Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6976CA582C0B11F1BB56D2DDDAE4EC9C.roa
File: 6976CA582C0B11F1BB56D2DDDAE4EC9C.roa (raw, json)
Hash identifier: hd17erD+r6xgwscco3mNIWCKqIYCLMcL5DoBAxvy/LY=
Subject key identifier: B8:87:0E:63:AA:E1:83:CA:A8:FD:9B:45:38:E5:1C:FD:FD:52:E3:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C1AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6976CA582C0B11F1BB56D2DDDAE4EC9C.roa
Signing time: Mon 30 Mar 2026 07:38:15 +0000
ROA not before: Mon 30 Mar 2026 07:38:11 +0000
ROA not after: Sat 25 Apr 2026 07:38:11 +0000
asID: 54801
IP address blocks: 154.90.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 15:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115117 (0x1c1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 30 07:38:11 2026 GMT
Not After : Apr 25 07:38:11 2026 GMT
Subject: CN=69ca2867-780b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:57:25:19:97:dc:da:09:03:27:77:3d:be:48:
e9:05:b6:ba:02:9f:a3:a3:83:74:71:46:88:9c:36:
de:e3:68:a6:74:8c:09:e5:0b:9a:c3:ed:4c:66:23:
20:f6:a7:5b:9e:b7:59:05:54:67:33:a7:df:c0:ef:
b8:72:9c:61:70:d5:29:bf:63:ed:2b:c8:c5:64:4f:
70:ef:49:df:2d:19:b1:e5:7f:0a:8a:2d:d1:d6:62:
48:03:c1:4e:7a:c2:76:82:8f:8b:0a:e3:0a:6a:d4:
d5:28:0d:64:a8:53:50:6a:09:12:64:d8:6e:d8:a6:
88:84:6f:86:f5:6a:76:84:1d:1e:d9:89:9d:00:e8:
9a:f6:fd:4f:b4:a6:12:f1:a6:5b:a0:0e:38:ca:f4:
e2:c3:82:59:fd:1f:de:c5:69:c7:07:87:42:2d:35:
e3:90:29:bf:f9:93:78:1c:c4:a2:25:64:33:7b:45:
ed:d9:ea:f2:b8:9b:39:ce:ec:e8:28:9f:9e:7a:43:
4d:c2:0e:91:ee:8e:c4:cb:70:d3:9d:16:af:84:f7:
3e:f6:45:b4:11:94:28:f6:e1:fc:89:8b:b9:82:03:
0c:06:41:17:ba:e5:2b:8c:fa:fe:79:0e:3b:e0:3c:
8e:0e:84:c8:9b:cc:82:4f:ad:63:ec:29:42:5a:6f:
76:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:87:0E:63:AA:E1:83:CA:A8:FD:9B:45:38:E5:1C:FD:FD:52:E3:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6976CA582C0B11F1BB56D2DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.28.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:da:43:45:cc:1e:b4:2d:9b:2f:65:f2:76:59:68:6f:0a:33:
e6:e4:2d:40:3c:ed:ad:23:95:07:7f:cb:9e:38:54:a2:06:f2:
5a:2a:58:78:ac:0e:71:fd:d6:27:1b:4f:83:f0:87:47:6c:f7:
e5:19:dd:59:60:cc:bf:5c:b1:61:52:e7:db:22:d4:86:af:5c:
b3:62:04:0d:33:e2:62:3e:9c:3b:27:5e:21:7c:21:97:7a:85:
83:d8:4a:e7:9a:ce:76:94:54:e7:5c:4d:bc:47:1c:b4:aa:43:
3f:00:11:0f:8e:54:c8:0f:82:f8:ee:d4:2e:a4:5b:af:8f:24:
f4:d2:c3:b0:8c:ca:5f:b5:82:b5:8a:b6:50:3f:47:e2:69:d0:
56:7f:b6:2b:5a:b1:24:c6:60:45:6e:26:c9:5d:5b:dc:ae:f5:
fc:34:40:7a:82:a9:03:3e:08:58:fd:19:f9:a0:a0:d7:f4:d5:
17:b3:90:cc:62:5e:47:87:c3:0d:98:8d:7c:88:3d:4d:37:8f:
a0:94:f6:95:56:af:9c:9b:52:24:1b:4f:45:84:b6:b2:be:6e:
19:d8:31:f3:b4:4b:74:90:24:96:d4:c2:75:c7:ad:e5:38:f4:
ee:c1:33:de:97:8a:28:56:09:c1:9a:be:8a:8c:37:64:6c:05:
6a:66:d2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:37:38 2026 by rpki-client