Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B7DF9F6364E11F1AD28361CCF1D38B0.roa
File: 5B7DF9F6364E11F1AD28361CCF1D38B0.roa (raw, json)
Hash identifier: vbDjll7/67mzHVD2eZyg4Ak72Up8hdvylaj7jN80ano=
Subject key identifier: FF:20:B4:DC:6A:0D:BE:5A:2E:79:3F:51:29:5A:9B:F1:D8:A5:BB:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C4B6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B7DF9F6364E11F1AD28361CCF1D38B0.roa
Signing time: Sun 12 Apr 2026 09:02:40 +0000
ROA not before: Sun 12 Apr 2026 09:02:35 +0000
ROA not after: Mon 18 May 2026 09:02:35 +0000
asID: 20326
IP address blocks: 154.194.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115894 (0x1c4b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 09:02:35 2026 GMT
Not After : May 18 09:02:35 2026 GMT
Subject: CN=69db5fb0-e165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e0:e1:2b:a5:de:72:b4:87:66:94:68:c0:26:
f7:55:23:fd:66:0a:be:4e:e2:dc:e5:64:62:1b:19:
f8:a8:a3:61:e5:05:1a:42:5e:bc:f0:79:81:3f:3e:
d0:49:a8:9a:5a:af:4e:64:24:7a:b6:44:4d:8c:63:
7c:12:4c:04:19:af:6f:0a:5d:50:76:7c:ae:2a:9d:
ac:5a:13:42:6a:34:94:e5:82:4e:1f:0b:87:e3:34:
d8:bc:14:a8:ab:90:28:e4:ca:7a:f8:16:cc:1e:70:
c6:da:99:fb:78:2f:af:b4:b9:00:bd:63:dd:14:04:
ea:14:b0:3e:94:2b:97:87:4f:e1:ae:50:02:33:22:
5f:9b:f6:ae:15:be:d9:92:24:ff:6a:3b:99:2b:3e:
e6:c0:11:5e:b4:85:40:de:cb:e4:6c:dd:9d:f7:ef:
81:22:19:39:d7:4d:df:28:86:e8:da:d6:41:df:62:
88:1c:13:02:c5:92:d5:f5:24:01:ae:8e:16:e1:49:
c8:95:3f:48:08:9d:b9:ac:68:9a:83:d1:d0:09:de:
99:ea:ce:fa:f2:5d:d2:53:8b:22:84:60:55:f5:31:
5c:ad:33:df:66:65:21:fa:fe:5c:ce:b4:eb:86:9c:
bd:88:2c:d6:26:a6:37:e1:3e:47:9e:90:e0:41:60:
54:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:20:B4:DC:6A:0D:BE:5A:2E:79:3F:51:29:5A:9B:F1:D8:A5:BB:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B7DF9F6364E11F1AD28361CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.228.0/22
Signature Algorithm: sha256WithRSAEncryption
24:2c:09:fc:ef:d8:93:2f:dc:43:45:9c:c5:ed:68:38:c8:70:
6f:58:12:90:75:ea:be:e3:29:31:ee:14:26:0d:50:9a:c9:ea:
1e:2b:08:42:1e:d0:81:f3:47:ef:d2:24:31:cd:53:32:2c:c2:
43:2b:35:16:a1:b4:a3:25:1c:17:1a:e3:ea:07:34:b0:a6:e1:
2e:c9:6b:df:49:32:77:b0:2b:d7:73:bb:3c:11:22:17:3e:9f:
ea:17:27:26:de:cf:fb:4e:61:19:b9:13:19:a5:b7:b7:a7:70:
cb:6a:36:b5:9c:3e:60:48:8c:2b:6e:90:90:a1:15:35:f9:bb:
a2:1c:9d:bb:6d:fc:33:95:3e:c6:8e:1a:1f:f1:36:9d:5f:aa:
f5:c0:fa:48:03:38:ce:c1:b5:7a:e7:83:95:04:94:9c:4a:9f:
27:e1:a4:8b:72:10:a8:74:57:0b:db:db:b8:70:21:0d:a1:c4:
fb:03:64:b6:03:5d:c9:61:5d:d5:fd:ac:89:bb:3c:5f:3d:35:
57:64:4e:63:0f:cd:06:b6:f0:fb:b9:63:ae:60:80:f5:e1:3d:
47:85:98:ce:48:dc:21:3a:de:77:06:eb:73:e8:ad:51:44:e3:
3c:2e:bc:66:dc:51:e9:f2:9d:e8:4f:c8:85:6c:f7:2c:cc:5b:
b9:d1:08:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:41:39 2026 by rpki-client