Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/828C978A38D011F1B7CA11EFCE1D38B0.roa
File: 828C978A38D011F1B7CA11EFCE1D38B0.roa (raw, json)
Hash identifier: Yd8E+MI5x6+swCfcj34XKC9aYGET1qpYp4z9JPOXdwA=
Subject key identifier: 93:ED:59:F3:F4:EA:07:C7:B8:81:9C:2A:1D:26:4E:67:02:9C:49:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C568
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/828C978A38D011F1B7CA11EFCE1D38B0.roa
Signing time: Wed 15 Apr 2026 13:39:22 +0000
ROA not before: Wed 15 Apr 2026 13:39:16 +0000
ROA not after: Thu 30 Apr 2026 13:39:16 +0000
asID: 9304
IP address blocks: 154.92.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116072 (0x1c568)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 13:39:16 2026 GMT
Not After : Apr 30 13:39:16 2026 GMT
Subject: CN=69df950a-2a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:77:b0:74:15:ad:5c:9f:5d:e5:d6:02:41:4e:
eb:36:bb:d4:b1:76:61:2a:28:49:52:76:97:64:8f:
72:66:4f:ae:7f:b2:e6:4f:41:d4:7d:4e:fd:d2:17:
9c:58:79:6c:6e:bd:4b:2b:80:33:ed:21:eb:dd:ff:
9d:b4:31:d4:aa:a2:74:7f:2f:61:50:3b:b7:ed:2b:
03:97:01:f8:ac:bc:92:61:5a:6a:34:69:c3:6e:c5:
a3:55:3b:7f:23:c3:a5:89:c0:4e:b8:d1:76:79:92:
37:02:43:50:0b:dc:b7:74:2e:2c:5a:69:5b:fa:d3:
9f:53:29:fd:63:e4:b6:a0:80:bb:43:35:96:95:82:
86:b0:6a:81:db:0a:8e:6c:e3:0b:0d:5f:0c:f3:75:
99:0e:60:e8:d1:07:50:a5:f0:4b:d3:c0:bf:83:15:
aa:86:96:bc:41:1f:42:00:f6:b3:4e:97:3a:3c:62:
3c:22:ea:c4:23:1a:f5:76:17:ae:63:07:71:fc:37:
5d:5d:f8:5a:bf:5a:c3:17:27:c2:31:35:23:3d:4a:
7a:9c:db:5d:33:0e:25:22:5c:5b:01:e4:86:ab:a3:
a2:4e:43:45:41:1c:24:2e:38:9c:92:71:9e:1f:aa:
b9:44:ea:03:cf:86:32:20:49:49:ac:6a:9e:c5:c2:
ee:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:ED:59:F3:F4:EA:07:C7:B8:81:9C:2A:1D:26:4E:67:02:9C:49:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/828C978A38D011F1B7CA11EFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.216.0/21
Signature Algorithm: sha256WithRSAEncryption
a5:f0:5f:d0:bd:83:21:4b:8d:44:c2:68:68:8a:9f:4b:52:96:
09:86:28:c8:f5:e3:8d:3b:ee:5f:eb:ae:c5:f3:4f:84:20:b4:
bf:1c:76:b2:60:d1:79:14:6a:17:cc:68:f9:f0:43:4d:f6:5c:
3f:39:d7:93:ae:ea:fe:8b:2b:1c:3c:ef:47:f3:be:6c:5d:f3:
87:91:9f:f0:08:ff:b0:7e:32:d3:d1:46:cb:1e:e3:05:21:dd:
05:58:fc:0c:7f:7e:c2:24:95:60:3e:e1:d3:32:78:73:58:4b:
bb:d2:0a:2c:da:84:fe:ab:bb:16:29:06:24:86:15:bf:c7:5c:
7a:bc:78:6f:f3:ad:c0:26:95:fd:8d:ca:e1:30:2a:c3:45:be:
7b:9f:6a:86:93:60:b7:b3:7f:a1:7d:9d:01:39:ad:a9:81:9c:
37:bd:f9:97:4e:cb:24:6b:31:85:89:8a:d9:11:e8:6f:4f:48:
2a:d3:81:1f:7c:50:42:b4:22:9a:43:14:44:90:56:55:f2:72:
81:3b:86:07:65:25:cc:c0:5f:b2:67:e3:fc:7d:fa:d0:48:f1:
cd:97:28:34:7e:7c:fc:ae:e3:24:0f:4d:d9:96:dd:0e:c8:f5:
94:45:24:c9:15:f1:fb:34:46:65:d1:aa:9e:1e:02:6b:07:22:
ad:3c:d4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:01:06 2026 by rpki-client