Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D59876462DA011F1A2F8F299DAE4EC9C.roa
File: D59876462DA011F1A2F8F299DAE4EC9C.roa (raw, json)
Hash identifier: ehkDfttLfb4vN9DHSIYHZXO+l95z5JECM50LTrxQ7mY=
Subject key identifier: B2:9F:D9:13:CE:A0:21:E9:5C:3B:0D:8B:2F:73:BC:8E:83:82:B9:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C1EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D59876462DA011F1A2F8F299DAE4EC9C.roa
Signing time: Wed 01 Apr 2026 08:00:23 +0000
ROA not before: Wed 01 Apr 2026 08:00:18 +0000
ROA not after: Tue 01 Apr 2036 08:00:18 +0000
asID: 17561
IP address blocks: 154.196.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115179 (0x1c1eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 08:00:18 2026 GMT
Not After : Apr 1 08:00:18 2036 GMT
Subject: CN=69ccd097-f54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:58:1a:13:b5:bd:5b:15:0e:7f:4a:a6:f2:
04:02:e6:93:20:b3:db:b3:6b:d5:0b:f4:39:45:58:
57:ae:65:83:19:cb:77:a5:6d:11:fe:49:14:cb:c7:
07:de:4c:32:95:61:2f:8f:bc:e4:23:ab:6d:fb:5e:
fd:6c:e0:d6:ea:15:e7:b6:50:b5:15:c7:7c:8b:59:
21:23:31:98:2a:56:45:21:55:2f:58:e0:dc:d6:fc:
0b:89:6b:ab:1c:c7:f0:86:c0:9f:6e:10:31:3f:9a:
40:6a:9a:d3:ca:25:d2:c0:33:04:fe:6e:38:28:68:
ce:d5:9b:5f:91:dc:d2:62:0c:f5:3c:b2:7a:fe:1f:
39:17:4e:41:d2:2d:16:09:c0:5c:a0:59:c0:33:4b:
74:2a:ba:f5:38:cc:1f:b5:3f:be:f8:d2:4c:a7:2b:
d7:66:d3:0c:36:43:87:ce:26:cb:fb:87:f1:12:1c:
c4:37:58:28:0e:35:86:a7:d2:ac:73:8d:b8:83:c8:
9b:6b:bc:c1:d6:04:a1:0e:e6:5a:f9:21:73:88:42:
f9:f1:f3:6a:ba:87:99:b2:e3:ce:a8:32:14:4b:56:
b1:d2:5f:df:85:13:4e:a4:b7:3d:dd:ff:63:4a:6b:
07:24:e8:29:c3:52:e3:ba:33:bc:25:3c:ca:43:8f:
13:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9F:D9:13:CE:A0:21:E9:5C:3B:0D:8B:2F:73:BC:8E:83:82:B9:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D59876462DA011F1A2F8F299DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.93.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:68:82:7b:ce:c8:f3:08:22:5b:8a:b8:29:0f:ee:65:07:82:
4c:40:87:88:93:3d:b0:64:78:78:da:2d:99:e9:5c:bd:67:29:
38:46:97:d6:23:61:a3:68:52:40:f0:c8:33:b2:2f:ed:57:d4:
ee:95:19:0f:5d:9d:cd:18:98:4d:ca:27:67:e0:b0:89:dd:e5:
90:e2:81:c5:e9:56:85:1c:1e:55:78:c3:d1:f3:0a:ce:4c:97:
83:74:db:86:42:94:b9:09:b3:17:c4:f5:1a:f5:a9:c2:cb:66:
cd:7e:9c:06:93:3d:f0:cb:dd:e5:08:be:26:dc:23:31:58:e1:
31:3d:43:cf:9f:d9:11:e4:ef:f0:2b:c4:33:5d:cc:8e:77:90:
6f:cd:9a:c6:6e:b8:10:f8:37:2d:70:c5:e1:55:68:3e:2d:e2:
92:6c:76:09:37:49:25:c8:99:c5:0a:ba:78:cf:b3:a9:cd:13:
21:d0:f1:98:f4:a2:01:f2:9c:05:24:20:9b:72:cc:ff:31:1e:
16:50:ba:d3:5c:41:b6:0f:15:14:4c:e9:4b:54:7b:2e:3b:a2:
bc:97:57:c0:ec:28:eb:1b:97:9e:98:e2:e0:ae:6d:9b:cb:0f:
30:be:2d:95:7b:20:20:bc:9c:92:19:fb:94:d2:58:f3:3e:c7:
90:d0:39:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:41:42 2026 by rpki-client