Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/297D47EE331B11F1A403EAB4CE1D38B0.roa
File: 297D47EE331B11F1A403EAB4CE1D38B0.roa (raw, json)
Hash identifier: MxLEvgXLcI5KWqCH8mkWLv5DS1qStOmZM2Oa0KdXNfQ=
Subject key identifier: 82:B4:DD:B7:FD:B0:41:C7:77:93:34:C1:A4:37:03:87:E7:03:18:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C380
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/297D47EE331B11F1A403EAB4CE1D38B0.roa
Signing time: Wed 08 Apr 2026 07:18:41 +0000
ROA not before: Wed 08 Apr 2026 07:18:25 +0000
ROA not after: Sun 07 Jun 2026 07:18:25 +0000
asID: 23674
IP address blocks: 154.192.0.0/16 maxlen: 24
154.192.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115584 (0x1c380)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 8 07:18:25 2026 GMT
Not After : Jun 7 07:18:25 2026 GMT
Subject: CN=69d60151-d952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cb:6a:58:8a:5a:a9:33:b6:16:b7:c1:62:bd:
94:eb:4c:8b:57:95:9c:9d:9a:27:11:c1:da:09:c9:
ca:4a:eb:34:f9:9f:f8:13:7d:ff:dd:ab:55:08:55:
77:68:6d:7d:79:08:88:bc:1c:58:88:fa:12:45:02:
90:20:68:44:2b:20:a6:60:70:71:f8:e4:aa:38:fe:
1e:98:e2:bc:1d:80:48:54:c0:c8:a0:72:e6:e9:76:
2a:cf:c3:66:bc:91:50:d0:fe:08:03:30:9e:93:fe:
85:c9:e3:c3:41:6e:a5:d2:97:7e:94:07:f1:7b:1c:
f1:47:99:b5:f0:3f:04:86:7a:8a:0d:fb:a5:40:4a:
e2:8a:58:93:ad:43:9d:69:af:7d:f4:50:fa:44:9e:
1d:38:e2:24:35:63:70:0a:ce:9e:28:8a:81:5c:05:
00:c7:3d:44:6c:b6:bb:8b:64:90:e2:40:33:2d:61:
78:e4:af:17:c1:67:34:39:18:43:df:10:33:11:e7:
00:57:19:65:e9:2c:9a:53:2e:b7:51:0d:90:12:56:
ce:f9:1e:0a:d7:46:c6:9c:a9:e6:4c:8a:f3:f2:c1:
ed:ec:b6:94:d5:68:ad:26:b8:08:b8:01:04:d9:0a:
91:3b:e1:58:b5:eb:18:8c:b3:ef:5b:0d:d1:24:d8:
ab:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B4:DD:B7:FD:B0:41:C7:77:93:34:C1:A4:37:03:87:E7:03:18:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/297D47EE331B11F1A403EAB4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.192.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b4:b7:13:ff:5e:85:05:be:58:77:f5:38:88:97:17:ff:26:dd:
bb:4f:90:69:a5:b3:91:e7:83:bd:57:07:a8:c6:e9:bc:9f:9b:
97:1f:ce:e4:13:0a:c2:a5:13:10:56:e2:cd:ac:a8:3d:9d:81:
4c:42:b8:ad:23:cc:90:6f:18:65:ec:b2:04:de:ef:0c:1b:4e:
d9:10:79:ae:98:ba:5c:c3:fb:60:67:e6:08:77:4b:f5:60:c4:
96:71:aa:c9:77:5b:d1:d7:e4:ba:39:d3:4b:65:30:4a:89:60:
6c:12:1a:81:95:01:c0:22:ea:b9:ae:5e:e7:bf:54:6c:05:72:
94:c4:fa:66:3a:60:86:5f:95:21:16:55:17:a2:09:ac:ba:25:
95:01:24:5d:ed:0e:69:ef:46:11:1c:60:46:e0:f6:f1:9f:2b:
45:d1:4d:63:d6:a5:5f:31:cb:2d:b2:8f:40:99:db:1d:11:f3:
84:9d:6b:33:6b:07:75:c6:fc:6b:32:62:9d:40:e7:70:81:c4:
87:7c:18:da:6a:f2:10:cd:e3:4f:18:3e:29:20:66:d2:c9:34:
08:2e:8f:0c:5b:55:18:8e:b6:da:d4:c6:fa:5c:df:cf:ae:29:
2e:d2:ad:7a:ab:db:3c:8e:74:1c:6f:91:22:04:ee:48:56:c3:
62:b9:34:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:25:20 2026 by rpki-client