Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC5F1F04303811F1934B4CAEDAE4EC9C.roa
File: CC5F1F04303811F1934B4CAEDAE4EC9C.roa (raw, json)
Hash identifier: EnqteseTCvnoa8opIcmOLumCC/iTFoZTWTNzph0pSuM=
Subject key identifier: 39:39:27:2D:F8:30:17:58:0E:29:55:D8:2F:0E:52:ED:86:46:CF:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C2C1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC5F1F04303811F1934B4CAEDAE4EC9C.roa
Signing time: Sat 04 Apr 2026 15:13:21 +0000
ROA not before: Sat 04 Apr 2026 15:12:50 +0000
ROA not after: Mon 04 May 2026 15:12:50 +0000
asID: 205023
IP address blocks: 154.197.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115393 (0x1c2c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 4 15:12:50 2026 GMT
Not After : May 4 15:12:50 2026 GMT
Subject: CN=69d12a91-798e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:9b:82:57:6a:53:15:88:0f:57:11:db:26:
5f:59:c4:29:fc:18:9a:4d:65:8d:03:62:ca:c1:61:
1f:3e:f2:77:a6:34:db:79:02:87:c3:a1:a3:95:af:
fb:20:c9:17:5c:41:9f:7d:b9:dd:c4:46:1f:b3:6a:
3b:a9:33:5e:a9:da:eb:41:b1:0a:5c:6a:cd:1b:16:
f4:ea:dc:84:22:b5:01:ad:1f:b9:f9:7c:d2:b6:3f:
31:87:fd:f3:12:dd:34:cc:2a:4d:0d:55:bb:54:47:
0c:21:8d:59:05:a7:6f:a4:1c:62:b1:ed:63:4a:a2:
89:89:9c:f0:e2:85:fe:81:de:4f:68:40:48:f9:38:
b3:34:63:a5:e0:d1:44:56:e1:0c:32:c7:0c:ec:99:
63:a1:97:dc:d4:38:84:f4:e9:46:47:35:48:36:0d:
6d:e4:b0:cc:71:79:7c:b2:31:6f:07:15:37:35:ac:
f1:3a:9f:17:23:b1:a7:51:95:4b:10:29:85:90:54:
f1:5f:77:d9:86:7f:7a:c5:a7:c7:b9:ff:8f:6f:3a:
9f:90:f3:99:ec:85:c0:53:fb:ad:fd:45:fc:64:02:
fb:56:2b:a0:96:73:b6:f6:d7:33:d6:39:9a:2a:64:
dc:53:a3:01:14:c0:18:97:4a:0b:d9:d4:8d:95:a5:
70:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:39:27:2D:F8:30:17:58:0E:29:55:D8:2F:0E:52:ED:86:46:CF:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC5F1F04303811F1934B4CAEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.24.0/24
Signature Algorithm: sha256WithRSAEncryption
81:ef:1d:7d:84:e1:ac:6e:23:2a:2f:2f:ea:0a:25:7e:f6:7b:
0a:0d:ce:ec:41:c2:19:cd:ea:53:aa:fc:50:2a:dd:5b:dd:98:
5b:08:c0:92:39:6e:fd:74:1b:36:2a:fa:72:2f:07:a7:b9:04:
93:31:2e:11:89:86:7d:df:91:c2:15:fa:22:93:c1:a8:6d:bd:
17:3f:b5:8c:b1:56:c4:60:0b:4d:20:fd:94:fa:29:81:a3:bc:
57:8c:70:13:c0:1a:e4:79:c3:09:68:65:71:8d:36:32:be:b9:
1e:f1:94:6e:d5:bc:fe:66:fd:73:17:e1:24:25:fc:cd:1c:fc:
e7:45:df:59:60:46:96:9d:f2:df:41:64:54:25:6c:a7:c7:41:
e1:a6:98:c3:69:98:1f:8e:c2:07:c1:d3:85:fe:ce:9f:23:f8:
b6:85:0b:b4:a8:a5:18:68:63:57:df:5f:fe:e6:5f:79:50:70:
b0:8d:a1:a8:19:04:2a:4f:fd:84:b8:5a:56:84:d2:99:7e:f1:
7a:98:9d:42:0b:87:ec:17:65:be:76:6f:51:5c:70:e7:be:6e:
ca:1d:c2:ba:0c:37:6b:b2:ed:f5:dd:70:c3:73:04:67:a9:bd:
76:81:34:8f:02:8f:64:a7:db:c5:b9:51:f9:f0:3a:19:29:15:
23:e5:32:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:25:20 2026 by rpki-client