Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C09453C349111F1B074BFF6CE1D38B0.roa
File: 6C09453C349111F1B074BFF6CE1D38B0.roa (raw, json)
Hash identifier: scij61PDQanKTiujMXJPm2RtoVjcuA9zZSs95UiZ7zw=
Subject key identifier: 17:40:6A:BA:16:74:3F:A4:2D:99:2C:D2:B6:61:74:8D:FF:AB:7E:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C449
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C09453C349111F1B074BFF6CE1D38B0.roa
Signing time: Fri 10 Apr 2026 03:57:41 +0000
ROA not before: Fri 10 Apr 2026 03:57:36 +0000
ROA not after: Sun 19 Apr 2026 03:57:36 +0000
asID: 9304
IP address blocks: 154.211.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 03:57:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115785 (0x1c449)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 03:57:36 2026 GMT
Not After : Apr 19 03:57:36 2026 GMT
Subject: CN=69d87535-d210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a9:67:9f:2a:33:3c:ca:b7:60:b8:0c:a1:04:
1d:6c:d4:25:bc:5b:6d:57:71:2d:c1:b0:f8:d4:80:
49:30:84:1d:e1:3a:36:6a:27:28:17:d2:57:13:f5:
de:5b:18:ca:e3:a2:6e:a0:b4:fe:a3:43:d7:65:55:
b8:79:cf:95:4c:02:3c:d8:0b:ab:fb:2a:fc:15:7c:
f9:4b:8b:7c:72:54:64:a8:63:e3:17:82:ed:72:54:
b4:92:d4:76:93:6b:43:43:16:52:23:28:ce:a5:b3:
b5:d7:e7:24:ec:2e:c4:7d:44:16:c4:39:05:40:2e:
df:fd:b9:88:64:a2:09:b1:6b:fb:73:64:41:7f:71:
49:61:ba:82:c8:a0:37:5e:05:bc:fc:6b:53:e2:fb:
fb:3b:52:cb:80:75:fd:49:cd:90:2a:7a:7b:ae:79:
cf:3e:13:48:cf:55:75:2f:b6:35:35:32:11:43:f7:
36:92:83:c2:0d:86:ad:e8:1b:98:06:ae:e9:c3:60:
25:f8:b3:00:0a:23:13:4c:54:bf:ca:40:42:9b:2f:
b2:a9:19:56:4e:a5:1b:eb:a8:07:53:bd:a0:c5:c9:
66:55:c4:13:23:00:4a:c0:80:5b:08:b5:65:e2:3a:
0d:75:5e:8b:83:32:93:6d:54:6f:68:1b:0f:4c:6e:
a7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:40:6A:BA:16:74:3F:A4:2D:99:2C:D2:B6:61:74:8D:FF:AB:7E:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C09453C349111F1B074BFF6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.24.0/21
Signature Algorithm: sha256WithRSAEncryption
b6:e3:c1:88:64:4d:9f:7e:81:47:1f:ff:17:35:8a:a2:43:15:
05:1f:f9:ce:f5:f5:9d:ba:1a:2a:9d:b2:9a:4d:23:8e:ae:c6:
0d:5a:a2:7b:e1:75:84:c5:fe:a7:ff:7d:8a:93:a2:ce:f4:c6:
0b:61:b2:6a:20:88:38:06:4e:6f:06:64:55:b0:c3:6a:83:05:
63:dd:73:e2:26:03:23:c8:1a:bd:64:c9:6b:e7:21:21:d1:65:
dd:0a:ff:05:85:63:39:85:5b:88:a3:fe:f3:c2:11:a6:47:df:
bb:e6:b6:9c:b2:8f:4b:d0:9d:c4:13:7d:68:bb:f3:df:e7:74:
cb:76:79:d6:1d:45:e6:49:0d:08:9e:e2:b1:89:54:db:de:05:
db:50:be:7a:47:35:c8:0b:6b:46:b4:4a:2d:f8:e4:d0:b4:f1:
a3:26:41:6d:ea:f4:cd:84:03:d6:5c:dc:60:f0:ea:b2:9b:61:
04:e6:55:7e:15:e4:32:a5:37:1d:d2:a1:79:93:d8:d5:3b:0a:
07:cb:27:95:9a:82:60:09:d2:09:27:21:40:90:67:62:62:77:
a8:33:b8:cb:5e:f8:b8:0c:9e:77:b2:a5:c5:f4:af:bd:b0:d1:
6d:01:0b:f0:f7:fd:b8:9d:21:4a:27:27:ea:9c:78:94:82:db:
a7:fe:9b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:28:20 2026 by rpki-client