Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59571E64366C11F191F83FD0CE1D38B0.roa
File: 59571E64366C11F191F83FD0CE1D38B0.roa (raw, json)
Hash identifier: rNvAod6W1N4/RjBmHMUZaZWlxOsXUlLaxGAZiIOGku4=
Subject key identifier: 56:C3:82:8F:DB:20:A6:46:FE:BD:A8:54:F7:0D:15:BF:B3:1F:1E:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C4CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59571E64366C11F191F83FD0CE1D38B0.roa
Signing time: Sun 12 Apr 2026 12:37:21 +0000
ROA not before: Sun 12 Apr 2026 12:37:16 +0000
ROA not after: Tue 12 May 2026 12:37:16 +0000
asID: 147176
IP address blocks: 154.212.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 15:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115914 (0x1c4ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 12:37:16 2026 GMT
Not After : May 12 12:37:16 2026 GMT
Subject: CN=69db9201-c818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:24:2b:9f:ab:21:d7:4d:d2:00:d4:32:36:59:
5b:6e:3d:a7:73:59:65:a5:90:5f:7d:06:6c:1c:e1:
50:c1:34:c3:88:bf:1d:11:43:16:2c:f6:c3:cb:61:
d0:5f:c3:f3:8b:00:5f:47:06:bb:84:b5:f2:a4:e7:
d8:7f:15:a8:1d:ef:0d:d2:36:a8:43:22:63:ed:b5:
04:dc:44:0b:5e:f9:fa:6d:21:39:92:f5:de:81:41:
f4:25:b7:46:ae:6d:65:7f:b6:7f:42:3d:8a:bf:4a:
5a:2a:d7:6f:20:f0:b8:a1:59:76:41:99:bf:01:87:
67:ef:23:6a:60:ae:bc:98:38:7a:5e:31:b5:03:e8:
23:9d:74:a2:02:ef:c6:94:75:b7:f3:42:9c:2b:4b:
c7:72:5b:3a:a8:69:00:d9:15:91:5a:1d:0e:80:d4:
7a:6c:81:78:e7:a8:f4:9c:b1:08:03:6e:a9:79:c2:
85:20:15:a5:69:f5:a1:52:32:ae:a9:e8:a1:d9:7d:
80:c9:7b:ff:d6:c7:e7:dc:cd:98:94:f3:82:7c:df:
6a:9d:c4:b8:e8:21:21:f5:df:95:2c:a8:c7:12:71:
bc:06:e1:c9:17:95:86:78:0b:88:49:9a:85:c4:e5:
4a:db:77:ce:8b:9e:9b:35:36:80:1f:bb:e2:7d:a9:
c9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C3:82:8F:DB:20:A6:46:FE:BD:A8:54:F7:0D:15:BF:B3:1F:1E:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59571E64366C11F191F83FD0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.139.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:e7:ef:1d:61:84:a8:0f:2e:31:b9:f9:f0:2c:d1:99:fc:df:
e1:2c:01:2d:6f:85:a1:fc:ff:af:fc:4a:39:d0:68:6f:26:3b:
d1:ba:35:f9:db:2d:37:c7:ab:9a:40:01:5e:57:5a:0f:10:58:
ff:06:7a:dd:d0:75:c2:51:b1:b2:81:9c:72:9e:38:1c:67:d1:
5f:69:7c:31:70:f9:8a:63:7c:90:16:33:e8:8b:a6:bb:f3:f6:
68:a3:45:83:25:6c:06:7d:d4:32:2b:12:58:c2:06:42:60:34:
af:54:d4:81:39:99:04:67:75:be:2e:4a:1e:08:9a:f1:6c:1d:
6e:a6:96:51:1c:02:a1:ef:d2:a4:bd:92:06:11:18:f1:83:29:
04:6a:58:a0:b8:f0:a0:54:11:97:c9:08:ed:32:e2:af:6e:2b:
5e:7b:52:ea:a4:54:f3:3c:d6:41:cc:be:38:35:64:1f:94:c5:
75:b8:14:2c:ab:e2:4d:ac:a8:13:27:d2:9d:b7:3d:25:bf:4b:
fb:9b:55:ae:9d:10:d3:46:7a:0c:3c:52:4f:a8:33:bc:5d:4d:
77:f7:0c:88:f7:0b:5c:05:ac:a4:7c:06:a2:4b:64:bf:e4:3d:
43:f3:43:72:6d:7f:43:02:0b:0d:37:6b:7c:b6:57:6b:59:1b:
9a:19:a1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:20 2026 by rpki-client