Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D919327639BA11F18EC5ADFFCE1D38B0.roa
File: D919327639BA11F18EC5ADFFCE1D38B0.roa (raw, json)
Hash identifier: vK0zEtpuhIiflxfZ0HF5wq63A/gVXCU7Fire0jpHwzA=
Subject key identifier: FD:B4:52:59:03:AB:B8:6C:87:A0:D3:34:84:EA:05:89:82:17:00:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C5BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D919327639BA11F18EC5ADFFCE1D38B0.roa
Signing time: Thu 16 Apr 2026 17:36:50 +0000
ROA not before: Thu 16 Apr 2026 17:36:43 +0000
ROA not after: Sat 02 May 2026 17:36:43 +0000
asID: 395793
IP address blocks: 154.200.2.0/23 maxlen: 24
154.200.4.0/23 maxlen: 24
154.200.6.0/23 maxlen: 24
154.200.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116156 (0x1c5bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 17:36:43 2026 GMT
Not After : May 2 17:36:43 2026 GMT
Subject: CN=69e11e32-99d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ee:89:32:be:b5:bc:ed:4c:0a:e2:21:fd:fc:
1a:0f:73:95:82:dd:f7:29:67:c1:dc:2a:65:cb:1d:
77:af:b0:14:c0:e3:6d:fa:7c:e8:bc:c3:c4:ce:e2:
73:ba:79:e6:25:42:b8:0e:f9:91:45:60:74:ae:d4:
7b:0c:84:f5:b4:b6:90:b0:2c:3f:f2:7f:b3:3a:e1:
1e:e6:b7:06:b8:5e:de:52:8f:85:25:33:b2:f4:33:
3a:f2:08:84:f8:b5:12:0e:f9:25:e5:bf:e2:fe:ae:
96:a9:c4:62:b9:83:0b:a4:0e:84:60:42:8b:e3:0c:
0f:0d:97:de:b0:b2:af:7f:27:bc:33:e5:2b:81:d4:
2b:62:8e:e5:b4:54:82:d1:0f:dd:93:40:c0:20:ca:
19:e4:88:bf:8a:e4:ac:63:69:2e:d8:3d:28:e5:90:
0c:d2:14:44:f6:29:14:93:2a:4a:85:2f:c4:b8:89:
ed:db:5d:d7:3a:d2:bb:38:0f:f9:12:5f:68:a4:ad:
a9:da:00:19:11:7f:7a:ab:32:0a:6d:97:90:d6:b9:
e1:8c:9c:7d:81:ef:31:16:b5:bd:d5:d7:58:72:21:
43:56:85:eb:f9:7e:2b:17:54:5d:22:f6:eb:37:b0:
48:74:d9:d2:93:fe:bd:05:7d:f0:ec:fd:d5:1f:1a:
9b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B4:52:59:03:AB:B8:6C:87:A0:D3:34:84:EA:05:89:82:17:00:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D919327639BA11F18EC5ADFFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.2.0-154.200.7.255
154.200.104.0/22
Signature Algorithm: sha256WithRSAEncryption
d3:50:2b:17:50:92:30:63:eb:6e:21:cd:14:5f:d9:72:14:fb:
ee:41:bc:f7:e1:44:27:a9:d8:08:59:02:1e:14:d7:9c:68:a3:
e7:0f:7d:19:bd:d2:e2:d7:be:94:73:63:99:f8:3d:6f:07:5f:
ee:76:ec:5a:e5:4a:e4:cf:70:b6:a3:83:93:dc:be:f3:91:7e:
bd:bc:17:cb:3b:4e:2b:e8:02:06:d3:f0:20:e7:63:ae:e5:c2:
79:bc:69:1e:e4:f6:43:4c:19:11:ca:7b:44:7a:7f:12:bb:40:
4c:d8:9e:f8:4b:ad:81:db:2a:26:3c:7c:b6:9a:7b:16:6d:ce:
34:e0:1e:71:75:fd:2d:c1:2b:97:09:26:60:0b:36:66:db:a1:
d2:ce:53:7d:65:60:fe:e3:74:69:f2:0e:e4:e0:8c:57:83:45:
47:c4:d8:0f:9c:c7:cd:8b:fb:15:51:38:e8:d6:e8:6d:e8:cc:
17:aa:f9:32:ee:3d:56:d9:a0:00:68:f3:a0:ed:c2:5a:c7:31:
82:6b:7a:f7:87:59:93:d6:fd:59:9b:01:4d:81:2b:5a:d7:c5:
c5:e8:54:f9:57:a4:a1:55:1d:f2:d3:c4:16:18:f2:4a:94:d6:
3c:08:f1:4f:a2:49:bd:26:75:9d:85:66:ca:1f:98:a0:86:77:
f3:45:6d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:42:45 2026 by rpki-client