Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4EE2F60356611F187114A17CF1D38B0.roa
File: D4EE2F60356611F187114A17CF1D38B0.roa (raw, json)
Hash identifier: uNZLpbqUvzXEgnX2atKnKDnupzgCjqZ5WfSD0xJUW+o=
Subject key identifier: BF:D2:90:E7:ED:EF:7E:4F:0A:11:A3:A5:DB:87:C4:27:B4:DC:66:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C489
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4EE2F60356611F187114A17CF1D38B0.roa
Signing time: Sat 11 Apr 2026 05:25:20 +0000
ROA not before: Sat 11 Apr 2026 05:25:16 +0000
ROA not after: Mon 18 May 2026 05:25:16 +0000
asID: 395886
IP address blocks: 154.200.128.0/24 maxlen: 24
154.200.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115849 (0x1c489)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 11 05:25:16 2026 GMT
Not After : May 18 05:25:16 2026 GMT
Subject: CN=69d9db40-f4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6c:bd:19:2d:66:db:ae:69:c1:3f:76:75:75:
f3:06:be:15:01:10:f0:4d:1a:c1:30:24:bf:d2:28:
df:1a:40:b8:fb:1a:5a:72:23:3c:fd:29:dc:e1:e4:
aa:75:f7:e1:ec:36:c5:c9:39:8c:56:c4:86:b8:11:
4a:a4:94:6e:d3:bb:a1:a4:a1:5a:06:c8:2b:3b:89:
89:92:89:ef:3a:27:c6:f0:09:ae:3f:eb:e6:61:6e:
54:7d:28:30:a4:f8:18:60:90:08:a9:92:99:67:d5:
ed:89:03:47:77:f8:fb:25:bb:f6:a1:48:d1:ca:ba:
ec:ba:ec:54:c6:55:cd:55:95:be:e2:42:37:2a:eb:
95:f7:14:b2:bf:9a:95:61:19:4c:21:b5:16:b7:20:
39:90:1d:23:17:f8:0f:69:b0:60:f2:6b:9d:8b:27:
8c:4f:c3:ee:76:35:b3:81:a6:ec:8b:94:27:4c:c6:
54:cb:91:e1:d9:a2:64:35:9a:ec:bb:56:33:db:4f:
ec:54:c0:d1:40:9b:2d:58:5a:cc:9a:c3:ff:4c:cb:
79:e9:72:28:1f:47:90:f0:3b:f0:b5:b4:8d:86:a8:
8e:7a:74:4d:46:a9:8b:77:76:e2:57:f9:80:37:71:
f7:8c:41:32:2a:f6:12:b4:5d:6c:19:65:35:38:67:
0e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D2:90:E7:ED:EF:7E:4F:0A:11:A3:A5:DB:87:C4:27:B4:DC:66:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4EE2F60356611F187114A17CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.128.0/24
154.200.132.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:f7:1d:cb:ba:90:a0:a3:d3:44:e6:70:93:a3:5d:77:08:b5:
8a:49:80:23:0c:16:20:1e:c1:7f:f5:7e:f9:55:b3:89:28:d6:
c5:10:27:85:82:2a:37:e3:dd:e0:ed:50:9a:70:2d:c7:a7:70:
2b:49:d4:15:05:c9:60:dd:6f:b2:6f:04:32:30:ea:57:e9:fa:
bd:4f:3a:ca:5f:a2:c2:b9:c0:2f:ef:b1:3c:a6:d3:74:66:8d:
3c:89:b0:e8:f7:71:4c:27:cf:d0:69:00:85:30:e9:0c:e7:c3:
0f:c6:e2:2d:46:1d:7c:1d:e3:bd:2f:69:e2:cc:86:54:23:18:
ef:13:db:0f:b5:3b:cd:c9:02:2a:4b:3d:f7:3e:66:21:29:8e:
e5:b8:d8:23:4c:21:08:e6:35:39:60:41:ce:f4:aa:73:1d:ca:
83:8d:8b:cf:d3:1b:81:fe:04:a3:78:b5:6f:c0:33:a4:de:48:
db:3f:72:96:26:25:08:06:7d:f6:ab:e8:ce:b1:63:ab:02:50:
49:db:f7:2e:f7:58:32:0c:e3:71:4d:1c:87:04:f1:b2:7b:cd:
a0:a8:fa:ff:88:99:b2:99:6f:0b:c6:af:6c:59:fd:7d:b6:13:
01:4d:d1:8f:38:c6:38:17:84:42:68:aa:dd:4b:90:dc:82:e2:
43:a7:f5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:20:06 2026 by rpki-client