Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5865C78630D511F1A769C8BDDAE4EC9C.roa
File: 5865C78630D511F1A769C8BDDAE4EC9C.roa (raw, json)
Hash identifier: mdB2lvL3pxOeOKlSxHJuF0hWdQxLyq4/j/5UhiT18tI=
Subject key identifier: 4B:48:A1:9D:91:03:C8:29:62:D9:51:10:94:6B:0B:AC:6A:1C:F1:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C310
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5865C78630D511F1A769C8BDDAE4EC9C.roa
Signing time: Sun 05 Apr 2026 09:53:50 +0000
ROA not before: Sun 05 Apr 2026 09:53:45 +0000
ROA not after: Fri 08 May 2026 09:53:45 +0000
asID: 45194
IP address blocks: 154.84.215.0/24 maxlen: 24
154.84.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115472 (0x1c310)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 5 09:53:45 2026 GMT
Not After : May 8 09:53:45 2026 GMT
Subject: CN=69d2312e-6c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:93:b1:60:cd:eb:16:59:47:02:04:53:8b:11:
28:c8:2c:f3:7c:78:d1:47:18:e8:78:30:ff:66:bb:
e3:14:e1:ad:fe:4d:9d:10:68:a6:4c:2d:63:3b:71:
31:cc:8f:6a:f6:d8:d2:4e:93:30:89:cf:de:57:09:
df:19:88:a6:3c:19:4a:6c:18:3d:dd:99:c7:24:4f:
f1:e2:32:cb:40:4f:1f:c5:94:a3:30:51:c2:4f:14:
40:b3:a1:26:17:71:a0:b3:06:b3:d6:30:73:26:56:
6b:a8:da:cf:65:49:bd:7c:2f:5e:ef:6c:6f:bd:99:
5c:32:74:1d:31:61:4d:b0:81:ed:89:51:f1:68:18:
c7:70:15:c5:0e:aa:71:7d:a0:95:78:98:bc:51:25:
50:62:16:c2:a4:a3:b1:3c:da:d8:93:fd:a4:94:c1:
22:94:80:c9:9e:cb:c8:18:75:36:c0:bc:37:5f:5e:
67:49:0a:51:dd:4c:76:3d:c3:cc:ad:89:11:2c:2d:
0c:15:e6:2a:c9:82:c9:3c:e9:01:50:57:44:31:47:
bb:76:f5:b1:26:16:13:63:ee:e1:2e:4a:af:d4:8b:
82:2f:47:54:7b:65:99:24:f3:3d:cd:52:9c:b0:84:
4a:a1:c5:38:15:43:88:df:f7:11:0b:b5:b7:be:fe:
94:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:48:A1:9D:91:03:C8:29:62:D9:51:10:94:6B:0B:AC:6A:1C:F1:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5865C78630D511F1A769C8BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.215.0-154.84.216.255
Signature Algorithm: sha256WithRSAEncryption
87:d9:aa:48:e9:a0:29:ca:36:45:e7:29:fc:ea:09:97:85:d2:
2e:22:59:ec:07:eb:82:75:5e:29:cb:04:43:5c:5f:71:79:91:
bc:72:9a:7d:a8:33:9d:63:70:c2:24:91:18:5e:ad:12:8c:bc:
89:88:8f:34:89:92:66:4d:77:40:11:58:16:3f:1e:14:a9:1a:
79:1c:40:1d:4a:ba:bf:6b:f9:df:4f:c8:1a:76:37:f4:c3:b8:
d4:54:72:23:ab:77:dc:6e:46:59:43:46:83:ec:92:c7:d5:b2:
dd:54:30:6e:5f:1e:a7:46:a2:23:f1:13:92:2d:21:5e:8d:e6:
ab:c0:d6:95:b6:ae:e2:ae:0a:02:ca:4a:b4:74:8f:7e:20:eb:
30:5c:96:75:ec:59:de:fb:fc:bb:28:a0:d4:ed:32:98:ef:2c:
41:2f:19:f1:68:e8:5e:25:2a:84:23:3e:07:6f:14:1c:23:0e:
8d:99:7a:f1:fc:0d:5e:4b:31:e2:0d:9b:dc:b2:57:cd:80:b7:
08:50:da:08:da:76:03:09:02:9d:12:52:46:79:ce:3d:35:69:
75:d3:5c:ec:4a:9a:ec:9d:72:68:41:9e:d9:df:69:06:e3:a2:
c0:5b:87:ea:22:f4:6c:5a:8d:c2:83:17:1b:f9:d7:57:81:23:
a0:9b:c7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:58:16 2026 by rpki-client