Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5DAA90C358F11F1B4831B0DCF1D38B0.roa
File: D5DAA90C358F11F1B4831B0DCF1D38B0.roa (raw, json)
Hash identifier: aDLmSGpJHymzeUnUU5MIxNfkKFOyGwwMov6ctOCx5Yc=
Subject key identifier: EE:B0:07:29:77:C2:65:0A:D4:95:A1:D4:02:AC:7A:98:46:47:C9:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C49B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5DAA90C358F11F1B4831B0DCF1D38B0.roa
Signing time: Sat 11 Apr 2026 10:18:51 +0000
ROA not before: Sat 11 Apr 2026 10:18:47 +0000
ROA not after: Mon 18 May 2026 10:18:47 +0000
asID: 200758
IP address blocks: 154.196.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115867 (0x1c49b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 11 10:18:47 2026 GMT
Not After : May 18 10:18:47 2026 GMT
Subject: CN=69da200b-d206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:39:db:2c:2c:c1:ff:29:a7:c3:80:4e:c1:f8:
4a:60:5c:c3:22:7f:d0:60:59:8c:b2:28:94:42:2e:
4e:07:c7:77:50:d0:f5:db:6f:f0:0b:75:af:b8:fa:
56:31:75:67:6b:69:c1:bf:c0:69:23:cb:b5:12:45:
fa:6c:40:5a:db:08:3f:0e:12:6a:d1:5e:74:8c:7b:
61:85:9f:27:5e:0a:56:d1:8f:eb:4c:7d:37:b7:e3:
cb:9d:ab:dc:e7:ba:a5:ef:9c:23:36:6c:00:b1:04:
16:e0:c5:4f:59:a5:9d:ce:eb:c6:ab:dc:23:85:c2:
ea:3d:c5:d7:1f:fb:49:38:64:52:8f:13:b5:9b:a7:
d1:8e:82:3f:45:d3:52:5a:57:ed:fa:17:06:cb:a3:
32:f0:2e:e6:b3:13:1e:99:9e:2f:ad:31:69:28:a1:
02:a6:b1:34:29:13:2a:66:41:2f:ba:cc:77:24:9c:
c5:69:26:8a:8e:06:ce:a1:8d:eb:33:51:42:f8:af:
42:37:69:99:51:ff:bc:14:28:6f:e4:45:ca:dc:f4:
e0:15:7b:1f:26:d3:38:ab:cc:86:74:02:01:68:bf:
54:d5:fd:eb:8a:f1:f4:fe:0f:4e:8a:60:a4:70:2c:
ed:3f:a9:ff:e0:39:ef:0e:8c:48:11:26:56:cf:5a:
e9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B0:07:29:77:C2:65:0A:D4:95:A1:D4:02:AC:7A:98:46:47:C9:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5DAA90C358F11F1B4831B0DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.139.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:a2:74:f7:bc:e8:32:21:19:f2:2d:0f:d7:b4:c8:5f:66:5c:
1d:77:ac:1e:0f:33:69:5e:6e:7d:ab:6f:ea:bc:d4:72:61:e9:
ce:d3:84:80:4d:9c:c6:6c:1c:6e:fe:55:de:38:96:e7:6e:37:
c8:6a:14:df:0b:28:20:d7:3c:7d:68:f8:ec:ee:34:63:2a:aa:
c2:08:23:08:38:61:52:c8:50:4c:80:01:53:17:c6:93:6f:2b:
c9:df:cb:dc:53:f7:2d:d5:79:fc:e2:23:5c:88:36:e8:f8:9e:
96:9c:0e:d4:d2:0b:d9:b2:bb:0c:ef:84:ae:da:8b:f3:24:5c:
9e:ed:65:0b:4a:2d:b3:50:01:84:e6:54:1c:51:db:94:f5:55:
70:54:46:db:a1:25:f0:eb:44:9d:5f:22:92:50:29:b4:f3:b6:
d2:2e:c7:84:1f:7c:88:b4:58:3c:94:f0:d7:8d:8c:10:30:e2:
bf:9a:3d:f9:fe:a4:e8:69:32:f7:86:69:4f:79:2b:10:df:11:
33:75:ae:d7:ae:01:32:39:c3:0d:7e:cf:8d:cc:34:9e:d2:cf:
ff:78:0a:86:cd:f3:b9:d5:8e:d1:1a:60:5e:a2:79:23:51:22:
28:6c:13:f1:99:85:d7:db:92:41:9c:f7:3f:1f:2b:4f:77:e3:
24:19:80:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:27:45 2026 by rpki-client