Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63E13EB439FA11F18DFFA7FCCE1D38B0.roa
File: 63E13EB439FA11F18DFFA7FCCE1D38B0.roa (raw, json)
Hash identifier: RyyNgoxO3YLz53PZ1xrjGuJTFifPZ/enRKAoJz7Jzc8=
Subject key identifier: F2:D8:36:01:AC:03:69:0E:3B:F6:A7:A6:80:CA:D5:24:4B:7A:05:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C5C1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63E13EB439FA11F18DFFA7FCCE1D38B0.roa
Signing time: Fri 17 Apr 2026 01:11:41 +0000
ROA not before: Fri 17 Apr 2026 01:11:36 +0000
ROA not after: Fri 24 Apr 2026 01:11:36 +0000
asID: 139880
IP address blocks: 154.209.160.0/19 maxlen: 24
154.214.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116161 (0x1c5c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 17 01:11:36 2026 GMT
Not After : Apr 24 01:11:36 2026 GMT
Subject: CN=69e188cd-0a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4a:c2:f8:69:b6:18:5e:48:79:21:34:f1:7a:
b6:fe:72:ae:ca:e4:20:07:63:0e:b5:50:3c:60:b1:
8e:56:66:10:6e:73:60:79:e0:a8:8c:b3:41:7b:87:
83:8d:5e:f7:54:64:fb:75:17:cb:d6:c5:2f:47:4f:
12:2f:87:66:87:76:ff:a7:ca:33:96:f1:8a:28:f6:
74:aa:03:02:dd:69:97:88:a6:32:18:ed:25:33:51:
7c:1d:d1:d9:e5:c0:90:c3:c4:6d:53:35:7b:22:e2:
06:f0:27:cd:46:ca:63:03:f5:9a:8d:6d:fe:8c:55:
8d:2d:23:5f:27:11:6f:d9:e1:9e:6c:b8:ce:99:94:
e9:ca:9b:9a:81:86:e9:b7:ae:78:86:50:20:fe:4a:
0c:5a:c4:8b:55:77:bb:67:4e:d6:8b:5b:80:06:09:
03:9f:5f:f2:1a:6c:f2:c0:dd:0f:b2:e0:e1:ac:ae:
80:49:9c:99:57:a5:87:d9:a4:a3:e7:2f:80:e2:01:
83:09:19:f0:16:c6:b4:ab:fc:32:90:d7:3f:1a:c5:
15:dd:42:1f:cb:c5:f8:5c:48:a3:a6:e4:75:52:c0:
45:cb:18:5c:b4:2d:cc:24:f0:c5:32:f4:f6:eb:9f:
b2:c6:2b:8c:0c:55:7d:68:c4:b9:52:fa:78:de:2f:
d3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D8:36:01:AC:03:69:0E:3B:F6:A7:A6:80:CA:D5:24:4B:7A:05:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63E13EB439FA11F18DFFA7FCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.160.0/19
154.214.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4a:25:76:18:f6:d0:a7:63:44:e6:98:17:f1:02:1e:7f:c1:4a:
ba:95:29:a4:73:ae:3a:5c:fe:85:13:17:75:a9:d4:5e:88:d5:
41:71:be:29:bd:28:ad:b5:c8:dd:b4:00:71:49:71:f4:08:5d:
27:83:70:22:b4:fd:31:ad:06:19:69:57:17:8e:80:ed:9e:40:
48:fe:4d:15:fd:d1:98:3f:24:a2:8b:30:3c:8c:a9:8e:6d:21:
5c:ed:05:6d:f8:d3:34:17:4c:ec:54:dd:ff:d6:bc:b2:d7:e8:
19:b7:fa:81:59:bc:f9:56:e0:ab:88:bb:de:f3:dc:b3:82:04:
ca:f2:bd:6a:85:00:60:05:76:7b:0e:61:d6:dc:83:b5:12:20:
03:88:45:b8:61:4e:1a:60:b1:05:83:9a:3b:e4:05:1d:53:51:
95:bc:6b:d1:1e:17:fe:c1:06:2f:40:77:84:aa:87:d4:fb:4e:
7f:b5:3e:c1:8a:1b:47:98:41:02:0a:82:c6:10:27:21:53:aa:
10:29:2c:e2:26:d9:46:10:a1:0e:44:3c:bb:a2:05:fe:55:1a:
bf:bc:f0:43:88:1a:60:08:c7:18:7e:d2:ba:ae:1d:4c:f2:60:
66:bf:c0:e2:8a:4d:d3:0c:e2:60:fa:ed:7a:80:c8:2d:0f:10:
05:94:de:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:28:46 2026 by rpki-client