Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40D2D704389A11F1BCB149ACCE1D38B0.roa
File: 40D2D704389A11F1BCB149ACCE1D38B0.roa (raw, json)
Hash identifier: NE0civS76FM1AlvVPi6K6sWgcHsmuyL6lDa2ZhjqZiY=
Subject key identifier: E3:7F:AF:99:9E:53:2F:24:C3:9E:EE:1B:55:9B:A8:F1:13:B9:03:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C53E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40D2D704389A11F1BCB149ACCE1D38B0.roa
Signing time: Wed 15 Apr 2026 07:10:59 +0000
ROA not before: Wed 15 Apr 2026 07:10:54 +0000
ROA not after: Wed 06 May 2026 07:10:54 +0000
asID: 264605
IP address blocks: 154.88.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116030 (0x1c53e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 07:10:54 2026 GMT
Not After : May 6 07:10:54 2026 GMT
Subject: CN=69df3a03-d670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e7:4d:9a:0e:25:0e:6a:c4:bb:09:a8:b2:b0:
63:3b:e0:07:6e:21:5d:4b:2c:aa:ee:80:58:3c:96:
7e:3f:ec:88:a5:f2:ae:ba:4c:4a:4b:79:f6:a8:02:
0b:bd:b8:e5:a4:c9:3c:a2:28:c3:c8:6f:33:0b:1e:
5d:85:9d:bb:2d:9e:ac:6b:a4:26:1a:33:53:03:56:
dd:08:68:52:02:bd:ca:08:cc:13:cf:d2:8d:59:ab:
fb:fc:36:b1:23:6d:ca:41:af:d2:fa:f0:bd:0e:8c:
a3:45:b3:3d:13:9f:c6:a1:d9:5d:a4:c5:47:33:94:
88:a6:98:57:fd:1f:34:3b:11:a5:29:75:a4:a0:b1:
76:42:2a:ff:54:4d:c8:39:9b:f8:f9:d9:2b:c4:59:
6f:00:2d:6e:38:23:97:c5:7f:37:e3:f0:29:76:7d:
0b:b9:90:48:a0:6e:c4:11:49:43:d5:f3:85:ce:55:
d5:76:82:1b:e1:35:5a:1c:6a:5a:4e:87:0c:d0:9f:
6d:7c:42:9a:6d:30:ee:dd:89:e7:e1:21:b6:6d:9c:
c5:74:b5:a1:8d:52:6c:97:e9:91:62:2e:29:d6:b8:
f1:4f:43:12:53:47:a2:ec:d0:03:46:cc:f8:a7:6a:
36:1a:61:46:b9:d9:ce:a5:b3:e9:9b:09:70:b6:9d:
e4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7F:AF:99:9E:53:2F:24:C3:9E:EE:1B:55:9B:A8:F1:13:B9:03:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40D2D704389A11F1BCB149ACCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.192.0/18
Signature Algorithm: sha256WithRSAEncryption
b0:8a:70:7b:4e:f6:a5:49:20:d3:c4:ff:9f:c0:f0:fd:2a:68:
a2:e8:e9:6b:99:e4:f3:d0:79:79:ac:19:6c:92:71:76:02:76:
08:bc:0e:d4:47:15:da:44:40:8d:87:bd:6b:3d:de:9b:32:24:
23:dd:c9:c8:cc:01:21:00:f7:bf:3a:84:de:21:e3:62:5e:59:
61:5d:ba:ac:19:c8:ec:ca:6a:95:76:e4:8c:4e:3a:b7:89:ba:
7e:ab:4a:8a:71:64:bf:f8:c1:ac:c7:2b:d4:89:f5:90:cb:5f:
37:71:f6:16:7f:1b:b6:b1:fe:87:92:7a:c9:4f:05:68:09:f4:
d6:a1:e0:f3:01:42:12:db:8f:81:dc:dc:a8:a9:4e:53:d4:3a:
53:03:e5:fe:63:5a:f2:c1:15:54:c6:cc:7e:db:b1:0d:62:20:
fe:e2:a3:ea:13:f7:43:2a:cb:1a:f4:01:ae:c9:ab:14:48:6b:
e1:69:f8:0c:49:26:2a:c3:47:88:c5:a6:0c:0d:65:26:f1:8f:
20:35:ce:73:d0:74:ad:b2:8d:1a:9d:f2:77:7d:2b:4e:61:3f:
84:b2:5a:8b:d2:35:0e:50:60:65:80:a5:3d:aa:05:6c:f0:0c:
36:e1:39:28:fc:15:10:c2:6e:00:e2:5e:a8:3f:0f:19:7b:f5:
35:04:43:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:30:38 2026 by rpki-client