Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F052D3322ED111F197CB447FDAE4EC9C.roa
File: F052D3322ED111F197CB447FDAE4EC9C.roa (raw, json)
Hash identifier: RUD7fEptSeSKkBmXVSM4XjSHRlBYo/kooJjAR4ZcIGY=
Subject key identifier: 76:B5:4F:4B:10:F4:94:46:53:C5:50:37:5D:BA:84:29:E4:F1:F5:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C283
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F052D3322ED111F197CB447FDAE4EC9C.roa
Signing time: Thu 02 Apr 2026 20:24:24 +0000
ROA not before: Thu 02 Apr 2026 20:24:19 +0000
ROA not after: Sun 10 May 2026 20:24:19 +0000
asID: 138915
IP address blocks: 154.223.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115331 (0x1c283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 20:24:19 2026 GMT
Not After : May 10 20:24:19 2026 GMT
Subject: CN=69ced078-8553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f9:df:2a:81:19:0a:d7:c5:79:13:26:eb:9f:
84:96:4a:d4:0c:f7:4f:6f:c1:76:fc:76:f2:39:f0:
4c:be:a2:9d:ad:a8:2e:cc:83:dc:3b:75:d1:d3:54:
44:a4:52:ae:ca:b0:47:a5:75:00:6d:3e:e6:76:31:
13:2b:8d:72:02:80:aa:1d:d9:f1:8b:67:f4:c9:c5:
7a:a4:40:da:4e:6d:72:4f:ea:bc:52:87:5a:c5:38:
e1:18:a3:75:67:bd:2f:74:16:b8:41:a8:c5:70:03:
56:fd:15:2a:81:98:44:ae:af:be:da:df:a7:92:ab:
10:b2:ca:cb:a8:db:91:22:f6:83:aa:96:d0:7f:bd:
5c:d1:c8:bd:0b:dd:78:8d:78:40:39:13:2e:44:df:
2b:6f:ef:0d:32:1d:96:d2:c3:ae:52:62:62:61:1d:
c0:e6:4b:6b:24:ab:5a:30:8d:b9:d8:9c:c8:88:d4:
55:b4:73:7f:75:00:c5:50:ce:34:a5:25:2b:de:0c:
7d:87:bc:23:b1:0f:da:6a:82:94:70:b2:ee:0b:9b:
d0:28:95:fb:dd:89:9b:2b:e7:7d:ca:ff:e8:ec:89:
22:6f:b3:a4:59:2b:50:de:b3:50:93:6e:81:18:85:
dc:ba:20:79:0a:2d:05:66:7a:f9:b5:b4:96:17:4d:
9a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B5:4F:4B:10:F4:94:46:53:C5:50:37:5D:BA:84:29:E4:F1:F5:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F052D3322ED111F197CB447FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.65.0/24
Signature Algorithm: sha256WithRSAEncryption
34:7e:0b:56:68:00:5e:0b:6a:04:56:c4:6f:14:1e:45:67:30:
ce:27:d4:fa:6a:4b:e4:6f:e0:71:43:aa:6c:34:6f:39:3e:2e:
2c:c3:9f:bd:77:c8:50:0c:cc:2a:03:f4:a3:8f:35:82:33:61:
bf:a1:e1:01:9c:84:4f:62:46:c4:5e:01:1e:e5:12:ae:c6:60:
17:87:f4:23:c4:ee:91:17:e6:d6:0f:ed:11:26:41:b6:4a:dc:
07:7e:55:fa:a3:48:f8:01:43:e5:88:aa:6b:cc:76:ac:4f:5c:
e3:2f:1d:0a:15:4d:77:d6:1c:7c:48:50:ec:69:b6:e5:6b:4a:
86:62:20:5c:26:cd:56:55:f6:e0:33:df:8e:76:6e:4c:2e:8b:
d8:0a:29:a1:43:ea:95:43:e8:63:bf:c2:fe:8a:7e:0c:67:85:
0d:59:f4:69:84:4a:19:fe:a9:dc:ac:3c:ac:c5:8a:c9:f9:eb:
7c:35:fb:11:0b:b3:30:16:a7:e2:fb:4b:9e:39:ef:1f:58:9b:
8d:f2:c0:2f:da:e6:79:68:02:88:30:00:f2:9a:e7:76:99:be:
26:32:f0:ed:2b:40:4a:92:a1:9c:af:b7:1e:c6:d4:e2:0a:15:
86:3b:63:18:f9:51:cc:c0:3f:f6:42:7a:54:e1:72:ad:b2:ab:
4b:6d:7f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:18:59 2026 by rpki-client