Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56DEDAFE377111F198857704CF1D38B0.roa
File: 56DEDAFE377111F198857704CF1D38B0.roa (raw, json)
Hash identifier: jT3duBk0dckJfkHNLh2Xrixe3F1lK3Xtv3IXuMtdIf4=
Subject key identifier: C6:7D:25:88:00:9B:BE:5E:7C:55:3F:46:D6:3E:1C:6B:BF:36:2D:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C522
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56DEDAFE377111F198857704CF1D38B0.roa
Signing time: Mon 13 Apr 2026 19:45:36 +0000
ROA not before: Mon 13 Apr 2026 19:45:31 +0000
ROA not after: Sat 16 May 2026 19:45:31 +0000
asID: 17497
IP address blocks: 154.217.232.0/23 maxlen: 24
154.217.232.0/24 maxlen: 24
154.217.233.0/24 maxlen: 24
154.222.128.0/24 maxlen: 24
154.222.140.0/24 maxlen: 24
154.222.148.0/22 maxlen: 24
154.222.148.0/24 maxlen: 24
154.222.149.0/24 maxlen: 24
154.222.150.0/24 maxlen: 24
154.222.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116002 (0x1c522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 13 19:45:31 2026 GMT
Not After : May 16 19:45:31 2026 GMT
Subject: CN=69dd47df-c0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b0:15:12:37:f1:a9:be:91:52:57:0c:e4:cb:
11:85:d2:5e:6d:d0:7d:ed:de:61:86:df:56:e2:e6:
97:40:a0:62:e4:c2:11:07:6d:35:6c:4f:20:24:f6:
0d:cd:d7:74:fa:d2:fe:fe:b2:71:22:28:94:83:fa:
37:e7:df:6e:65:95:0b:c4:68:35:e7:e2:b9:af:7e:
6a:c3:d9:bf:54:8d:1c:6b:32:6c:1c:88:f0:c8:8d:
0d:6d:15:f9:37:ac:af:29:58:5b:25:46:f9:44:87:
99:09:0a:43:b7:f3:d9:d7:d4:bd:3e:44:70:4f:cb:
05:fe:52:ea:c3:b0:27:9f:b8:5a:f9:ef:4c:20:cc:
00:18:ea:11:5e:29:ae:bb:93:0d:43:24:24:a6:97:
1e:cd:09:05:04:6e:b8:8e:e6:30:4e:0c:4d:a5:f9:
52:8c:41:20:65:da:02:6d:7d:d6:6e:02:78:f2:0f:
6b:73:92:6f:a5:63:d9:0b:32:a4:d4:e2:69:3f:83:
1f:aa:a2:29:59:85:37:0c:94:bb:15:4e:6a:3c:f9:
62:20:f1:68:05:4a:16:36:35:14:f9:bb:02:35:f4:
e4:c4:85:b7:d2:fa:9d:fb:e2:35:ec:e6:89:eb:39:
91:56:b0:04:ef:e8:01:1c:0c:3b:a9:7b:bf:e6:cf:
7e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7D:25:88:00:9B:BE:5E:7C:55:3F:46:D6:3E:1C:6B:BF:36:2D:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56DEDAFE377111F198857704CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.232.0/23
154.222.128.0/24
154.222.140.0/24
154.222.148.0/22
Signature Algorithm: sha256WithRSAEncryption
03:52:e2:e2:4e:6d:61:c2:0b:f5:da:21:c8:4a:57:60:1e:41:
37:eb:0a:32:e7:fd:08:62:7a:44:22:75:78:3f:54:25:bc:25:
f7:0a:fc:38:7b:66:bb:34:c3:5c:b4:4c:fa:7f:4b:c7:27:97:
47:b9:93:7c:e3:6f:81:1c:25:32:7b:f1:28:85:93:fc:cc:27:
0e:56:00:ba:72:f1:0e:1b:6d:85:c1:17:c6:b6:de:8e:c4:2c:
ae:7a:d0:8e:32:e8:cd:58:b9:4a:5e:a1:bf:a1:50:61:fd:59:
14:7b:da:ef:53:77:e9:b2:8e:67:15:0f:6f:04:bb:52:e0:fa:
a3:f5:03:cc:07:51:b8:4e:9c:21:a0:3e:8f:5e:7d:3b:65:a8:
db:cb:a9:d7:fa:c9:54:d2:08:07:45:ec:bb:2a:3d:a3:2b:b3:
20:ee:b6:cc:45:78:10:09:46:cf:f0:3c:eb:45:6a:c8:32:03:
5a:50:d3:7b:0e:14:3d:f4:f4:cc:27:d5:97:6e:ec:cf:c2:ef:
fb:09:fe:9c:00:f0:74:58:2a:a6:ca:9f:e0:43:89:ff:2f:80:
8a:b1:c0:ab:a9:3b:5b:0f:4d:89:6d:1d:39:46:5f:24:ea:a5:
f5:37:2f:21:c1:6a:d8:cc:08:2d:94:5d:f1:54:dc:28:09:08:
22:32:58:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:25:27 2026 by rpki-client