0a:44:
4f:2f:36:b7:33:1d:0f:34:6b:61:c6:df:e6:50:0c:
88:61:e0:c0:af:f7:36:ac:fa:94:25:bb:a7:e5:90:
42:3f:35:f4:6d:c6:f9:79:97:fc:19:aa:01:b6:9e:
b5:95:a0:3f:41:35:6d:e3:37:5d:1c:53:51:8e:86:
14:8c:c4:54:fa:3b:7e:66:58:fb:67:1d:f8:2a:1e:
86:7e:4a:59:0b:be:b7:01:c2:0e:8c:a5:ea:40:e0:
5e:ff:30:64:33:5d:5b:fe:aa:f9:40:db:bf:90:2b:
a5:85:61:d4:36:b9:64:50:71:3c:3d:4c:68:e1:37:
ef:a9:05:aa:aa:84:6e:3d:8b:eb:a1:f0:d4:29:d0:
d6:1f:6e:d9:cd:75:06:18:ac:09:5b:72:9d:49:1c:
22:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:13:B1:4A:A5:7B:81:26:67:30:DE:0D:9C:01:55:AE:FF:DD:9D:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24CC328E326511F18B7802CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.75.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:09:e0:90:ef:9a:be:f9:d1:42:69:cf:d3:e6:52:50:4c:c1:
5f:e0:a4:53:6e:b4:d9:08:6c:d7:11:e3:ce:5e:01:41:c2:2e:
62:ce:d9:17:a4:0e:d1:c7:30:85:7b:31:73:a8:b5:52:92:bf:
c3:35:45:78:1b:f6:24:f8:08:85:78:dd:e2:8d:49:66:fd:df:
13:01:52:44:1c:3f:30:f2:17:31:07:15:38:ea:fe:ec:1d:7f:
b9:cd:49:f8:81:e2:68:97:35:73:42:8d:ee:d1:a3:9e:f1:30:
5d:86:b3:16:33:5f:b9:ec:ee:df:e3:cd:ad:b1:ca:66:66:18:
18:b0:70:68:58:b4:99:ec:80:26:bc:b3:f5:a4:00:99:cb:6a:
f9:d2:82:e3:1e:4d:eb:aa:e0:80:46:41:6a:6f:45:15:72:fc:
ed:28:26:c9:aa:f4:f8:7e:3e:38:00:ab:eb:9d:bb:06:8e:b5:
d6:e8:fe:24:42:26:82:e5:0c:fd:4f:dd:a2:6b:72:ba:68:77:
6a:a6:b5:46:91:57:7a:ce:12:8f:26:11:08:9b:a7:0d:b8:35:
e4:5d:3e:ac:e0:0d:69:61:dc:8b:a4:35:4d:0b:38:7d:3a:43:
bb:92:53:da:83:b8:2b:e4:80:04:bf:f7:0d:a8:26:3f:1f:4c:
e6:07:96:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:37:59 2026 by rpki-client