Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40C0E68E2ED111F194354F7BDAE4EC9C.roa
File: 40C0E68E2ED111F194354F7BDAE4EC9C.roa (raw, json)
Hash identifier: 8CjYLL9UjxXJEphKkbCIVsos4EEGN5CJP91OcSHiWRw=
Subject key identifier: DE:47:FF:63:1D:2E:84:B1:C9:E4:96:D9:A4:9B:02:E6:A7:8C:A4:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C281
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40C0E68E2ED111F194354F7BDAE4EC9C.roa
Signing time: Thu 02 Apr 2026 20:19:30 +0000
ROA not before: Thu 02 Apr 2026 20:19:24 +0000
ROA not after: Sun 10 May 2026 20:19:24 +0000
asID: 138915
IP address blocks: 154.223.58.0/23 maxlen: 24
154.223.60.0/23 maxlen: 24
154.223.62.0/23 maxlen: 24
154.223.64.0/24 maxlen: 24
154.223.66.0/23 maxlen: 24
154.223.68.0/23 maxlen: 24
154.223.70.0/23 maxlen: 24
154.223.72.0/23 maxlen: 24
154.223.74.0/23 maxlen: 24
154.223.76.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115329 (0x1c281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 20:19:24 2026 GMT
Not After : May 10 20:19:24 2026 GMT
Subject: CN=69cecf52-5dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b7:dd:9c:8c:72:36:b6:31:55:ee:1f:a9:8d:
05:27:d9:8f:86:37:be:56:66:b5:16:07:10:e3:d4:
b2:99:48:f7:65:b3:0a:46:e4:07:f1:fb:7c:ac:71:
70:93:81:e0:5d:11:b4:dc:5d:70:f9:39:6a:fb:9a:
5b:bd:4b:f0:69:07:21:d2:43:21:8d:aa:a1:4f:ac:
3e:ad:40:d8:0c:ba:f6:dd:5c:80:bd:a6:26:91:d9:
31:6c:46:08:5d:c1:77:26:07:b0:d3:4f:ce:0c:32:
fe:4f:f1:be:63:05:71:15:79:50:72:0f:0b:3c:24:
78:c3:b6:f9:64:68:7c:04:a6:3c:b6:17:54:87:2a:
46:1e:c0:e9:0d:e6:86:50:83:73:1f:b2:12:17:61:
75:ff:cf:21:2a:1c:a0:c4:47:ab:a6:0a:93:3d:5c:
4a:93:d3:d3:ca:3d:32:35:54:5f:ea:b1:d0:da:f1:
42:51:c7:a3:03:a2:6e:70:06:52:88:f6:16:8a:ca:
a0:97:da:5f:cc:71:5d:7f:0c:ee:08:f3:f2:ed:e0:
3d:9d:4f:7b:fc:a5:b7:63:65:21:06:00:e4:b8:34:
20:70:46:a7:d0:9b:50:00:c8:cb:17:ea:9c:a5:28:
28:da:58:71:a0:af:25:76:7b:18:fb:32:e0:47:03:
f9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:47:FF:63:1D:2E:84:B1:C9:E4:96:D9:A4:9B:02:E6:A7:8C:A4:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40C0E68E2ED111F194354F7BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.58.0-154.223.64.255
154.223.66.0-154.223.77.255
Signature Algorithm: sha256WithRSAEncryption
5c:94:ce:78:61:85:27:82:81:11:1c:71:e3:89:80:fc:de:d8:
95:7e:d9:be:61:01:cc:fa:e9:71:3d:6d:f3:78:47:65:4a:19:
82:7c:7a:32:a2:56:0a:26:3c:59:23:9e:57:0c:f4:d9:f8:c5:
43:0f:03:b3:50:fe:13:68:28:c0:ad:ed:3e:4c:c3:87:80:df:
f1:f9:69:12:45:da:f8:54:fa:cd:3a:ed:11:7e:f3:cf:28:63:
37:b6:a6:db:57:fc:99:e6:a3:75:a0:ff:f6:2c:82:72:a1:9c:
16:2f:09:51:fa:0d:f2:d9:99:3e:25:9e:69:bb:73:33:4f:af:
ef:17:5b:be:e2:0d:8b:c9:cc:24:fb:52:ed:eb:f4:4b:5f:64:
32:1d:56:04:83:da:b6:7c:39:a9:e7:9b:ef:80:ae:03:77:8b:
33:ad:e1:a0:fe:50:07:61:fa:da:3c:c1:93:3c:21:8c:8c:50:
78:c1:fb:5c:71:60:45:51:ae:0b:35:da:7f:0e:a7:90:65:d0:
20:f9:51:e4:e5:ae:52:71:d9:22:44:8e:e5:50:17:02:1c:0e:
d8:92:f1:64:16:f6:39:b6:db:5e:3d:dd:a5:f3:09:2e:c8:9d:
af:8d:47:39:af:50:42:a4:9c:ca:58:bd:20:ac:1b:bc:c8:30:
2d:a4:bc:48
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:41:36 2026 by rpki-client