Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D593B1A30E411F19F673394DAE4EC9C.roa
File: 5D593B1A30E411F19F673394DAE4EC9C.roa (raw, json)
Hash identifier: 22EX6yrVqrblzR0TrE1lpsDVTDwnGlpiE+LI+srycUo=
Subject key identifier: C3:71:AC:89:C8:0D:27:A4:CA:54:85:98:D4:9B:1F:59:9A:95:8C:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C31C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D593B1A30E411F19F673394DAE4EC9C.roa
Signing time: Sun 05 Apr 2026 11:41:20 +0000
ROA not before: Sun 05 Apr 2026 11:41:15 +0000
ROA not after: Wed 06 May 2026 11:41:15 +0000
asID: 17497
IP address blocks: 154.196.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115484 (0x1c31c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 5 11:41:15 2026 GMT
Not After : May 6 11:41:15 2026 GMT
Subject: CN=69d24a60-31ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3d:5f:29:3f:80:9c:2c:9b:64:c2:e2:b3:85:
83:c3:ba:3d:bd:5f:6a:ad:63:e1:d3:2a:9e:da:75:
3a:08:26:ac:71:27:a9:c4:40:59:0f:e2:74:f3:2c:
e0:30:ab:8e:9e:d3:89:7d:94:37:2f:9b:42:9b:57:
5f:95:bc:0d:35:5f:a1:54:3b:f0:1e:7e:b3:f8:9c:
e7:b6:08:b3:22:01:44:66:be:38:61:7b:3a:25:01:
cb:bc:dd:36:0a:09:6b:03:fa:e3:5d:e0:b0:31:e4:
bd:8e:e9:bd:4d:bc:20:b9:9f:d8:7f:9c:90:6a:e0:
d3:68:e5:3e:67:2a:d6:6f:81:89:d8:31:c4:23:73:
4f:2d:d2:94:e2:dd:e7:1b:da:60:fa:49:4a:58:a9:
02:c2:99:25:7b:98:d7:34:d6:97:98:28:b5:df:36:
59:dd:83:cc:48:2b:fb:77:fb:d8:8f:e8:38:26:2f:
9e:e9:98:26:4a:b4:4b:d5:f0:ed:8e:2d:84:61:be:
03:95:01:ba:52:47:ec:ec:49:ac:e2:55:8c:24:e6:
f6:56:20:5e:33:57:39:58:ba:1d:9b:65:50:a3:1a:
20:67:bb:64:10:f9:6f:69:62:6c:19:37:5c:40:cf:
91:b7:94:a5:db:42:f8:ad:4b:3b:ab:3e:9b:51:97:
bf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:71:AC:89:C8:0D:27:A4:CA:54:85:98:D4:9B:1F:59:9A:95:8C:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D593B1A30E411F19F673394DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.143.0/24
Signature Algorithm: sha256WithRSAEncryption
84:16:ae:88:d1:be:ff:40:ee:12:bb:fe:49:cb:c3:89:3c:f3:
1f:9d:ba:35:68:9c:a1:48:61:27:1d:c7:a5:24:cf:b3:7e:d1:
a2:23:11:88:24:b2:33:ec:96:be:17:63:21:5d:80:01:d0:cb:
8b:24:5f:9c:6e:48:7e:d5:03:35:8f:af:ec:7f:cf:44:9e:4f:
93:ec:f2:cf:f2:70:85:6b:dc:5a:87:df:e4:ef:00:66:46:74:
64:c3:19:6a:6c:58:ca:60:ae:8e:ca:be:4c:6a:df:1e:b3:05:
4a:8c:7a:9e:e7:e3:e4:1b:6d:09:df:f1:23:05:bf:89:94:5e:
2a:18:59:5a:1a:38:4c:64:e5:22:4f:c2:a8:24:53:6d:e5:b4:
42:d6:73:42:6c:e4:3c:92:78:2f:53:aa:bd:37:b7:d8:18:44:
62:1a:b9:b0:12:a8:f9:ea:5a:98:15:eb:cb:4e:3c:58:78:d5:
64:e6:dd:ef:89:de:d5:5c:4a:96:e3:5b:ea:2a:4c:57:f9:e3:
8b:41:fc:72:01:7d:00:f1:f8:23:d9:3b:3f:35:26:2b:b2:e7:
c8:a4:31:7a:45:8b:83:6b:a9:f1:be:60:bd:9a:a4:87:6c:b7:
cc:88:1b:22:ad:b0:0a:9c:79:37:2f:bb:91:6b:f8:be:1f:00:
4a:c5:fc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:25:40 2026 by rpki-client