Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9647CCD033F911F1978378FCCE1D38B0.roa
File: 9647CCD033F911F1978378FCCE1D38B0.roa (raw, json)
Hash identifier: vdlmTCsb8mpcfxYr0XJYYMR0ifgZNdYFqqrfdMAK3Gw=
Subject key identifier: 93:16:48:C1:C9:84:57:21:31:85:D5:8C:0E:56:18:E4:ED:0B:9B:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C3BB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9647CCD033F911F1978378FCCE1D38B0.roa
Signing time: Thu 09 Apr 2026 09:50:49 +0000
ROA not before: Thu 09 Apr 2026 09:49:20 +0000
ROA not after: Sun 19 Apr 2026 09:49:20 +0000
asID: 32043
IP address blocks: 154.194.5.0/24 maxlen: 24
154.203.8.0/22 maxlen: 24
154.203.12.0/22 maxlen: 24
154.203.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 09:49:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115643 (0x1c3bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 09:49:20 2026 GMT
Not After : Apr 19 09:49:20 2026 GMT
Subject: CN=69d77679-c2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:31:fd:79:85:7a:30:a6:ae:23:0c:73:ed:0c:
2a:51:18:5c:4a:3b:9f:0d:14:ca:78:3d:f2:b6:7c:
ff:10:72:1f:06:ed:62:f7:e3:19:22:d1:2d:9b:09:
21:14:cc:b0:8f:b1:99:19:fa:92:e2:16:56:97:18:
f7:09:b7:02:8b:6a:e5:55:99:2e:a8:d0:2c:70:17:
19:ed:04:d5:fd:63:99:d8:9b:62:27:68:b0:c7:e7:
c3:57:6b:fa:1f:66:22:66:a4:1f:ad:a1:16:86:ed:
25:47:2e:19:36:91:69:d4:c2:71:7b:a3:57:18:50:
d7:90:81:49:20:cb:2b:0d:63:8f:d6:fa:ba:cb:e0:
0e:8d:ca:b8:2b:52:2d:d1:56:60:b6:d1:27:fb:2a:
05:80:07:bc:80:b0:53:40:43:21:20:90:e4:d7:23:
43:8e:e3:d3:02:6f:5f:b8:61:6d:68:c4:b2:a5:ab:
21:fb:8e:8b:2c:01:93:64:c8:90:28:ae:92:6d:15:
2c:d4:be:b4:75:c4:4b:ea:4d:47:3e:42:7e:ac:6c:
d3:62:09:c6:de:30:26:00:84:b4:28:42:97:51:ea:
7b:9d:c4:83:55:68:ca:42:6c:04:67:a7:30:ab:68:
e9:69:fd:18:0d:58:85:4f:8b:6c:2f:25:4e:b5:bb:
25:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:16:48:C1:C9:84:57:21:31:85:D5:8C:0E:56:18:E4:ED:0B:9B:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9647CCD033F911F1978378FCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.5.0/24
154.203.8.0/21
154.203.243.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:c2:cb:a6:89:e4:46:80:d7:d0:c6:fe:66:3b:be:f6:72:0b:
98:62:f2:33:20:44:ae:9e:57:1a:a0:b7:0b:77:b6:e5:ff:87:
ce:36:18:99:24:0d:78:16:eb:4e:ce:b4:44:2f:4b:77:1b:f4:
c6:2f:17:84:64:6a:9a:22:ee:24:ae:b3:9f:4f:7b:89:c5:2f:
c4:a8:64:5f:f6:15:56:f2:fb:7b:08:fe:e8:6e:e0:c6:3e:0f:
c5:7f:c3:4a:0b:fb:f5:2b:98:93:0b:ba:8f:26:83:c2:0b:93:
86:91:27:c6:ce:df:9e:10:74:38:63:e0:9e:ba:f5:27:37:c8:
b1:77:3e:c0:33:52:75:d7:10:ea:4a:3c:bc:ed:3d:bc:dc:79:
cf:05:af:2f:fe:56:1e:76:aa:81:97:be:38:0d:49:f7:df:83:
67:c6:51:5c:1f:4c:35:c7:eb:51:26:c1:4a:5c:34:35:13:d9:
8a:1f:2e:96:90:6d:5c:d7:d7:8f:76:7f:b6:80:36:0c:c5:c1:
f4:59:d3:57:05:6c:02:01:6d:b7:a3:09:47:84:46:69:91:57:
27:c0:7b:82:e4:42:ea:23:68:20:78:38:30:c5:be:ff:48:6a:
c2:b5:b3:66:0c:3c:8d:ae:66:a4:43:76:78:da:09:35:07:82:
de:98:57:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:23:36 2026 by rpki-client