Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED68D5B83A5C11F195C2C5E3CE1D38B0.roa
File: ED68D5B83A5C11F195C2C5E3CE1D38B0.roa (raw, json)
Hash identifier: LHVSknukiwW0+PAKIsN+QaPIrO/I1Dk3drWgjwoLF1A=
Subject key identifier: 6E:99:92:02:95:B9:16:A5:FB:E3:D5:7B:04:BA:E8:59:D5:C4:8C:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C5DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED68D5B83A5C11F195C2C5E3CE1D38B0.roa
Signing time: Fri 17 Apr 2026 12:57:02 +0000
ROA not before: Fri 17 Apr 2026 12:56:57 +0000
ROA not after: Sun 24 May 2026 12:56:57 +0000
asID: 61414
IP address blocks: 154.217.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116187 (0x1c5db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 17 12:56:57 2026 GMT
Not After : May 24 12:56:57 2026 GMT
Subject: CN=69e22e1e-c9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b6:f1:64:9b:67:c1:a6:ac:0c:31:e2:e0:92:
74:51:dd:3c:b8:e1:89:a3:a3:52:02:36:3b:df:35:
dc:5a:97:ac:4a:b8:c1:b7:b2:f6:a6:e2:ad:a4:66:
87:50:43:e4:e5:d0:f9:b7:0b:9f:fe:92:19:ec:50:
56:3f:69:3d:01:10:18:8e:a8:b4:e0:94:95:19:1c:
22:4f:3e:9f:68:10:f3:18:28:50:68:32:9e:2a:a5:
9e:1e:7d:9a:29:f0:85:cb:b6:c0:49:44:1a:c4:b3:
36:4a:d4:27:35:6e:f9:22:c1:ab:9f:38:49:c4:4f:
ee:3d:9f:98:02:f7:67:5a:bd:3c:c9:df:99:80:a2:
2f:5d:61:b0:e1:a3:a6:41:a2:44:bc:11:ee:c3:49:
1b:5e:40:48:7a:e0:ba:21:9b:e5:e0:da:8b:2f:2b:
ca:c8:f5:cd:63:61:1f:e9:ea:7f:dc:98:73:b4:11:
84:0c:82:71:38:64:f3:ea:61:de:06:27:de:4c:f8:
6c:39:c2:bb:33:7e:d6:61:69:36:51:cd:12:a6:d9:
80:b0:26:9f:2d:9a:16:70:7e:01:ee:42:5c:9c:1c:
4d:e8:5e:24:85:9e:18:28:1e:1c:0e:5f:7a:6e:ef:
2b:ba:02:a2:96:bb:d7:9f:3e:e0:75:ac:a8:6a:87:
33:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:99:92:02:95:B9:16:A5:FB:E3:D5:7B:04:BA:E8:59:D5:C4:8C:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED68D5B83A5C11F195C2C5E3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.248.0/21
Signature Algorithm: sha256WithRSAEncryption
bb:3e:83:f7:f0:a0:e5:98:13:cb:5d:64:86:20:e7:4d:e7:60:
b8:8a:96:1e:83:ae:0e:7c:2a:b8:11:14:5a:79:ce:e3:e1:05:
bc:42:16:5e:b2:3c:b5:33:82:50:fd:82:94:59:76:06:0e:fd:
22:7b:b7:13:34:94:af:7b:f8:96:1f:4a:9b:01:d5:18:0d:3a:
7a:b8:71:9c:1b:eb:e2:5b:46:97:e7:c0:1c:1f:8b:9d:56:57:
f2:4a:2c:1d:47:d7:83:60:a4:53:31:04:6e:45:9c:7b:eb:63:
01:18:37:f4:79:da:6a:71:ee:b8:9e:c5:31:00:06:a4:a4:cd:
b7:3a:88:a9:6d:89:bf:55:5c:d0:c2:6f:a1:a5:ed:2b:36:39:
84:77:0e:52:54:13:2f:94:74:d9:11:ac:94:6c:81:0f:84:9f:
cc:9b:90:77:d5:0e:2e:79:69:d2:bc:66:20:4a:26:fa:2e:82:
54:be:71:af:54:16:f7:48:3b:8c:f3:14:15:61:34:75:b3:10:
93:7a:5b:a0:cf:ed:d9:34:4c:e5:5e:3b:77:53:18:c7:68:8d:
f6:9b:d6:d1:0d:2d:b2:72:28:17:b9:83:a0:1c:5c:25:5c:a6:
c3:08:a5:2a:d3:8f:0e:06:62:f1:62:c0:20:d3:cd:60:97:21:
ff:dd:c0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:55:38 2026 by rpki-client