Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38D49ADA3A7D11F1BBE45FA7CE1D38B0.roa
File: 38D49ADA3A7D11F1BBE45FA7CE1D38B0.roa (raw, json)
Hash identifier: M2jgPWECpyGhym15hv7+ANqLfUnA1IW4WsDaCU9BXIM=
Subject key identifier: BA:4B:99:67:CE:75:FB:C2:AE:F0:68:A5:72:44:54:E0:1E:4B:DA:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C5ED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38D49ADA3A7D11F1BBE45FA7CE1D38B0.roa
Signing time: Fri 17 Apr 2026 16:48:13 +0000
ROA not before: Fri 17 Apr 2026 16:48:07 +0000
ROA not after: Sun 24 May 2026 16:48:07 +0000
asID: 400619
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116205 (0x1c5ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 17 16:48:07 2026 GMT
Not After : May 24 16:48:07 2026 GMT
Subject: CN=69e2644d-2dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:84:59:8f:85:6a:1b:b5:9f:78:22:85:91:96:
04:73:8d:6a:e1:d2:e3:62:6a:ea:ee:f3:d5:d4:74:
e2:c8:0f:a2:57:94:fc:f2:11:e0:6f:fb:3b:6f:ad:
aa:54:b3:c7:9a:de:8f:fe:95:d4:da:53:f7:8a:c3:
44:57:14:db:d8:95:63:5d:b1:83:b1:57:3d:a8:78:
14:79:68:25:6d:cb:52:23:fc:db:50:a5:4b:1f:5b:
23:63:85:b8:0c:2c:1d:eb:be:98:28:86:4d:04:5f:
4d:9f:e4:14:ca:2b:7c:7f:d2:e0:00:af:0c:3d:43:
44:4a:bf:31:17:41:db:be:9d:c3:f8:57:f2:c6:95:
c0:44:d2:8f:64:cc:57:b6:d0:37:7f:6b:7b:ef:2d:
f8:2d:74:f7:ae:e3:de:e5:a7:d2:dc:fc:45:fe:a6:
ef:c5:47:4e:60:40:82:8d:d4:aa:27:c0:96:6f:09:
88:64:41:fd:4e:af:bf:58:31:ef:61:49:63:28:ee:
d7:9d:d8:8f:28:ca:3c:12:46:38:10:ba:ff:f1:51:
93:36:b8:4d:b1:c4:cc:94:5f:9f:a0:99:6a:5d:7a:
14:6c:7f:0f:d4:5c:38:34:a7:63:d2:92:72:e9:aa:
e5:1f:ab:37:84:50:07:5d:98:ca:90:25:c8:6f:e1:
56:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4B:99:67:CE:75:FB:C2:AE:F0:68:A5:72:44:54:E0:1E:4B:DA:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38D49ADA3A7D11F1BBE45FA7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
68:8a:35:87:29:1f:17:87:58:41:98:80:be:51:6f:e4:86:3e:
27:99:1b:ed:c4:fb:b7:2e:ce:b0:58:f7:c1:dd:59:f3:52:19:
3b:ca:69:61:69:7a:2c:61:88:bc:f5:83:b3:1e:8d:84:02:85:
20:d8:8c:71:7c:49:b3:7d:95:2a:c0:5d:6d:32:be:82:e2:a2:
82:e4:b1:30:a4:c8:7e:37:25:32:47:f8:f2:b5:0f:3f:3a:d3:
69:9e:00:26:8b:6b:03:5f:b5:2f:75:c6:a7:60:4f:30:96:ac:
77:db:fd:c4:81:b2:ec:f5:eb:d7:a8:85:cc:72:9f:b5:8b:a0:
54:eb:28:8b:03:68:d3:00:28:ae:ec:80:23:1f:7d:c7:ca:5b:
4a:f3:27:33:09:a7:1a:43:22:c8:3d:b8:be:5c:bd:ce:2f:e3:
bb:7a:bc:f7:02:9c:f7:72:3e:8f:b9:6e:ce:01:81:44:d5:dc:
43:14:72:4a:c3:18:7a:50:c5:a9:fd:54:27:f1:66:ad:a9:e2:
8c:ff:22:f8:f0:9e:73:58:b2:81:59:82:4c:53:47:19:e2:81:
56:25:cd:86:1b:f0:81:79:50:5f:eb:de:48:f2:bc:84:fd:34:
59:a2:69:59:20:dc:91:e8:60:41:94:1e:5e:d8:a4:bc:20:e7:
15:5a:70:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:25:20 2026 by rpki-client