Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DE5221A2E6B11F1BE60A0B4DAE4EC9C.roa
File: 3DE5221A2E6B11F1BE60A0B4DAE4EC9C.roa (raw, json)
Hash identifier: 1xLGc/SfTWCsL1/7ahSRnhs5TR7ooVJgIJzQ1NVxK2g=
Subject key identifier: F5:44:23:55:23:9F:B6:2A:F5:6E:7C:27:3C:2A:C9:6F:29:33:76:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C209
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DE5221A2E6B11F1BE60A0B4DAE4EC9C.roa
Signing time: Thu 02 Apr 2026 08:09:16 +0000
ROA not before: Thu 02 Apr 2026 08:09:10 +0000
ROA not after: Wed 20 May 2026 08:09:10 +0000
asID: 200213
IP address blocks: 154.193.128.0/24 maxlen: 24
154.222.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115209 (0x1c209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 08:09:10 2026 GMT
Not After : May 20 08:09:10 2026 GMT
Subject: CN=69ce242c-cb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:57:e8:6d:f8:21:bb:64:d5:57:da:6a:4a:df:
cb:ad:31:be:e2:97:99:83:95:ec:d1:68:16:9f:a6:
ad:07:0e:6b:18:1a:25:45:70:54:8e:e2:ef:71:18:
55:d3:4b:57:fe:0b:c7:09:3e:b4:63:26:a6:ac:ce:
de:4b:e3:f8:be:3f:22:fe:3d:e0:ba:39:a6:63:67:
bb:ff:4f:37:27:9c:d1:d6:64:e0:15:a6:0e:7e:15:
15:a6:ab:b6:30:ed:f3:e7:53:2c:ab:32:15:18:1b:
33:d3:be:c2:d5:ce:5f:e9:92:e9:3d:c1:ce:4f:c6:
e7:f7:42:63:8b:06:dd:b1:37:96:0c:fe:4b:68:96:
f1:a0:89:57:e8:d6:99:14:93:3d:ec:55:0e:c8:09:
af:97:b8:62:6d:5a:10:cc:57:9d:44:cf:36:6e:e6:
d3:d6:03:90:ac:fd:12:8d:b3:f1:fd:37:64:e9:3e:
f6:7f:0f:8a:ae:f9:bf:9d:42:8a:f5:79:46:b3:66:
ac:80:d6:51:bf:5a:e2:d2:ce:ee:30:82:7d:6c:3a:
c2:52:71:6f:11:52:26:52:3a:ec:47:d8:81:0e:5a:
87:2c:2a:ea:f6:81:92:34:a9:64:9c:2e:3c:98:79:
20:c9:af:b2:7a:c3:23:8b:52:6a:e3:d5:06:d8:09:
a4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:44:23:55:23:9F:B6:2A:F5:6E:7C:27:3C:2A:C9:6F:29:33:76:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DE5221A2E6B11F1BE60A0B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.128.0/24
154.222.79.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:80:6b:40:8a:9a:61:25:1e:c7:7d:db:be:3e:5f:8e:b1:7e:
dc:7a:0b:aa:33:f7:0b:da:5b:90:f8:30:31:fd:5b:f8:19:8b:
3a:89:6e:e6:f1:77:9f:44:0f:31:7b:c1:63:88:36:97:3e:07:
d6:4a:61:29:57:39:af:cd:38:43:d3:bb:c5:4a:56:29:3d:91:
ed:f0:32:bd:95:57:cf:c5:aa:7d:4c:e3:77:72:a6:c6:45:f7:
19:d5:6a:71:1d:e1:9c:62:7c:6d:27:c4:5e:69:8e:b9:c1:14:
0a:e8:2a:ba:ac:b8:2e:c0:58:8c:89:9e:d8:5b:54:5b:da:9c:
fb:79:ce:b9:68:fe:6f:93:e8:d3:a0:c7:17:c8:13:c6:84:5f:
13:3e:36:ba:63:9c:39:86:e3:9e:3d:ee:9b:ed:7b:e4:ff:2d:
42:9c:2d:f2:b9:90:c3:c8:b2:2b:8b:2c:28:ec:af:84:5b:ef:
5f:5a:3d:0d:6b:78:08:16:af:d6:bb:7d:a3:12:2e:cd:72:c7:
ec:09:81:44:f1:fa:7e:16:77:22:f6:19:53:8f:ca:4a:5f:75:
6e:9b:26:c1:f2:8a:5c:fc:8a:9f:5f:16:81:e5:2a:62:45:83:
af:d5:69:24:3c:4b:95:4d:a4:bd:83:c4:6f:77:8e:18:93:ef:
93:c4:3f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:44:59 2026 by rpki-client