Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/352095E2348D11F1AA0AF1D8CE1D38B0.roa
File: 352095E2348D11F1AA0AF1D8CE1D38B0.roa (raw, json)
Hash identifier: Tb0vtM1/fb4HiUk3Zg42TlD4+pI9azZ5CsC1LXjvSIU=
Subject key identifier: 6A:67:91:B6:EC:C1:18:E3:52:D1:93:14:33:17:C2:C8:0F:50:78:9C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C441
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/352095E2348D11F1AA0AF1D8CE1D38B0.roa
Signing time: Fri 10 Apr 2026 03:27:31 +0000
ROA not before: Fri 10 Apr 2026 03:27:27 +0000
ROA not after: Sun 19 Apr 2026 03:27:27 +0000
asID: 9304
IP address blocks: 154.92.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 03:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115777 (0x1c441)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 03:27:27 2026 GMT
Not After : Apr 19 03:27:27 2026 GMT
Subject: CN=69d86e23-5c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:00:83:5e:6f:45:40:09:50:28:9c:ab:15:d1:
c6:01:a7:05:b2:d8:b6:60:ea:e8:e9:7b:1e:7e:d9:
19:e2:bd:c3:d5:c4:6d:5f:60:6a:53:23:5c:40:02:
28:a0:9c:64:e2:b9:6c:d5:3b:9d:38:9b:ee:ff:bf:
39:66:03:e6:e9:f9:4e:12:14:e3:73:de:96:05:56:
5c:04:37:42:28:b1:ea:2f:a7:9e:67:01:6d:44:8b:
29:7d:08:fa:c9:cd:74:e1:a0:82:09:d9:f5:0e:45:
f7:7b:c1:bf:75:17:09:2c:8e:b6:86:4c:9e:c7:6d:
f3:2c:34:8d:fd:44:e0:70:17:a8:32:90:97:03:b7:
e1:cd:d2:7f:98:bc:86:11:c9:d0:00:67:71:11:16:
83:91:14:3d:26:3d:cd:db:db:96:3a:7f:d4:e2:83:
1f:2d:cb:ce:03:ca:10:ec:83:5d:e8:16:ea:21:d0:
34:2c:bd:91:e4:d3:7f:75:40:c5:3b:31:33:de:4f:
8c:6f:a9:22:c0:16:1c:f5:9b:c9:6b:f0:7a:83:b2:
84:75:c1:6d:f4:54:cc:de:d8:d3:16:f8:d5:47:84:
8a:84:21:02:a0:f3:0e:9b:45:0c:df:ee:6c:87:3e:
f4:56:d3:3c:0e:36:d8:2c:ab:18:b7:17:e7:d1:c5:
5f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:67:91:B6:EC:C1:18:E3:52:D1:93:14:33:17:C2:C8:0F:50:78:9C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/352095E2348D11F1AA0AF1D8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.216.0/21
Signature Algorithm: sha256WithRSAEncryption
62:50:95:8c:b5:b1:a4:0f:f5:10:4c:fa:a4:33:0e:2a:68:8e:
ac:5c:7c:02:31:84:4f:d9:be:f7:04:b3:a4:d1:d5:cf:61:e0:
ad:29:e6:12:76:76:a1:51:ca:39:eb:4e:2c:a7:65:1f:51:23:
67:f4:64:ae:b8:70:ff:49:01:6c:7a:0f:d0:9f:a0:75:9b:57:
43:87:da:56:d8:cb:9d:1f:fa:4a:c3:9b:79:81:71:f6:01:03:
c4:40:a8:e5:6b:f0:46:62:cb:33:9d:f2:19:8f:b7:44:73:3f:
a6:5e:13:a6:74:1c:98:82:90:b2:1a:4d:88:23:d6:6d:35:c2:
64:c5:19:9a:06:94:d5:3a:d6:37:85:05:fa:f1:a3:7c:d6:49:
8a:b6:18:80:0f:6f:27:a7:5e:5e:7d:d1:1a:80:1d:03:3d:f4:
e9:5e:4d:d1:f1:e2:65:63:57:51:95:50:f7:06:31:b0:c8:d6:
0a:b4:09:83:e5:2d:c3:f5:8e:dc:61:39:2b:c0:f5:aa:0e:f4:
78:f7:ab:1b:b6:87:1c:13:f2:e7:48:18:3c:17:c2:48:ec:ea:
10:c4:cf:e4:d6:20:e8:1b:ec:fe:02:7c:8c:69:ae:c1:19:6c:
38:01:77:33:41:7c:aa:93:eb:a6:ed:1f:7f:c5:17:bb:09:e5:
b3:a3:24:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:20:27 2026 by rpki-client