Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2E52C8034D711F1A86A79A4CE1D38B0.roa
File: D2E52C8034D711F1A86A79A4CE1D38B0.roa (raw, json)
Hash identifier: NrAV++vwToWizzFhYOqNnkSZ2aSz4a2QK9S6GxBP0SE=
Subject key identifier: BC:02:09:5B:0B:23:7E:47:40:09:EE:D7:11:15:E0:05:9B:C7:F7:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C465
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2E52C8034D711F1A86A79A4CE1D38B0.roa
Signing time: Fri 10 Apr 2026 12:21:39 +0000
ROA not before: Fri 10 Apr 2026 12:21:34 +0000
ROA not after: Mon 20 Apr 2026 12:21:34 +0000
asID: 22773
IP address blocks: 154.82.224.0/19 maxlen: 24
154.85.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115813 (0x1c465)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 12:21:34 2026 GMT
Not After : Apr 20 12:21:34 2026 GMT
Subject: CN=69d8eb53-6183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1f:a2:70:b1:54:bb:c3:18:de:47:a0:e9:e3:
8c:bb:ad:91:ad:47:99:f8:38:d1:e5:c9:c2:09:5c:
b1:14:64:9e:3b:8f:44:40:c8:73:1d:fd:78:db:5d:
78:f5:3f:8c:c4:c9:27:a9:3d:50:a0:d1:65:aa:0f:
55:f4:24:af:c4:4b:ca:c2:c9:87:ee:c2:75:f7:39:
d0:ed:04:10:6e:d7:b8:36:f7:0b:ad:a4:4b:a4:7e:
b8:20:b3:0c:be:a3:74:27:3b:a9:13:f9:07:4a:4a:
62:79:ae:3b:d5:d0:f6:14:6c:0b:f9:14:bd:fb:48:
cf:e5:3a:10:25:13:4a:05:63:9c:13:c1:5b:53:e6:
bb:41:2e:68:42:d8:d4:ef:bf:cb:29:d0:5c:36:ff:
48:2b:da:c4:03:4a:da:bc:52:37:5e:b4:05:aa:a5:
e6:92:12:51:75:95:c2:f0:b6:be:bc:4e:f8:de:df:
ac:01:3d:02:4c:a4:b4:45:2b:f3:96:46:7b:ff:1d:
95:50:80:22:80:10:9a:c1:38:d6:4a:1d:84:46:2f:
c5:3a:cc:60:9b:2b:f4:2d:02:6c:f8:fe:8d:03:67:
60:61:8f:93:b8:d1:9e:93:1a:00:a9:05:45:e5:02:
e3:da:b0:b8:a8:67:7a:12:17:9e:37:91:bf:c4:2e:
46:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:02:09:5B:0B:23:7E:47:40:09:EE:D7:11:15:E0:05:9B:C7:F7:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2E52C8034D711F1A86A79A4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.224.0/19
154.85.4.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:19:91:1d:3f:7d:9d:de:be:0d:2d:24:f3:d8:ef:c5:e2:c8:
cc:a1:87:3e:fd:05:b4:ff:40:e3:ad:5b:44:59:00:98:ab:b3:
6f:dd:08:fb:21:17:8e:1f:ba:96:31:16:35:4c:ff:d9:02:ef:
0c:34:b4:e5:66:17:9b:17:3c:66:a1:3e:81:36:1f:c8:c2:8d:
94:51:0d:5f:20:ae:52:4f:dc:b0:ad:b4:6e:07:9c:c0:ee:7d:
7b:52:00:40:e1:8d:9e:41:7e:d0:e1:ba:3f:32:fd:3b:53:95:
1f:4f:1c:2f:32:64:5d:31:4b:41:ba:86:e5:0a:b5:0d:9b:4e:
1a:14:97:f7:f4:40:02:4c:35:6b:40:44:f8:98:8c:fb:c5:57:
98:17:3d:b1:3e:c2:c7:98:b9:88:21:24:ea:f9:6a:88:15:14:
1d:44:c4:fe:d8:d4:57:49:4e:8f:e0:09:c5:86:70:a0:ac:a7:
52:46:e1:60:27:e8:c4:10:49:2a:40:54:23:64:d5:d7:32:b1:
95:13:28:0a:79:31:58:02:66:70:e4:c5:2d:a9:10:64:c5:9b:
6b:17:0c:ca:22:3b:18:b7:cc:ad:1a:f4:91:5a:7d:db:9b:6f:
dc:eb:5f:64:a4:65:74:7b:01:bd:26:d3:c6:6f:f6:8e:ce:2c:
4d:2f:cd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:28:58 2026 by rpki-client