Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9DB51AE389D11F1814FB0C0CE1D38B0.roa
File: C9DB51AE389D11F1814FB0C0CE1D38B0.roa (raw, json)
Hash identifier: Ady46DkRXBs7qGXvgIgU4XL3w2ypgwS19JVGtu66R6c=
Subject key identifier: 32:84:65:0E:9C:C9:08:EA:56:FB:1E:F6:B5:2A:D1:49:8F:A5:02:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C542
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9DB51AE389D11F1814FB0C0CE1D38B0.roa
Signing time: Wed 15 Apr 2026 07:36:18 +0000
ROA not before: Wed 15 Apr 2026 07:36:13 +0000
ROA not after: Wed 06 May 2026 07:36:13 +0000
asID: 64126
IP address blocks: 154.88.128.0/17 maxlen: 24
154.88.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:53:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116034 (0x1c542)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 07:36:13 2026 GMT
Not After : May 6 07:36:13 2026 GMT
Subject: CN=69df3ff1-2e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:df:2a:57:1c:18:fd:a0:b1:e7:aa:11:e8:21:
0b:a9:84:1b:58:73:c4:ae:f9:8a:28:d2:5a:5d:85:
11:b8:f7:7d:5a:f2:c4:b2:2d:de:62:4a:54:c6:3f:
1a:30:ef:b0:e5:26:1c:c5:79:ca:75:2a:98:c8:35:
a7:8f:15:c0:1a:ad:e7:ab:fe:95:83:60:b8:61:0e:
74:ec:8f:1c:0c:3d:4c:e8:5f:48:25:b2:0f:d7:da:
0e:6c:c0:2a:57:a9:c0:28:13:ba:48:ad:d5:88:a6:
6e:3d:55:61:4d:1a:44:e7:ea:50:35:00:7c:d8:db:
87:73:3f:ec:ca:91:ef:7d:77:f2:c4:52:37:c3:85:
37:3f:70:52:7f:af:9a:bc:35:db:04:6e:c4:00:41:
fb:a4:02:89:93:f3:e4:01:19:cc:98:23:96:cc:b3:
a6:73:f6:a1:c8:0c:d0:4a:d6:db:cd:09:03:86:70:
e9:9b:ae:65:e2:e5:7f:27:73:d7:d5:af:ea:16:10:
e2:20:93:7e:f2:e7:8b:56:72:54:cb:d3:f3:a6:0b:
9f:ff:95:0c:8f:97:55:3c:24:b0:d9:16:57:5b:8f:
39:88:73:c8:3e:4d:7e:25:f6:aa:a5:27:e7:1b:6d:
64:16:f4:8a:23:df:6b:bd:d3:eb:70:07:7c:60:05:
e2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:84:65:0E:9C:C9:08:EA:56:FB:1E:F6:B5:2A:D1:49:8F:A5:02:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9DB51AE389D11F1814FB0C0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.128.0/17
Signature Algorithm: sha256WithRSAEncryption
6a:99:b2:2e:71:7e:a3:30:ea:04:ed:df:fc:d1:d2:f0:d2:c4:
1d:32:37:3a:a3:a9:66:52:f6:0c:1d:74:35:2a:55:8d:c9:b9:
98:d6:5d:49:cb:9e:63:ed:03:bd:d3:6c:54:ab:c1:31:8a:5b:
e4:11:ed:a0:a4:d1:94:cb:d3:2d:43:5d:ae:9b:7e:87:13:c3:
5f:48:af:2b:c7:5b:01:b0:44:ab:da:54:4f:25:e2:41:8c:f3:
40:df:20:12:20:59:21:24:36:9f:3e:1c:41:25:9e:65:a4:a9:
70:b7:7a:57:9f:e1:cc:47:63:6c:79:b3:a4:01:bf:aa:79:c8:
7f:39:17:95:4d:48:d9:12:0b:8e:c9:10:b3:dc:84:cd:72:88:
db:5e:dc:3d:a6:9a:a1:b9:94:77:e1:33:68:1f:3c:10:2e:0d:
22:8e:19:6e:1a:37:71:c5:f1:7f:59:cf:0a:e3:b4:cb:23:95:
45:21:1c:04:bc:5b:35:91:1e:fb:f5:d0:36:9d:2d:e6:88:9f:
45:9c:fa:c7:17:cc:9c:73:54:6a:bd:47:66:c4:c2:f8:3e:bf:
a9:22:da:93:a5:09:d5:6c:73:e9:b0:1e:50:7f:18:9f:6a:79:
35:4f:18:24:1b:46:af:88:e6:67:40:11:6c:51:d8:ef:7b:aa:
23:2a:ee:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:42:44 2026 by rpki-client