Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43953E4429D811F1A89B9AC6DAE4EC9C.roa
File: 43953E4429D811F1A89B9AC6DAE4EC9C.roa (raw, json)
Hash identifier: t+vFqxf080lLzn7r3ZIqcgiKLBsMkJTCzhGYCIrqyCc=
Subject key identifier: 92:B2:2A:FA:57:35:34:28:95:F6:E3:AA:4F:7C:03:B7:C5:A3:FB:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C132
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43953E4429D811F1A89B9AC6DAE4EC9C.roa
Signing time: Fri 27 Mar 2026 12:27:05 +0000
ROA not before: Fri 27 Mar 2026 12:27:00 +0000
ROA not after: Sun 10 May 2026 12:27:00 +0000
asID: 395793
IP address blocks: 154.196.210.0/24 maxlen: 24
154.196.211.0/24 maxlen: 24
154.196.212.0/24 maxlen: 24
154.200.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 15:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114994 (0x1c132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 27 12:27:00 2026 GMT
Not After : May 10 12:27:00 2026 GMT
Subject: CN=69c67799-eaf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:dc:cb:99:43:be:4f:a5:f0:be:a7:4c:8b:48:
ec:8f:1e:ee:39:0a:ad:54:43:c1:fd:ba:5f:de:5d:
d4:6d:ac:5d:6a:13:b9:4d:0c:9d:ba:bb:d0:8f:9a:
d9:48:86:68:c9:a0:ac:7c:0d:36:4d:7f:93:1d:1b:
0c:24:a6:86:64:0f:8c:86:9a:7a:6b:87:6f:56:39:
e8:d7:da:b5:99:b1:8a:73:1c:80:8e:30:1b:e3:79:
3c:71:79:f7:12:5e:64:36:3f:b3:6c:12:98:c5:0d:
6b:f3:3c:8d:17:0f:52:ec:35:ae:af:fb:74:83:5f:
b4:28:4e:ea:39:19:97:05:c7:69:24:14:ba:19:28:
3d:ae:4d:d7:24:cf:b8:d0:f7:79:d0:91:e1:fc:ca:
ca:26:0b:48:ba:0d:2d:7c:58:53:47:bb:68:07:af:
9d:3c:0c:ca:6b:65:80:8a:2f:25:1f:61:f8:45:8c:
89:92:08:fc:cd:71:0d:4c:3a:ae:e3:e1:d2:8d:61:
ec:34:fb:ff:8b:76:5a:b6:b9:4d:a0:e9:f7:fe:d2:
b0:38:a4:3a:24:f9:25:e0:c4:18:00:12:ba:a7:62:
13:69:57:22:fc:e7:05:7b:e9:20:ab:2e:69:cf:60:
10:52:b4:b5:f5:e8:46:f3:4a:c7:df:fa:3d:9c:96:
d7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B2:2A:FA:57:35:34:28:95:F6:E3:AA:4F:7C:03:B7:C5:A3:FB:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43953E4429D811F1A89B9AC6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.210.0-154.196.212.255
154.200.63.0/24
Signature Algorithm: sha256WithRSAEncryption
86:88:af:f3:f1:45:85:98:e6:17:b2:a3:49:1d:0c:fc:fc:ed:
e1:f9:f7:2b:59:37:87:cf:6e:f8:3c:73:94:d7:24:d6:8b:e0:
1b:31:ad:76:11:49:4f:8c:97:aa:63:e1:61:da:cc:4f:02:57:
dc:8c:3d:f5:9f:48:47:0e:eb:3c:e7:93:3a:88:1a:ae:7c:a6:
e3:d9:41:92:4c:94:5a:ac:7e:f6:58:4d:c9:8b:b4:6a:c5:2a:
af:f2:39:37:c3:53:de:a0:c5:1a:ad:f9:e0:74:34:25:e7:02:
6c:7b:c2:1d:57:db:bb:77:4a:93:d6:dc:de:0b:0e:a7:7b:45:
d3:44:77:dd:24:ef:84:c8:09:39:e1:69:2a:b4:73:d2:f8:b1:
f2:0a:70:bd:cd:f9:19:6d:11:62:25:c3:5d:d6:4a:0b:47:ca:
d7:0d:31:95:89:39:7f:b1:0a:ed:1c:59:19:dc:3e:64:9d:e5:
f5:68:26:7a:26:f5:89:a9:d6:c9:11:3b:9d:6f:31:3a:44:ba:
76:b8:35:d6:d0:67:06:12:32:28:aa:e1:ef:cc:f0:b1:e0:d3:
30:86:e1:a5:1b:49:97:f2:ec:99:06:d3:0b:54:06:77:f7:8e:
a5:40:1e:39:c3:73:6f:39:58:bf:f8:84:e3:b3:72:02:29:33:
5a:e2:76:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:40 2026 by rpki-client