Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C96B1B1638A511F189D29CEFCE1D38B0.roa
File: C96B1B1638A511F189D29CEFCE1D38B0.roa (raw, json)
Hash identifier: 5MSyJfcpHhgOSdUzwT8Ls3DKnGqwSHc0IPYs5eU9rk0=
Subject key identifier: 26:2E:B8:5B:B7:B7:84:82:23:CD:F5:A5:B5:FF:21:EC:12:AD:BF:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C550
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C96B1B1638A511F189D29CEFCE1D38B0.roa
Signing time: Wed 15 Apr 2026 08:33:33 +0000
ROA not before: Wed 15 Apr 2026 08:33:27 +0000
ROA not after: Wed 06 May 2026 08:33:27 +0000
asID: 272011
IP address blocks: 154.88.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:53:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116048 (0x1c550)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 08:33:27 2026 GMT
Not After : May 6 08:33:27 2026 GMT
Subject: CN=69df4d5d-0975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fa:bb:a9:a6:a3:39:92:8b:da:1c:4d:45:2f:
3c:a1:ab:e1:43:18:13:8e:ff:fa:42:ca:b3:a2:3e:
fb:ff:93:99:fe:2e:2b:71:5f:3a:dd:55:89:18:37:
f4:ba:94:87:70:96:58:41:89:8d:9f:a0:5f:0f:e8:
b5:01:87:fa:b6:7f:f5:c1:6c:28:7e:20:4a:13:46:
20:11:d9:d1:de:7a:b7:08:e4:cf:d2:fd:93:b2:db:
3a:af:07:1f:e0:18:2d:c7:f3:20:9b:ec:8b:d5:be:
2f:9f:16:36:5e:35:96:7e:99:d9:10:f3:3d:e3:25:
75:f9:50:0f:64:15:9a:42:ed:fe:51:5b:7b:2c:41:
66:ff:f1:68:41:7e:d3:5b:17:68:7e:a9:cd:6b:ea:
85:c8:a3:4d:2c:75:49:5e:81:31:f7:92:c9:75:f7:
b9:5b:71:ba:11:db:1a:31:5c:78:8c:97:df:b4:e7:
de:6c:46:45:63:cf:c9:0f:da:f1:d7:31:f7:e0:7b:
74:7a:e7:00:1c:57:84:ac:95:db:c0:94:04:8b:74:
b6:80:be:34:db:dc:7d:a6:70:9c:0c:77:c7:c0:88:
75:3b:18:21:cb:a1:7f:a9:25:e2:fe:0f:7a:54:e5:
76:37:bf:82:8f:55:fd:62:71:7e:d7:de:69:b0:a9:
a7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2E:B8:5B:B7:B7:84:82:23:CD:F5:A5:B5:FF:21:EC:12:AD:BF:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C96B1B1638A511F189D29CEFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.189.0/24
Signature Algorithm: sha256WithRSAEncryption
25:c0:51:1a:4b:56:26:69:84:f8:6f:41:30:91:55:79:68:67:
27:cb:12:dd:70:21:07:2a:12:6c:ad:4f:89:da:01:cd:5c:94:
16:aa:fc:c6:28:df:78:22:41:c0:b4:4a:7b:23:92:66:1d:d5:
d0:90:6f:5c:5e:d7:6f:3d:65:cd:71:e4:f1:d4:d1:73:40:1d:
53:4a:ee:11:ca:4a:b4:f6:0c:01:d6:d3:5a:88:7a:22:6c:61:
bb:da:bd:12:cf:18:0d:f5:57:c9:8d:72:6e:b0:e1:12:64:10:
7b:c8:52:69:43:b1:40:ca:de:e5:56:32:56:ba:37:7d:b1:6c:
24:ce:da:ea:92:ba:af:ef:2f:13:4d:69:fc:18:b8:5f:7a:ea:
74:57:13:2c:18:40:94:dc:64:da:f6:87:69:96:0a:18:67:52:
e2:95:bb:c3:5d:45:fa:a4:27:dc:11:99:03:49:f4:e0:6a:aa:
25:e2:60:39:95:1b:ef:e4:41:63:5b:7f:96:b4:cb:a2:18:4e:
e2:a1:6e:fd:36:b3:48:b4:11:15:f1:9c:d2:19:ae:43:e9:97:
49:8e:a4:90:ae:f9:01:40:63:2b:f3:5b:64:81:3f:bc:17:40:
13:3d:e7:af:57:ff:90:8b:8e:61:c2:24:c9:4c:e2:22:d6:38:
27:70:15:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:23:58 2026 by rpki-client