Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D59F9F0340611F1AC5667CBCE1D38B0.roa
File: 9D59F9F0340611F1AC5667CBCE1D38B0.roa (raw, json)
Hash identifier: 0ndDjzDIvDZg42qKRrSse5+olx/iUV6y/T+HoDwvnt8=
Subject key identifier: 29:E4:24:71:09:FB:E9:3E:76:75:43:58:F8:30:1F:26:1C:C6:93:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C3E0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D59F9F0340611F1AC5667CBCE1D38B0.roa
Signing time: Thu 09 Apr 2026 11:24:04 +0000
ROA not before: Thu 09 Apr 2026 11:24:00 +0000
ROA not after: Sun 10 May 2026 11:24:00 +0000
asID: 401783
IP address blocks: 154.196.208.0/24 maxlen: 24
154.196.209.0/24 maxlen: 24
154.196.210.0/24 maxlen: 24
154.196.211.0/24 maxlen: 24
154.196.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115680 (0x1c3e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 11:24:00 2026 GMT
Not After : May 10 11:24:00 2026 GMT
Subject: CN=69d78c54-3f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:41:36:40:d0:c5:60:71:e1:67:af:30:7a:00:
78:f4:6c:43:86:5c:6d:95:73:46:9d:36:87:94:03:
d0:47:e8:e6:cc:69:05:c9:91:d8:5e:fe:f6:36:8c:
2b:a7:c2:df:7d:4a:0b:88:a8:0d:8a:36:9e:46:a4:
89:2b:b9:51:db:e9:91:57:f1:45:a4:52:b9:72:a6:
a8:20:e7:4b:f8:24:77:5e:07:19:c0:92:33:b9:f9:
a8:c9:77:7b:6b:ed:a7:19:ed:b2:e4:ea:bf:51:39:
17:a9:ad:75:f9:22:a8:b1:33:e5:33:21:3f:27:a8:
c9:04:3b:d1:da:2d:7c:8f:5a:18:4a:3c:42:ff:4d:
b6:da:96:c8:01:25:76:a1:de:fa:43:a5:90:93:42:
df:52:5a:c6:57:26:f3:fc:41:00:45:78:01:dc:0a:
01:ff:86:41:e4:48:a7:fe:43:6f:5b:81:93:ad:54:
f1:97:63:75:44:97:7c:cf:6a:59:81:2c:f4:34:c6:
8f:30:8d:aa:c3:1e:7f:e8:e1:38:3c:86:a8:1c:db:
5f:c6:cc:11:bf:36:d1:60:1f:53:69:1e:8f:e6:c6:
8f:b3:46:a6:8b:b6:8a:c1:b6:0c:83:24:ff:9e:7a:
3b:4c:4f:7f:dc:2e:4d:ff:15:31:4e:b9:19:8a:7b:
b0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E4:24:71:09:FB:E9:3E:76:75:43:58:F8:30:1F:26:1C:C6:93:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D59F9F0340611F1AC5667CBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.208.0-154.196.212.255
Signature Algorithm: sha256WithRSAEncryption
c9:da:47:cb:b4:29:df:f4:0e:94:10:d7:a9:d2:5b:19:5f:4d:
6b:75:10:b4:53:03:79:f4:e7:79:41:7d:9e:70:57:07:15:a3:
48:45:ce:8e:63:a2:4b:7f:38:87:a7:49:df:d5:b6:48:ea:66:
ea:5a:e6:2d:d0:e7:30:cd:13:41:c7:15:53:e6:29:49:ad:b4:
1a:70:2c:32:57:ad:80:d5:8d:97:a1:25:45:27:21:40:a3:c6:
b3:7d:20:e7:f5:84:bd:ec:22:ba:a4:1c:3a:85:09:8f:b2:0a:
c2:91:89:77:7b:ec:6d:01:c7:ac:cd:5a:5e:52:55:a2:33:f2:
15:0e:ce:5c:70:d7:b7:1a:a0:e0:aa:61:d5:16:94:a6:92:6d:
51:85:d8:a1:b9:67:f0:37:31:db:3b:fd:8b:12:8d:9d:50:8d:
e3:51:cd:60:5f:ff:6b:28:86:2f:19:bd:7d:f1:3c:d6:38:a2:
a0:94:2d:2e:99:a8:63:94:e6:76:67:07:9f:04:8a:5b:37:76:
a0:a9:9a:5a:91:aa:87:c0:f9:ae:63:6c:96:b1:85:e9:84:f8:
d7:34:ae:1d:db:a4:79:da:c4:ec:a1:62:71:5c:91:57:ae:39:
09:5b:29:ed:48:f5:01:a0:ff:54:c7:63:4b:0f:5b:76:37:02:
d7:b4:46:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:20:34 2026 by rpki-client