Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/919A2E124EDE11F1BA0229F0CE1D38B0.roa
File: 919A2E124EDE11F1BA0229F0CE1D38B0.roa (raw, json)
Hash identifier: VuID9RlRHqSV7p2l+Ogj2nyOTNCO0263858boPuU94Q=
Subject key identifier: 4F:36:C4:F6:5F:77:0F:3E:57:91:9C:8A:07:A9:F9:3D:EB:F3:FD:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CB79
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/919A2E124EDE11F1BA0229F0CE1D38B0.roa
Signing time: Wed 13 May 2026 15:15:26 +0000
ROA not before: Wed 13 May 2026 15:15:20 +0000
ROA not after: Sun 22 Nov 2026 15:15:20 +0000
asID: 29802
IP address blocks: 154.196.144.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 19 May 2026 00:07:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117625 (0x1cb79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 13 15:15:20 2026 GMT
Not After : Nov 22 15:15:20 2026 GMT
Subject: CN=6a04958e-a689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0b:f6:d8:3b:cd:cc:9d:ea:cd:67:c5:b0:16:
22:ad:01:6e:d0:86:c8:e0:e4:5f:77:cb:d3:fd:00:
bb:30:2c:e7:22:f9:80:be:88:9d:e0:b8:ad:8e:8b:
1f:47:e4:67:24:63:9a:9e:34:b4:f4:d7:3e:f3:34:
66:74:78:bb:99:43:e0:8b:a8:b3:a2:a2:83:ec:90:
85:2c:15:82:a7:89:c5:48:94:4c:81:fb:d2:2b:f4:
07:fa:3f:20:fc:0d:fe:ef:e7:cf:a5:c4:ec:05:33:
74:26:61:df:e1:84:34:4f:44:51:72:13:d7:85:65:
8f:e6:3b:36:28:2a:87:9d:e2:f5:dd:b2:47:d8:4e:
44:8b:46:d3:03:ff:d4:23:b4:eb:4c:3e:e2:52:04:
60:33:98:47:be:c4:83:70:da:5c:12:ff:96:3c:18:
af:46:50:cc:10:a5:77:bb:53:db:2d:dd:87:a4:0e:
57:fd:e2:e7:58:9f:93:8d:33:56:55:5b:cc:23:d7:
3c:68:c0:e0:d8:8e:56:4b:fe:fe:31:c8:1d:ab:37:
6d:f0:b5:d6:08:9e:f5:53:99:03:53:20:b4:e5:8e:
db:a9:e4:1e:43:46:f5:54:66:66:0f:2c:a9:67:e1:
1f:48:33:5e:5e:76:42:ce:ca:6f:90:72:eb:23:55:
6b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:36:C4:F6:5F:77:0F:3E:57:91:9C:8A:07:A9:F9:3D:EB:F3:FD:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/919A2E124EDE11F1BA0229F0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.144.0/21
Signature Algorithm: sha256WithRSAEncryption
77:d9:46:23:3b:6a:29:55:92:ab:7b:61:a8:4d:40:f1:87:bd:
e3:75:ed:38:09:9d:a8:cd:6b:a2:0f:b2:30:12:69:43:5c:af:
32:52:62:0b:a4:70:dd:95:48:32:ae:cc:4b:b3:85:1e:2a:9c:
f8:ec:e4:18:4b:a7:69:0c:21:a1:ac:08:71:d2:33:d9:fa:2d:
4e:92:49:6b:32:eb:33:c1:a8:75:f6:e2:54:2b:04:81:4d:f9:
5b:ef:6e:e6:20:2d:f2:b1:dd:67:8a:55:1f:35:c9:9f:cb:e0:
54:cc:19:60:e6:a2:5d:9f:b3:33:91:e9:15:2f:16:47:25:be:
c7:87:38:6e:c8:7f:0d:ec:6b:16:db:a9:d0:1e:0d:09:4c:49:
b9:94:31:11:ff:7c:46:61:0e:a4:b5:64:ea:61:3b:58:a6:e8:
4e:86:77:09:32:3f:68:fb:06:76:57:d2:17:53:40:05:47:c0:
73:e4:b4:ee:7a:63:8a:58:8c:46:3c:55:e3:1b:b3:fe:1a:e8:
29:b7:5b:9e:22:95:5d:a5:0b:e6:70:ec:d8:25:c4:d3:c0:3a:
64:f5:cf:11:28:23:d8:d8:9b:ea:3d:a1:cd:6c:16:24:c8:a4:
3b:72:92:1c:8f:57:d6:e5:a2:15:27:09:c3:19:1a:87:65:7b:
81:12:05:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 05:22:47 2026 by rpki-client