Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/701726022E9311F1BA876F98DAE4EC9C.roa
File: 701726022E9311F1BA876F98DAE4EC9C.roa (raw, json)
Hash identifier: cqx4tKgqSmdyKddpv91x4S6TH0cEmFa9bmgoBgZ5FI4=
Subject key identifier: ED:95:EF:24:81:11:E7:ED:17:27:07:14:90:54:78:4D:76:E3:40:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C24D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/701726022E9311F1BA876F98DAE4EC9C.roa
Signing time: Thu 02 Apr 2026 12:57:00 +0000
ROA not before: Thu 02 Apr 2026 12:56:56 +0000
ROA not after: Sun 10 May 2026 12:56:56 +0000
asID: 135377
IP address blocks: 154.82.22.0/24 maxlen: 24
154.82.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115277 (0x1c24d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 12:56:56 2026 GMT
Not After : May 10 12:56:56 2026 GMT
Subject: CN=69ce679c-c507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:32:80:e9:4e:83:4c:92:bc:2b:fc:41:ca:30:
47:ba:14:ef:38:1b:9f:c5:4a:0c:6c:5e:c9:49:f4:
6e:24:5b:60:66:bb:1f:9d:a7:7b:bd:55:82:f1:f6:
b6:4e:46:6a:a3:69:ab:c5:dd:40:32:76:18:5b:85:
e2:b7:8d:a1:39:ca:5e:43:b4:b1:f9:fb:95:80:32:
d0:90:49:5c:12:69:cd:d4:e4:78:97:24:31:b1:cc:
d0:13:8f:b0:9e:a1:6e:90:c8:00:6e:8f:3c:b5:db:
23:a4:bf:d8:0d:c3:2c:3f:17:d1:b0:52:da:50:56:
6b:d9:28:45:25:d0:ee:8d:43:f5:73:99:2d:ed:49:
66:ba:6f:6d:ef:5c:a2:32:32:4d:cc:fd:1c:b6:ed:
f2:24:a8:42:73:12:7d:e4:1b:35:3f:44:70:88:38:
36:2c:e3:f8:44:9e:fe:6c:d8:ce:4f:75:32:be:fb:
26:73:29:19:08:ba:3c:1f:20:30:ba:c4:08:03:56:
31:52:82:23:f8:ed:19:3e:20:d4:2d:bb:6e:2a:d5:
b5:a6:9a:12:e4:2d:3e:4c:17:fd:91:0a:5f:75:44:
9a:2e:e8:dd:68:b4:e5:d2:da:5c:3e:c1:78:4f:c3:
6a:72:27:5d:ce:d0:86:fc:b1:5c:dc:4d:5f:d7:90:
6f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:95:EF:24:81:11:E7:ED:17:27:07:14:90:54:78:4D:76:E3:40:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/701726022E9311F1BA876F98DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.22.0/23
Signature Algorithm: sha256WithRSAEncryption
00:ce:42:c6:01:fb:aa:77:84:f0:78:82:06:f8:1f:f2:11:ee:
41:e3:31:23:bc:57:ac:7d:65:3c:94:b7:f0:07:19:a3:3b:93:
60:83:83:bb:a5:e2:cc:ba:a7:39:35:fd:02:f6:0c:08:b6:12:
4b:dc:73:da:7d:1c:48:a1:10:fc:65:52:cf:74:f8:02:82:4b:
e6:cc:7f:24:01:31:e7:5e:b7:7f:e8:7d:84:e3:0d:95:00:5b:
59:b9:d1:0b:be:4d:4e:8c:be:70:91:9b:a4:31:a6:b0:48:59:
6f:13:4b:ac:67:7d:21:a1:70:8e:19:8a:b7:ed:04:a9:fb:8e:
63:a6:42:e2:db:18:ac:05:97:f8:bb:27:e7:b6:13:c7:57:7e:
3d:49:2e:f1:55:9f:66:b3:7d:26:1e:3c:ab:84:b3:c0:2f:e9:
29:d4:ea:bf:89:56:51:66:c3:29:81:cb:6d:57:91:a3:9d:bf:
f2:d7:9b:8e:1a:98:8e:96:ce:b5:d8:4c:d0:e2:13:d9:42:16:
e8:72:4b:54:eb:fd:92:27:18:2a:65:2b:16:6d:cf:b8:f1:d0:
f2:9d:c2:9c:0f:3f:6c:67:6c:14:ba:c9:44:0c:fc:76:ac:0d:
21:47:dd:73:61:84:33:c6:c7:43:ba:43:9d:69:d6:29:27:55:
82:9d:aa:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:51 2026 by rpki-client