Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE826624312311F18E476B7CDAE4EC9C.roa
File: CE826624312311F18E476B7CDAE4EC9C.roa (raw, json)
Hash identifier: mK5p+zcAmRcYfnesdPAv6B/G/AKKduXHF2raqNnfrpU=
Subject key identifier: 76:60:80:A1:38:9E:3C:BA:5D:D9:C6:75:05:30:D8:30:56:64:1E:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C34D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE826624312311F18E476B7CDAE4EC9C.roa
Signing time: Sun 05 Apr 2026 19:15:29 +0000
ROA not before: Sun 05 Apr 2026 19:15:23 +0000
ROA not after: Wed 13 May 2026 19:15:23 +0000
asID: 20457
IP address blocks: 154.198.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115533 (0x1c34d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 5 19:15:23 2026 GMT
Not After : May 13 19:15:23 2026 GMT
Subject: CN=69d2b4d0-cb64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c4:00:78:59:59:58:37:7b:f2:e2:c0:46:c0:
70:8e:6b:1e:fd:1b:3c:d8:8c:ec:59:30:1d:c1:cd:
d6:d4:c4:25:2b:72:90:c5:16:cc:69:a3:67:9a:e8:
6d:82:cf:c4:20:d4:3e:2a:9e:49:24:20:43:47:9f:
91:0e:62:95:ff:0e:8e:97:54:ab:c1:d2:51:65:31:
79:b8:42:00:6c:72:41:2f:59:15:e8:75:b7:fb:9f:
c3:b8:eb:c6:12:15:c8:e3:0d:2c:a7:74:46:47:1d:
8e:c1:fe:91:4d:8c:59:54:fb:6b:cf:6f:f2:47:bb:
16:ea:05:e3:75:68:0d:fd:cb:b0:5e:5a:15:bc:61:
f7:a2:a9:ee:0e:81:4d:42:f6:55:9d:77:54:31:db:
ee:9b:dd:3e:3c:36:31:4d:30:63:76:f0:8b:26:81:
a9:22:64:70:72:5c:c2:d2:8b:d9:a2:ce:d2:d6:4b:
c0:6c:3f:70:0e:bb:11:70:88:3d:90:a9:c0:47:8a:
25:22:73:0a:52:33:e5:f2:47:0a:38:0d:a5:e8:24:
b4:6f:af:b2:5f:bb:3c:e0:77:40:a5:e2:b3:df:02:
e7:23:f9:43:ad:8d:35:de:41:85:4d:36:1a:12:d5:
a1:bc:ac:21:d6:b0:85:9b:75:2a:89:3c:53:60:52:
85:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:60:80:A1:38:9E:3C:BA:5D:D9:C6:75:05:30:D8:30:56:64:1E:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE826624312311F18E476B7CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.11.0/24
Signature Algorithm: sha256WithRSAEncryption
74:52:91:96:7f:87:3a:e2:c4:33:b0:87:38:5a:56:2b:47:8a:
82:0a:a1:c3:7c:bb:b6:1d:c6:e6:c9:7e:4c:ed:5c:ef:20:f9:
2a:c6:03:78:8b:09:92:7e:ed:42:4a:7b:b4:ca:be:97:0e:8c:
bf:38:72:4e:8b:6b:1d:d1:9c:db:14:8f:24:24:35:84:ce:de:
77:08:94:05:c0:62:94:f2:59:c8:23:9e:fe:f6:4d:e2:c0:5e:
f1:7e:a4:ca:2c:24:d2:a5:01:01:71:55:e9:1d:5b:7b:5c:ee:
82:0e:f7:08:b6:e7:07:32:f7:fb:51:98:82:bb:a8:fc:0c:29:
e5:d8:3c:b3:a0:f0:85:db:ae:6d:4a:bf:e0:e6:8c:aa:8a:ce:
cd:f6:5d:8b:33:63:32:47:fd:ff:f2:55:dd:c1:bb:c0:e9:7f:
ec:03:a4:c0:b3:b8:dc:a7:54:34:66:44:02:d3:14:93:0b:fe:
7a:96:1d:3b:50:f8:fc:86:53:72:4b:e0:cf:16:eb:a6:b7:90:
ef:db:7a:a8:b1:30:c5:f8:1f:4f:32:8c:21:32:d6:bb:b5:b0:
6d:e7:71:2d:35:b2:3a:b9:5f:85:0a:76:80:51:78:91:5e:6e:
6d:48:df:4c:b3:56:6b:5d:87:a1:0b:f3:7b:e5:36:94:fc:a5:
ed:85:66:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:47:38 2026 by rpki-client