Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A317973A398D11F1A7CA0AF1CE1D38B0.roa
File: A317973A398D11F1A7CA0AF1CE1D38B0.roa (raw, json)
Hash identifier: 3Y8HKffrrXAFKAm5ZJENMKMjx/6I/HsRQWivsx1S0QU=
Subject key identifier: 15:B9:48:84:AA:25:38:E5:01:A2:B4:B0:88:AF:D9:72:56:BD:BD:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C59D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A317973A398D11F1A7CA0AF1CE1D38B0.roa
Signing time: Thu 16 Apr 2026 12:13:12 +0000
ROA not before: Thu 16 Apr 2026 12:13:07 +0000
ROA not after: Tue 21 Jul 2026 12:13:07 +0000
asID: 209242
IP address blocks: 154.198.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116125 (0x1c59d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 12:13:07 2026 GMT
Not After : Jul 21 12:13:07 2026 GMT
Subject: CN=69e0d258-5225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ce:5f:a4:07:cd:1e:c7:15:a7:1f:a8:12:d6:
40:cb:b2:d9:eb:9e:b0:98:7b:e8:84:dc:aa:41:99:
3b:4f:30:66:20:ed:01:f1:c5:df:28:f5:42:6f:d9:
45:e0:2e:e3:8a:74:82:9f:9a:83:bf:1d:1d:e1:97:
9f:02:1f:f0:39:1a:ab:72:9e:48:fd:ad:bc:17:4f:
45:86:2c:bd:09:b5:73:c9:f6:8f:c3:85:55:9d:23:
32:51:e7:77:b3:b1:bc:35:38:11:4f:dd:5a:ab:51:
29:65:d0:a3:1f:e3:7d:6c:49:26:ce:f8:ee:9d:61:
10:c4:71:8e:97:51:69:01:f8:d6:d8:30:04:4d:10:
5b:1f:d5:f4:cd:b4:78:02:9b:e1:dc:9a:0a:ce:b6:
0b:ed:9d:9f:df:63:ca:de:0f:0a:e0:97:cf:fb:f9:
51:67:49:b1:4f:03:6c:54:05:1f:d0:f1:28:e8:54:
74:68:61:42:52:67:08:ba:3e:70:6f:16:92:c5:6f:
b9:1d:14:f1:82:35:8d:ff:be:54:30:1f:e0:4c:9d:
ba:b9:bc:75:8a:60:bb:21:04:dd:2f:6f:0a:87:ca:
e1:35:97:86:19:52:16:0e:d2:79:28:33:58:2f:bc:
41:3e:2d:b9:77:f6:cf:32:7d:aa:1d:4e:c4:b6:50:
43:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B9:48:84:AA:25:38:E5:01:A2:B4:B0:88:AF:D9:72:56:BD:BD:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A317973A398D11F1A7CA0AF1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.173.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:c0:b5:8a:64:78:6f:64:51:13:19:82:8c:ca:b9:79:13:9e:
a3:0a:55:ce:6f:f6:12:2c:d0:9d:ae:06:60:ba:25:61:b8:c9:
c4:dc:9c:8c:9a:53:3f:ae:34:86:ff:a6:6f:34:a9:0e:55:9a:
70:0c:0a:5d:1e:28:59:68:15:81:53:f4:5b:eb:1b:94:79:98:
e8:e3:bb:fd:d2:10:15:15:93:2c:22:d8:d4:1e:59:b3:ea:c5:
85:e1:55:28:4f:eb:e1:41:c0:52:b9:be:f6:3e:e0:f2:c1:13:
cf:76:0f:16:5b:21:c5:72:22:00:65:87:39:40:3f:1f:18:72:
4d:dc:1e:33:1d:bf:82:91:db:d1:32:f4:14:56:71:f3:18:d9:
fc:3c:89:f4:00:7a:1a:8c:73:e1:a7:3b:c5:36:b3:31:55:56:
05:60:69:8f:d6:bb:18:57:00:20:a0:83:f0:58:30:b0:4b:2f:
87:c5:69:c9:0a:19:7d:2a:c5:6a:52:e5:71:0d:8f:d8:12:42:
c6:4f:ae:ef:11:ca:c3:34:fb:49:b8:89:6a:45:5f:8c:d6:ee:
59:32:02:ce:25:8d:03:cb:39:91:6b:16:36:a7:ae:72:79:b3:
56:84:a5:60:b6:71:fb:81:df:45:7d:ad:42:be:d6:22:58:2f:
54:33:f8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:18:11 2026 by rpki-client