Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E209FD322F1211F1B49F9E85DAE4EC9C.roa
File: E209FD322F1211F1B49F9E85DAE4EC9C.roa (raw, json)
Hash identifier: /GCugGUdLM5vQVhKPmweYKBY3gwWnAmYd80tEreMuzg=
Subject key identifier: 16:89:0B:C0:23:70:EC:7B:39:AF:5E:F8:D9:2E:16:5F:1A:29:16:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C296
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E209FD322F1211F1B49F9E85DAE4EC9C.roa
Signing time: Fri 03 Apr 2026 04:09:18 +0000
ROA not before: Fri 03 Apr 2026 04:09:12 +0000
ROA not after: Fri 08 May 2026 04:09:12 +0000
asID: 272092
IP address blocks: 154.83.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115350 (0x1c296)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 3 04:09:12 2026 GMT
Not After : May 8 04:09:12 2026 GMT
Subject: CN=69cf3d6d-d854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:20:54:be:85:64:92:1e:0b:9b:ce:bf:27:4d:
42:ea:54:0a:b8:03:ac:1c:d3:4e:98:19:03:3a:85:
a1:f6:0a:7b:c0:87:5d:95:2b:72:41:cd:96:ae:fc:
93:bc:3c:6a:5e:8e:68:b2:2d:5f:c1:98:65:84:61:
d2:a4:a9:1d:36:e3:df:66:55:a4:c7:c6:27:22:7f:
32:87:78:08:5c:05:4a:42:d7:63:00:89:f1:a3:27:
0e:98:77:30:20:12:0a:43:82:e5:d7:f9:c9:58:08:
c7:8b:75:f7:bd:f8:fd:11:0b:d1:e8:14:44:b7:c1:
f7:aa:b2:cc:42:e6:db:0f:d9:44:93:d0:55:0d:dd:
54:5a:0c:01:08:a2:b5:a8:5a:e0:01:c9:1e:ec:7d:
e0:b8:e4:46:2f:0f:bc:f4:7c:a1:04:39:44:53:09:
fc:3e:21:26:4e:a5:d0:fe:56:d4:18:2e:38:f6:10:
c3:6f:8b:dc:3c:14:16:86:71:3c:95:4a:c6:50:6d:
a8:35:d9:62:8a:13:c1:10:9d:5e:e4:4a:dd:25:28:
e2:ab:05:15:c9:1d:96:d5:76:d6:29:58:31:59:e0:
c1:6c:bc:3a:c7:16:bd:b4:57:20:e8:f4:52:a5:49:
d9:b7:72:69:9d:64:cf:79:4f:00:80:4d:53:1e:8c:
cd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:89:0B:C0:23:70:EC:7B:39:AF:5E:F8:D9:2E:16:5F:1A:29:16:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E209FD322F1211F1B49F9E85DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.29.0/24
Signature Algorithm: sha256WithRSAEncryption
99:0f:09:05:af:6e:f9:23:df:51:84:eb:30:8f:49:34:03:0f:
6d:9f:f2:0a:91:32:dd:14:93:11:27:02:b4:c0:d0:70:ac:75:
d9:8f:64:df:fe:a5:4f:50:ed:63:73:80:15:64:a7:bb:f2:ff:
ba:db:5f:44:6a:4a:3b:f6:59:1d:09:bc:a1:70:27:57:15:a7:
e1:55:40:6a:a0:75:b4:a7:74:80:4e:5c:17:02:0e:45:26:26:
16:1b:b9:e6:66:d4:82:29:e7:d6:0b:ba:63:83:43:ed:a8:e8:
d0:ba:bf:f8:6a:f1:79:7d:d9:b4:ae:f9:b0:45:2c:93:e6:e3:
85:f6:06:bb:e8:86:2d:c7:a4:cb:79:00:92:5b:19:55:2c:5a:
cd:47:0b:52:d3:b6:a3:1a:50:a5:02:35:0d:ac:89:9f:4d:cb:
d8:dc:39:56:af:77:19:d4:d7:f0:08:06:f9:da:47:f0:47:c2:
4d:e5:6f:4f:8e:1a:68:2f:0c:fa:6a:4f:b4:09:a0:da:a7:08:
bc:1b:b9:00:bf:ec:c6:27:a7:9f:e0:89:19:56:16:1c:da:78:
22:5a:e0:0c:33:58:79:d4:6e:53:b5:47:95:49:db:9b:64:cb:
32:f4:fc:64:fc:8b:e7:57:9b:6c:f7:1e:ce:85:8b:bc:0f:05:
4c:54:be:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:24:35 2026 by rpki-client