Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4433C1622C0911F1A45019D2DAE4EC9C.roa
File: 4433C1622C0911F1A45019D2DAE4EC9C.roa (raw, json)
Hash identifier: cn1k1f0iAXnFpmK2rEU7MCmSUk8lap6v156FJkh18Gw=
Subject key identifier: C8:AB:08:E6:26:62:8C:00:4B:49:78:29:63:2F:95:56:54:40:BD:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C1A9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4433C1622C0911F1A45019D2DAE4EC9C.roa
Signing time: Mon 30 Mar 2026 07:22:54 +0000
ROA not before: Mon 30 Mar 2026 07:22:49 +0000
ROA not after: Sat 25 Apr 2026 07:22:49 +0000
asID: 139613
IP address blocks: 154.198.9.0/24 maxlen: 24
154.198.10.0/24 maxlen: 24
154.200.241.0/24 maxlen: 24
154.200.242.0/24 maxlen: 24
154.200.248.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:53:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115113 (0x1c1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 30 07:22:49 2026 GMT
Not After : Apr 25 07:22:49 2026 GMT
Subject: CN=69ca24ce-42b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6e:3f:77:af:97:e7:cb:3e:6a:82:63:34:81:
30:ca:2b:45:6f:cd:67:20:b1:61:89:e6:07:95:83:
3d:30:5c:30:d8:19:9b:fe:18:16:3f:69:56:cc:81:
dd:5e:71:58:60:72:5d:da:7e:a9:80:f6:e4:02:17:
32:a3:b8:52:24:20:da:16:fe:7e:bf:1e:28:0a:fe:
c3:a7:6a:e8:02:e0:6f:d6:76:79:6a:eb:b3:36:78:
4b:e3:d1:61:f5:88:23:98:fa:03:27:ff:81:c9:93:
5f:33:d6:f9:63:eb:97:55:4b:17:a7:c5:83:e6:95:
45:ae:b8:d0:7b:7e:6c:44:e8:06:45:20:5e:ba:04:
ab:67:1e:df:b3:39:66:9b:bf:c4:95:a2:5a:32:4c:
47:65:42:d3:52:14:c6:5b:d6:c5:b8:15:1a:31:73:
3a:56:64:97:80:3c:a8:af:a6:30:34:4b:b3:6e:ae:
92:12:87:4d:60:2a:b3:32:22:fa:0e:cc:3a:a6:3c:
e0:7b:4a:1e:6f:a8:d9:2f:19:8e:79:ad:dc:ac:6f:
bd:7e:74:d3:d7:8a:72:47:0f:4c:4a:92:e7:9f:2d:
96:5f:ba:16:f2:b6:0f:ca:c8:ca:2a:ff:f3:e4:cd:
79:bb:8b:3c:b1:0c:5b:c0:39:74:ef:1c:b0:6e:2c:
80:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AB:08:E6:26:62:8C:00:4B:49:78:29:63:2F:95:56:54:40:BD:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4433C1622C0911F1A45019D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.9.0-154.198.10.255
154.200.241.0-154.200.242.255
154.200.248.0/23
Signature Algorithm: sha256WithRSAEncryption
61:97:ad:38:cc:ff:04:38:80:43:7e:80:bb:f8:91:0d:62:4b:
56:a1:a5:4b:1a:51:ec:bb:f6:ee:6c:aa:22:2d:d8:ad:7b:9b:
0a:39:79:a0:62:f2:30:5f:8d:e1:75:69:1f:7c:a4:4c:e7:f1:
ed:ad:c1:fe:99:47:f6:55:5f:77:db:d4:73:fa:cf:de:fc:27:
1e:e0:ad:8a:af:98:59:cb:13:b1:72:47:78:c3:53:d4:6c:89:
43:49:fa:f2:44:6e:4f:c0:ed:d8:a8:a7:cb:1a:91:c2:e8:5b:
aa:f3:7f:b9:a5:b2:b7:b9:c5:5a:4e:d6:a5:6c:eb:62:1d:7d:
ab:b6:d2:75:e2:3e:6d:a7:45:9d:b3:39:41:2d:f9:24:1a:80:
93:c9:02:a3:f5:5a:0d:d6:90:b6:76:93:db:e7:76:61:08:4f:
d0:93:9f:d7:4f:fd:48:de:78:d8:41:c3:34:de:1b:cd:b7:46:
e0:6b:6a:4e:ef:f1:25:50:4b:39:a6:71:9d:ab:4f:28:fb:cc:
3e:89:74:30:88:75:a4:57:eb:eb:5f:4b:9d:d9:ee:dd:8b:c2:
a3:c6:f5:0c:c9:49:d3:85:1e:86:65:cb:4e:fa:7b:35:23:61:
1c:3b:9c:2b:5b:39:c6:a8:88:e3:a9:24:66:41:8e:f5:bc:56:
ef:2c:2b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:05:23 2026 by rpki-client