Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCC47208399E11F1B91B34D8CE1D38B0.roa
File: DCC47208399E11F1B91B34D8CE1D38B0.roa (raw, json)
Hash identifier: 9Kdx4Aq5w9HLlAelBH3PANAWPwxOiPfCXBguGyUE5m4=
Subject key identifier: BB:93:1A:63:07:FE:6B:EE:29:13:AF:4A:16:66:A8:BE:6A:27:53:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C5A6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCC47208399E11F1B91B34D8CE1D38B0.roa
Signing time: Thu 16 Apr 2026 14:16:30 +0000
ROA not before: Thu 16 Apr 2026 14:16:25 +0000
ROA not after: Wed 29 Apr 2026 14:16:25 +0000
asID: 2914
IP address blocks: 154.197.12.0/22 maxlen: 24
154.222.74.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116134 (0x1c5a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 14:16:25 2026 GMT
Not After : Apr 29 14:16:25 2026 GMT
Subject: CN=69e0ef3e-e72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:94:fa:23:90:32:d5:22:8c:f5:a5:e4:7a:c0:
54:15:8b:86:0a:ba:b5:4c:83:b5:59:5f:18:73:b5:
4b:9e:24:5e:e3:fb:6d:28:ef:6d:b4:9a:e2:dc:59:
ef:fc:31:a1:62:8d:41:2e:82:9c:b8:53:9c:d2:96:
1c:86:98:77:b8:09:da:b4:c9:80:8a:b0:40:9b:14:
a8:b9:ed:da:0b:4b:25:49:99:e8:b6:4d:51:f9:cc:
94:e0:bc:45:35:dc:c0:3c:6c:33:11:ff:8a:03:17:
7d:36:2e:73:a1:d0:dc:84:28:ae:c7:88:c4:0c:c9:
ce:da:6f:e0:68:2c:d1:51:38:88:e3:da:b2:f8:80:
fb:83:b8:44:31:d1:13:32:d2:f6:5a:37:20:92:62:
29:ff:20:0a:de:c3:b5:d7:e0:c4:ef:70:08:76:e4:
20:38:40:b2:dd:8f:24:5f:bb:93:59:a3:67:be:00:
f6:38:34:cb:6e:dd:3d:e3:3d:53:11:bb:9f:28:91:
86:04:3d:de:e5:df:37:97:9f:2e:37:af:0e:52:61:
6b:97:27:61:60:8e:a6:57:bb:cd:0e:d7:79:c2:f4:
c4:78:e4:99:4b:e4:65:da:23:15:ca:b4:ec:d3:84:
f4:04:64:90:96:98:9e:2a:d9:df:4d:61:07:a1:06:
71:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:93:1A:63:07:FE:6B:EE:29:13:AF:4A:16:66:A8:BE:6A:27:53:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCC47208399E11F1B91B34D8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.12.0/22
154.222.74.0/23
Signature Algorithm: sha256WithRSAEncryption
d1:b5:cd:c8:72:f4:f5:66:a9:b7:e2:61:81:aa:b4:5f:b3:98:
d1:6f:a5:31:44:d3:39:c2:c2:45:95:04:95:cc:8c:b5:03:9a:
ca:1a:28:5a:09:e3:3f:c1:01:e0:39:d9:56:d3:f8:d7:de:f1:
42:ed:1f:36:53:08:a9:92:11:96:b8:0a:42:93:6e:d6:40:6d:
90:b8:4d:23:2d:d9:43:38:6d:dd:95:ad:c5:8c:65:e7:ce:6d:
b7:15:a4:d4:5a:78:99:99:67:e2:c0:4c:4f:de:65:2c:43:ae:
4b:8a:32:86:30:8a:5d:b5:ef:b5:5d:f7:6e:8a:7b:c7:06:97:
f7:85:5c:35:0c:9e:57:6b:52:75:a8:87:79:78:78:e5:db:8c:
e8:83:0f:11:77:2c:60:98:19:47:03:8f:b3:ce:73:66:fb:10:
5f:5d:30:6d:04:9f:e5:90:05:76:c7:2e:9f:49:73:06:59:2d:
70:00:8a:6e:68:ce:28:77:62:8d:69:f4:3e:06:a8:76:cc:9c:
bc:b2:a9:27:42:dd:5e:7d:ce:51:13:7d:0c:51:e8:de:78:5d:
87:6b:b0:e7:cb:8a:69:6b:7a:03:ab:7c:37:75:b0:25:90:45:
a4:d9:05:30:fa:78:27:88:04:51:2e:a5:c6:0b:e9:8b:43:55:
55:fe:bf:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:01:42 2026 by rpki-client