Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB8DDEB0372911F19213EED7CE1D38B0.roa
File: CB8DDEB0372911F19213EED7CE1D38B0.roa (raw, json)
Hash identifier: j+VaJm71XuCK6iyhkBJtxxEfw2qjEoN3E3RUZspQi2c=
Subject key identifier: 3E:41:7A:8B:B5:6B:6F:08:F2:21:E4:D8:0E:FB:6F:39:D0:A5:A3:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C510
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB8DDEB0372911F19213EED7CE1D38B0.roa
Signing time: Mon 13 Apr 2026 11:13:28 +0000
ROA not before: Mon 13 Apr 2026 11:13:22 +0000
ROA not after: Sun 10 May 2026 11:13:22 +0000
asID: 401615
IP address blocks: 154.83.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115984 (0x1c510)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 13 11:13:22 2026 GMT
Not After : May 10 11:13:22 2026 GMT
Subject: CN=69dccfd7-4a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d7:25:93:3c:ce:1c:a8:a7:fa:f6:6c:9b:c5:
76:88:cd:ff:1b:39:40:0f:95:3f:df:91:d9:3e:d8:
10:a4:b9:41:02:5f:fa:b5:14:6b:31:52:81:8f:b7:
f5:79:a8:e4:1c:e6:61:6a:fd:f6:2d:f3:94:fd:c8:
4c:01:c0:23:c8:cb:be:0c:d4:05:de:d7:69:59:50:
76:bf:91:22:a1:2a:3f:66:0e:6a:22:41:40:19:d2:
5c:dc:9e:7f:e0:07:09:0d:fe:84:83:2e:52:8f:c0:
df:e1:be:81:0c:00:3c:ef:64:a7:af:38:47:7b:bf:
78:8c:1e:b6:7b:c8:23:2a:34:07:12:e0:08:4e:02:
85:9e:ee:ab:77:c3:99:33:61:01:43:fa:f9:94:c7:
55:df:e9:c3:22:f2:68:d5:01:5f:d4:15:39:97:2b:
3e:f5:a4:e6:11:88:4a:cb:ee:3d:62:8c:92:ea:dd:
0a:21:34:b8:20:6e:a7:f3:30:e7:2e:6f:45:8e:c2:
a6:04:ea:cf:68:0d:a3:c8:65:4a:e0:a5:7e:35:e8:
80:07:f2:7c:50:ca:89:29:6e:4d:9e:8a:95:ea:98:
dd:ca:0d:11:0c:b6:19:cb:40:02:24:97:45:7c:d8:
09:67:2d:5c:43:d5:b8:d7:5f:70:c8:9e:b8:70:72:
d4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:41:7A:8B:B5:6B:6F:08:F2:21:E4:D8:0E:FB:6F:39:D0:A5:A3:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB8DDEB0372911F19213EED7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.98.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:9b:1a:9f:29:8d:23:b2:ec:e4:ec:c6:50:6d:36:d5:cb:f1:
11:c9:23:38:3e:4a:d9:3d:b6:4d:0d:8a:50:72:65:0a:cb:35:
61:c5:f3:8f:a5:96:a3:dd:a1:4d:a7:36:e9:4a:76:7e:d8:05:
e1:d0:78:1b:67:cc:43:e2:a5:eb:ad:53:5a:fd:d0:2f:bd:30:
d7:59:b4:c3:a6:0f:9d:7b:53:cf:4a:f6:dd:6f:a7:fc:2a:46:
73:4c:85:8e:b8:0c:76:00:c4:40:39:24:93:27:f7:fd:92:26:
ee:74:0f:02:27:3d:cb:21:e3:a3:11:e1:f9:75:b8:a4:52:a5:
1b:36:27:74:41:97:fa:d7:a2:b7:9e:68:b8:7a:91:21:e1:1b:
ab:a2:12:21:f0:8d:c0:b1:be:df:74:76:66:0d:59:3c:39:fc:
6b:ab:3f:33:13:17:46:39:e8:c3:70:3a:40:c9:5f:70:e6:34:
de:8b:5f:5f:b3:98:04:bd:06:7e:a3:ce:1d:d3:af:01:e1:2a:
83:56:0f:72:45:74:18:34:72:ac:a6:ca:59:47:3e:98:1c:9a:
b9:4b:42:02:95:ae:ac:58:5c:05:41:ec:ed:2d:ad:79:27:4d:
e5:31:b0:f0:38:af:45:70:a7:62:49:f4:3f:8b:a2:0d:7e:42:
20:ce:d4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:29:31 2026 by rpki-client