Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2D7185033FA11F1BE74A602CF1D38B0.roa
File: B2D7185033FA11F1BE74A602CF1D38B0.roa (raw, json)
Hash identifier: obnLojSPLlLAwSsOENNA+Gh/arYaSqbIH9Fch69UriA=
Subject key identifier: A5:5D:24:AE:40:51:FC:AA:3C:58:0D:D1:4D:D4:FF:F7:74:A5:FD:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C3C3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2D7185033FA11F1BE74A602CF1D38B0.roa
Signing time: Thu 09 Apr 2026 09:58:46 +0000
ROA not before: Thu 09 Apr 2026 09:58:42 +0000
ROA not after: Sun 19 Apr 2026 09:58:42 +0000
asID: 63099
IP address blocks: 154.222.84.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 09:58:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115651 (0x1c3c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 09:58:42 2026 GMT
Not After : Apr 19 09:58:42 2026 GMT
Subject: CN=69d77856-e86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:40:92:ec:f3:3a:bc:27:6b:b9:87:3d:cc:dc:
92:77:d1:67:6c:3d:8d:fc:0a:29:1e:21:11:12:a1:
65:d9:cc:c0:c2:f0:db:68:f5:4b:7b:b0:b1:f4:36:
fb:ae:d3:2d:d5:dc:87:b0:1f:cb:a0:fd:7c:c1:88:
47:15:04:a4:89:3b:84:5f:20:64:24:c7:bb:40:aa:
d4:45:ee:54:d5:64:94:e7:8f:10:bc:36:87:95:83:
25:ae:7c:ab:a8:69:ec:ab:7f:f4:af:ca:eb:e9:39:
90:5c:17:43:55:2c:97:5a:80:12:36:0e:8f:2a:ec:
0e:09:92:b5:18:ff:fc:2f:48:66:0d:6c:7d:4d:1f:
b1:06:e2:f4:7b:a0:b0:2b:68:88:d9:72:43:c3:c0:
18:07:f3:c4:92:ad:94:b5:93:06:c5:4f:4e:1e:70:
7a:bd:2d:0a:7f:96:a2:00:20:15:36:8b:da:6e:4f:
db:22:82:31:62:f2:4f:47:84:38:8e:d9:da:46:82:
3d:6e:f8:41:55:bc:8a:3b:ae:5b:70:ad:aa:e7:53:
3c:3f:c2:f9:3e:d4:62:e0:93:4f:a3:f9:ca:67:82:
9d:6f:9a:2c:81:58:cb:65:2c:98:31:cf:5b:a8:79:
55:1d:f2:e5:6e:95:46:c6:88:3f:98:0c:e5:b2:4c:
ec:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5D:24:AE:40:51:FC:AA:3C:58:0D:D1:4D:D4:FF:F7:74:A5:FD:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2D7185033FA11F1BE74A602CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.84.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:b3:87:f8:20:ac:33:44:c8:8a:8d:dc:3a:a2:22:a5:a0:59:
fe:c1:a5:7a:9e:86:f1:7a:8a:14:c1:b1:20:e5:36:2f:38:ff:
c0:7a:58:85:8b:85:e6:4a:5b:6f:04:f8:4d:e3:0c:de:7f:82:
42:ad:6b:e8:13:86:a9:f4:9e:c4:d9:2e:a6:80:d9:10:6b:a1:
15:37:34:34:51:84:c3:07:02:af:45:83:2e:21:e1:68:af:10:
4a:5e:6e:a3:37:ed:f5:7e:e7:bf:de:dd:b0:61:a9:f3:6c:2e:
fd:db:01:c6:2a:fa:da:fd:60:7c:29:a6:81:fa:27:bb:c8:a9:
b0:33:06:37:e0:47:fe:e3:bf:a1:07:ed:b6:0f:cc:62:b6:eb:
5c:51:06:7f:d2:c1:41:78:69:30:86:4a:b6:7f:5e:0d:02:31:
4a:18:c2:86:2f:ac:0f:cc:f8:f2:ee:f6:49:7e:f1:0a:9e:15:
fe:bf:f5:e9:7f:af:be:82:4f:f6:1e:cb:6a:13:99:1f:fd:2b:
e4:03:eb:3d:16:53:67:30:45:9f:8b:89:5a:19:7d:aa:84:df:
86:96:03:bf:0d:0e:82:67:35:48:63:ea:28:66:fd:e2:2b:70:
d9:96:9c:4e:24:5f:9e:92:87:89:9e:4b:e8:21:12:21:33:1a:
17:f4:65:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:14:43 2026 by rpki-client