Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0F83AFA3A4F11F199CF0118CF1D38B0.roa
File: F0F83AFA3A4F11F199CF0118CF1D38B0.roa (raw, json)
Hash identifier: 28KoTUumMzBXo7TICIX/XfDlJFI5Pl9wZY1QF+/7rEo=
Subject key identifier: 7B:CC:F8:68:36:26:AE:0D:E3:C9:47:B5:D5:4A:A2:4C:02:3C:44:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C5C5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0F83AFA3A4F11F199CF0118CF1D38B0.roa
Signing time: Fri 17 Apr 2026 11:24:05 +0000
ROA not before: Fri 17 Apr 2026 11:23:59 +0000
ROA not after: Sun 24 May 2026 11:23:59 +0000
asID: 154376
IP address blocks: 154.89.151.0/24 maxlen: 24
154.89.152.0/23 maxlen: 24
154.89.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116165 (0x1c5c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 17 11:23:59 2026 GMT
Not After : May 24 11:23:59 2026 GMT
Subject: CN=69e21855-f54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f2:93:0a:0c:99:49:9c:14:32:7c:d5:39:74:
9f:a7:37:26:63:81:cf:39:30:1c:f7:c3:c0:b9:d1:
12:03:75:e2:b4:44:f1:80:4f:04:0a:6e:3a:de:53:
60:98:f1:40:01:f0:e9:01:e7:9b:ef:35:37:ee:bd:
bc:b8:dd:69:f5:1d:ba:bd:e6:2a:14:42:8c:08:34:
5f:50:82:84:df:15:bf:9e:42:ca:69:40:a0:0d:c2:
2b:eb:0e:3f:c5:f8:e5:9c:19:0c:b9:93:ab:4b:fc:
b7:06:19:a5:a0:43:32:0c:29:a1:6f:70:7e:c2:8a:
03:6e:09:a5:c9:67:67:d4:ca:83:40:a9:76:e5:09:
8d:54:c2:cd:3d:99:62:16:17:83:58:2f:da:60:63:
42:c9:df:cd:34:38:63:59:a8:b7:7c:ea:73:93:59:
c6:d9:89:36:ae:d6:a4:95:ff:56:1b:b0:e6:4f:5b:
12:14:7f:ce:e3:1d:68:fe:b4:cc:81:ae:ee:40:26:
dc:24:3b:8c:62:e4:46:81:c4:7d:d8:88:f3:df:ab:
82:d9:ca:5c:51:c6:78:6e:75:4a:e8:97:4f:a0:a6:
b9:2b:76:e4:50:dc:f2:0d:4c:8d:80:81:71:ba:79:
97:9f:81:6d:0a:ed:2b:32:24:11:58:84:b0:fa:a2:
f7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CC:F8:68:36:26:AE:0D:E3:C9:47:B5:D5:4A:A2:4C:02:3C:44:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0F83AFA3A4F11F199CF0118CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.151.0-154.89.153.255
154.89.157.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:cd:73:f4:34:b9:40:13:b3:df:6d:f4:50:e8:bc:9a:89:96:
30:0e:e9:80:00:f9:47:af:cc:4a:65:dd:86:66:0a:bd:0b:83:
e6:fe:cc:ef:de:33:e8:dc:06:f8:a6:12:aa:f9:de:97:10:9a:
26:87:8f:51:eb:c1:be:65:37:28:37:c4:8d:06:97:44:55:c1:
72:fb:9b:62:15:4b:aa:47:5e:8f:1a:72:e1:12:33:bd:4e:b2:
09:6a:95:1a:bb:22:a6:3b:ff:bc:e6:7b:d8:6c:ab:79:95:ac:
f3:b0:c8:ce:56:bd:c2:84:41:2b:d7:3a:26:d8:67:3b:38:2f:
7e:b6:fe:ab:5b:f5:c5:3d:f3:3d:34:80:c2:c6:af:af:46:51:
dd:a5:3c:93:22:a7:ee:ea:c2:79:f2:eb:bf:0c:6f:e5:8e:36:
66:f0:ac:a5:19:69:34:f3:5f:c7:cb:00:ca:86:5e:ed:15:af:
12:43:3b:d8:75:02:23:72:a4:8a:cc:1c:07:9d:1c:5a:5f:e3:
53:c0:76:e8:a0:be:d3:d2:62:1d:02:81:71:49:32:52:c8:4b:
c9:54:f0:3e:47:df:af:49:1d:29:ff:2c:ce:b4:88:fe:64:03:
b6:dc:bd:7a:01:e4:a9:0b:21:be:a4:41:66:31:0d:1e:11:51:
a0:c8:03:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:13:33 2026 by rpki-client