Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E22C51C356711F19CE76E1CCF1D38B0.roa
File: 9E22C51C356711F19CE76E1CCF1D38B0.roa (raw, json)
Hash identifier: L+KLn39EuppXu8qVMlxTe/w+FVl/c5jdO1vfmoBQpu4=
Subject key identifier: EB:44:13:99:80:BC:70:C9:8F:9C:4A:06:C0:FF:A4:47:30:7D:92:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C48D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E22C51C356711F19CE76E1CCF1D38B0.roa
Signing time: Sat 11 Apr 2026 05:30:58 +0000
ROA not before: Sat 11 Apr 2026 05:30:53 +0000
ROA not after: Sun 10 May 2026 05:30:53 +0000
asID: 141883
IP address blocks: 154.86.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115853 (0x1c48d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 11 05:30:53 2026 GMT
Not After : May 10 05:30:53 2026 GMT
Subject: CN=69d9dc92-b3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cc:8f:b5:e6:91:07:98:96:b7:2d:c8:7d:8a:
32:a9:27:7b:dc:cf:0a:dd:38:b1:16:fd:d8:4e:5f:
3c:73:d6:79:a5:7b:b9:be:44:82:d1:a0:a1:a7:21:
e7:bf:88:4a:43:cc:21:55:0b:e1:e7:2a:04:8b:54:
ef:e6:38:81:55:85:38:d0:89:a6:98:34:73:8d:39:
30:2b:22:72:c4:81:1e:2b:04:fb:01:1b:d1:f9:c1:
4f:de:b6:e6:e7:04:4d:49:20:43:9b:f6:06:d0:e8:
fb:3b:8b:2a:67:ce:51:87:9a:0c:ef:e8:d5:6f:ad:
cc:7b:dc:b7:d7:46:08:05:39:15:18:3f:9d:ca:d4:
4a:93:d1:89:05:4e:ea:bd:09:7b:29:5f:2e:bb:a2:
f2:20:d0:93:fc:90:3a:62:5f:49:8e:10:90:cf:61:
8a:69:a8:76:09:4a:ac:91:ea:96:63:3c:52:1f:69:
ee:4f:e0:c4:19:36:cc:91:ff:b5:2a:c2:1f:5e:69:
e9:d9:35:88:e5:f7:28:88:d0:24:3b:ea:30:39:4e:
8e:1d:0d:fc:04:69:55:5b:8c:d5:93:f9:f2:62:88:
c9:fd:c9:d7:fb:43:15:d9:2d:6b:31:2d:b5:b7:4d:
05:68:46:eb:20:4e:a4:2c:56:a2:07:36:32:cc:91:
f7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:44:13:99:80:BC:70:C9:8F:9C:4A:06:C0:FF:A4:47:30:7D:92:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E22C51C356711F19CE76E1CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.0.0/24
Signature Algorithm: sha256WithRSAEncryption
50:c8:7c:53:96:af:ba:d5:e2:9e:71:ae:c2:3d:31:e4:da:0e:
28:4a:db:c2:93:14:ee:d7:53:bb:d1:da:89:2e:57:5f:55:d1:
c6:a7:d1:44:76:d2:cf:dc:6d:20:b5:fa:55:56:6f:1b:3d:df:
65:e9:09:b5:c2:79:ec:0c:93:89:d4:26:5e:c6:ea:be:d1:8e:
5c:7e:e2:d1:80:e9:ac:4b:f0:50:4c:89:4e:40:66:83:45:3f:
2f:8f:d8:67:1c:26:10:2d:20:cd:1c:d8:bd:ac:32:5c:21:db:
04:6d:1c:f3:69:04:ed:4a:03:f9:cd:6c:2f:f8:5f:20:f5:8b:
00:35:79:d2:3f:6d:8a:61:53:58:f6:48:48:2d:ef:a6:30:77:
fa:5b:36:27:d1:cb:38:d8:c6:55:1b:d1:c2:75:a1:a5:a4:9f:
dd:09:30:71:86:1b:f5:48:80:11:61:4e:44:f4:fc:2f:19:6f:
c0:00:a0:1a:15:a7:63:9d:34:be:b7:e3:31:1a:6f:7e:6e:df:
c9:d3:6d:e3:a9:f1:4f:90:9f:0c:00:54:5e:a9:d0:de:01:17:
9d:b8:96:2d:8a:a4:01:28:e7:6f:e3:78:79:ac:36:f1:90:5b:
d3:5e:f0:f1:13:33:6f:ec:e7:cd:58:d5:5d:39:b9:a3:ae:43:
19:34:c4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:47:39 2026 by rpki-client