Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27981E4233C311F19510B9A7CE1D38B0.roa
File: 27981E4233C311F19510B9A7CE1D38B0.roa (raw, json)
Hash identifier: VcTEjKWvkgAJFM4U8hq3WkI6vgwC3XKBtbE3tB8jfJE=
Subject key identifier: 07:51:64:35:2C:52:0C:83:26:A6:DB:2F:4C:F9:D5:F0:AF:2B:D7:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C38B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27981E4233C311F19510B9A7CE1D38B0.roa
Signing time: Thu 09 Apr 2026 03:21:10 +0000
ROA not before: Thu 09 Apr 2026 03:21:05 +0000
ROA not after: Mon 18 May 2026 03:21:05 +0000
asID: 402169
IP address blocks: 154.91.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115595 (0x1c38b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 03:21:05 2026 GMT
Not After : May 18 03:21:05 2026 GMT
Subject: CN=69d71b26-c8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9c:41:ba:92:11:7d:bb:68:39:dc:d2:25:50:
d0:e3:d3:9d:bc:9a:73:87:a3:eb:39:ec:ad:a4:d0:
45:74:c9:e5:0d:a7:fc:03:37:62:1b:25:fb:27:7d:
e2:38:fc:7e:5e:cd:73:27:59:65:f7:d0:fc:7e:af:
05:77:7c:b2:8d:6b:09:b1:5f:71:b1:35:04:a4:90:
98:e1:fa:cb:f2:81:63:3c:39:2b:7a:a6:dd:df:ca:
9a:f9:95:5f:49:e4:e9:b7:a0:b6:b7:d9:9f:ac:57:
b0:e3:0d:30:62:65:fb:c9:2f:99:d8:65:e7:4b:10:
b9:02:6b:14:2f:f9:b2:47:c2:cf:ec:fe:6c:37:f7:
66:fa:f9:8b:5a:ba:01:4e:0d:dc:25:d4:b5:80:e2:
81:e2:22:6e:df:a6:bf:39:3c:e4:94:41:49:c3:b1:
59:f4:bb:97:11:59:10:89:45:9d:aa:53:76:e8:98:
5e:9c:2f:27:da:b1:f8:64:4c:18:fd:cb:ae:54:24:
67:f4:69:59:af:58:de:73:59:8f:50:3c:a3:2b:ba:
af:a7:bc:b6:e9:15:75:5f:5d:fd:83:74:15:68:f0:
53:55:c1:cc:8a:7e:bc:37:35:bc:bb:88:44:2f:d3:
32:aa:b2:01:11:47:90:1a:66:af:d3:86:14:f5:23:
fa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:51:64:35:2C:52:0C:83:26:A6:DB:2F:4C:F9:D5:F0:AF:2B:D7:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27981E4233C311F19510B9A7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.48.0/21
Signature Algorithm: sha256WithRSAEncryption
8f:8e:06:d8:04:c1:08:35:f3:11:ab:12:de:65:41:b1:63:98:
3e:1d:ce:ef:20:ed:e0:6c:62:1f:ea:84:51:03:af:f2:9c:b9:
37:17:9e:5f:64:c1:cc:22:e0:e6:2d:ac:5b:2a:f5:cd:fc:c5:
2b:85:7c:52:7d:d5:d4:e1:7e:4f:2e:d5:44:cd:f9:23:84:b4:
f9:f7:95:bd:c3:0c:63:94:11:29:63:d7:47:8d:ad:e5:4c:cc:
32:88:4c:12:71:26:cb:7b:03:0d:a6:f9:a5:17:dc:3a:6f:22:
90:93:ab:d2:be:26:00:f5:2c:e1:9d:0f:12:5e:4a:8c:5a:8a:
7c:53:7d:da:8e:f0:ec:84:e1:b5:8d:9b:e1:92:cf:02:cd:b3:
e9:ad:aa:40:8d:f5:ed:80:3b:bb:2d:ff:cf:02:f5:26:64:23:
ee:d7:57:84:6d:6b:7c:e5:60:47:07:5b:80:95:6c:92:25:89:
07:99:5e:9a:f2:a4:92:1d:8d:b6:90:f4:9b:7a:69:d2:8b:ca:
0e:f8:89:07:63:82:09:e9:49:05:5e:8a:7f:ea:96:a0:42:75:
64:62:a5:c8:d9:a4:a0:39:98:5c:b3:2f:4c:41:8e:ba:96:89:
32:41:75:e5:d3:71:a9:53:80:92:b6:ca:58:7f:8e:4f:62:41:
a3:a5:b2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:33:34 2026 by rpki-client