Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3839EEAE308711F1ACF444E6DAE4EC9C.roa
File: 3839EEAE308711F1ACF444E6DAE4EC9C.roa (raw, json)
Hash identifier: HUzPrNGf279odVflH7ubaqrP+OSdpuRI01WSnU1lC8s=
Subject key identifier: E4:B9:D3:7C:80:B4:13:D1:69:64:5C:36:63:A0:25:E0:47:F8:E4:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C2CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3839EEAE308711F1ACF444E6DAE4EC9C.roa
Signing time: Sun 05 Apr 2026 00:34:36 +0000
ROA not before: Sun 05 Apr 2026 00:00:24 +0000
ROA not after: Mon 11 May 2026 00:00:24 +0000
asID: 205023
IP address blocks: 154.197.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115402 (0x1c2ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 5 00:00:24 2026 GMT
Not After : May 11 00:00:24 2026 GMT
Subject: CN=69d1ae1c-9d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:79:52:31:38:41:f9:6e:fd:8d:8e:a4:fd:14:
5c:16:a6:fd:49:08:c0:19:0d:44:36:7e:d9:6c:52:
8c:1b:43:30:1b:50:e7:07:f1:b5:9d:98:cb:45:33:
ef:93:5f:be:b8:28:16:07:82:ec:ad:e4:99:7b:30:
09:b7:44:5e:03:db:74:8e:4d:f9:6c:79:44:08:8d:
5e:c7:b0:8e:bf:ec:45:cb:50:a7:a3:dc:c1:2e:7a:
28:40:49:53:11:8d:e3:5f:6f:6e:39:ba:8d:cd:fe:
0b:5b:fc:16:d1:77:73:0a:ba:a9:00:65:12:90:01:
a9:4a:da:8a:3b:a8:c2:45:ad:17:23:28:54:85:93:
8f:d9:f4:a6:65:e7:8f:73:49:d9:33:70:4d:38:bd:
ae:2a:92:7c:3e:be:0b:f3:2f:ea:15:2a:ed:50:e6:
8c:d7:5c:3e:73:ec:c9:f6:38:d8:20:1f:cc:9f:20:
4f:59:76:31:83:50:c1:76:85:4e:f1:ec:27:8f:a9:
db:00:dc:9c:48:9d:77:60:75:f9:14:43:f7:5b:8a:
9a:56:db:c8:a0:54:b4:37:87:a7:91:91:a3:d8:cf:
6b:2f:26:29:f0:76:5f:7b:83:ed:2f:d0:c9:9c:29:
c7:bb:cb:cc:00:89:ac:72:73:64:af:59:70:6e:fe:
bc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B9:D3:7C:80:B4:13:D1:69:64:5C:36:63:A0:25:E0:47:F8:E4:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3839EEAE308711F1ACF444E6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.24.0/24
Signature Algorithm: sha256WithRSAEncryption
33:66:ea:77:28:f6:9c:1b:6b:e9:bf:5f:69:3b:2c:06:bd:3d:
88:49:99:ee:a0:b8:e3:e4:65:ef:c5:96:a4:ef:d7:84:aa:11:
e0:6c:e6:26:f0:71:cb:b2:23:eb:71:07:9b:f0:b8:e2:2b:b5:
b0:d7:7f:1c:9d:8d:91:c6:14:9a:f0:35:87:20:d9:ec:23:84:
e6:63:10:7a:63:2b:82:b4:d4:3c:46:3c:ce:f3:c8:4e:85:98:
f8:41:f6:13:2b:bd:34:d0:5d:fc:83:5e:d0:e6:1f:4a:ef:8a:
f7:46:e7:b7:e5:33:28:e0:3d:5a:66:76:fe:e2:f4:12:4a:ec:
07:c9:6c:d8:87:f9:2b:36:91:bb:21:c4:76:0f:c3:26:2a:40:
77:f7:35:2e:51:93:84:0e:54:a4:ed:64:6c:f4:26:cb:4c:9a:
64:11:2c:1c:5d:e3:47:35:65:10:f7:de:e4:6b:ca:e7:3b:e8:
0a:a4:ba:97:5e:3b:4e:34:78:75:15:f2:5c:11:01:2f:c4:ee:
37:a9:a3:20:02:92:00:39:89:30:75:03:95:26:fc:db:61:f1:
2f:bd:49:fc:8f:b4:2a:65:51:d3:f1:91:d5:89:e2:9d:c1:e6:
be:f5:fb:36:88:d6:87:75:3e:44:45:35:24:21:a7:f7:2f:79:
fb:13:77:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:25:19 2026 by rpki-client