Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC0B06C834CC11F18E2A5FE3CE1D38B0.roa
File: DC0B06C834CC11F18E2A5FE3CE1D38B0.roa (raw, json)
Hash identifier: HjPSt3WB9PtdUQ5jDbstHUh4K5m71v1tzUImLv0rF70=
Subject key identifier: 9B:E0:8E:73:94:FA:52:1A:48:3B:79:B6:95:BD:44:A8:7C:92:B1:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C45F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC0B06C834CC11F18E2A5FE3CE1D38B0.roa
Signing time: Fri 10 Apr 2026 11:03:10 +0000
ROA not before: Fri 10 Apr 2026 11:03:05 +0000
ROA not after: Sun 17 May 2026 11:03:05 +0000
asID: 49581
IP address blocks: 154.83.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115807 (0x1c45f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 11:03:05 2026 GMT
Not After : May 17 11:03:05 2026 GMT
Subject: CN=69d8d8ee-641f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b9:29:ed:76:a8:cc:75:d9:62:60:6d:d5:c9:
66:22:a2:47:df:01:8a:19:67:99:26:d8:c3:bd:fb:
dc:58:bc:52:9a:61:f9:fc:30:32:f3:bf:4e:d1:56:
c0:a3:02:c7:79:0f:86:12:07:9d:4e:e5:cd:63:f5:
65:43:7e:54:1f:d6:08:73:44:7c:34:d5:0d:17:e3:
10:be:ca:1e:5e:55:ec:7e:7f:d5:d5:2d:30:a0:41:
49:ad:e9:92:35:fd:37:c1:65:09:08:7d:ab:7d:d0:
59:39:24:8d:97:ff:0f:c3:9b:1e:b1:e3:c8:9c:02:
33:d5:44:28:03:e7:01:25:bc:72:4a:bf:c0:de:d6:
11:6a:05:8f:c0:78:b7:8f:87:fa:8b:c7:ab:f1:c4:
c6:6f:c9:1f:bf:05:7c:37:f6:f9:93:53:fc:c0:81:
f4:1f:0a:e5:69:5d:99:75:90:00:38:63:35:56:1b:
85:5e:bf:44:98:c9:70:ca:7f:7c:fb:19:d4:4c:fb:
65:80:97:3f:0b:87:3f:99:a8:79:2c:7e:45:c5:4e:
9c:ac:f2:e9:1c:fd:32:1b:ed:31:30:c5:a3:cb:6d:
f0:84:72:4c:e3:03:fe:f3:6e:53:46:56:f6:82:dd:
1c:1d:0a:e2:ee:2d:bb:2a:68:a5:f8:53:ad:c9:73:
0e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E0:8E:73:94:FA:52:1A:48:3B:79:B6:95:BD:44:A8:7C:92:B1:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC0B06C834CC11F18E2A5FE3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.149.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:78:86:20:f8:f0:01:13:e0:c4:82:a9:05:fb:d4:4b:88:bc:
a1:9f:66:21:50:4a:33:f6:05:25:8f:aa:78:60:eb:cd:9e:94:
86:61:48:55:a9:ee:59:2b:7d:1c:54:3b:66:0d:ce:6c:f3:95:
a5:0a:34:03:25:a2:b2:cf:da:60:1e:4a:ae:08:41:ba:83:d8:
8f:de:6b:b8:32:d5:db:fe:64:d1:68:e2:a0:ba:e3:21:e2:c4:
75:01:b6:6e:70:4a:c1:6b:6f:68:de:7d:69:d8:e3:3a:9c:82:
e8:e0:99:ca:e6:23:46:af:db:53:85:73:e4:3f:1c:bf:6a:1e:
30:b2:2b:4b:99:2e:24:e4:d1:42:c1:46:3d:f9:c1:a0:ef:0f:
37:54:2c:d8:e2:0b:00:d8:3c:45:2a:a4:5b:db:d9:7b:6e:b3:
0c:c5:d4:67:fa:f6:68:71:a0:cf:07:ea:31:92:30:96:23:a4:
4f:08:c8:00:dc:fe:5c:be:d8:e0:87:98:5c:c4:d9:58:0b:cd:
60:59:cc:0c:94:2f:51:15:d8:17:a4:69:c9:4e:9b:79:52:2a:
3c:df:49:89:22:b3:a1:69:3f:35:2f:fe:92:b1:5c:15:e1:75:
21:02:53:95:db:6f:ce:98:1e:cd:18:ed:d3:aa:0c:97:69:35:
ea:64:d2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:25:20 2026 by rpki-client