Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/079C5FD8421711F1815609C0CE1D38B0.roa
File: 079C5FD8421711F1815609C0CE1D38B0.roa (raw, json)
Hash identifier: qaFgrhak3PJZGxPMAZW7u+TuZ/dliWTkreq+qNmy8zA=
Subject key identifier: 58:16:F8:E5:3C:B5:F9:CD:36:44:4A:2C:E9:78:E7:2A:BE:78:41:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C798
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/079C5FD8421711F1815609C0CE1D38B0.roa
Signing time: Mon 27 Apr 2026 08:56:51 +0000
ROA not before: Mon 27 Apr 2026 08:56:46 +0000
ROA not after: Tue 27 Apr 2027 08:56:46 +0000
asID: 328608
IP address blocks: 154.200.241.0/24 maxlen: 24
154.200.242.0/24 maxlen: 24
154.200.248.0/24 maxlen: 24
154.200.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 May 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116632 (0x1c798)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 27 08:56:46 2026 GMT
Not After : Apr 27 08:56:46 2027 GMT
Subject: CN=69ef24d3-9a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f1:5e:71:1f:8f:af:21:cf:46:2b:fb:83:de:
d1:b1:05:94:00:74:05:95:24:d5:21:e4:b6:aa:1e:
a1:25:f8:ad:e1:90:05:0a:2f:aa:0c:a1:1e:71:8e:
35:d9:0e:6a:55:85:ba:7c:60:e1:14:b8:83:29:50:
a4:50:29:f9:13:28:b7:a6:0f:bd:ac:c2:03:04:c2:
53:38:30:05:16:df:d2:c7:be:59:2e:0e:07:6b:c9:
50:8a:b4:fb:80:3a:da:3a:77:fa:2a:2f:99:cc:96:
44:57:4f:72:4c:1e:59:9b:b2:5a:cd:89:8c:b4:19:
28:d6:c2:84:68:03:c4:a2:50:bd:66:51:f7:7a:9c:
fc:8f:19:9f:82:f9:79:b2:8b:28:60:fe:8a:91:8e:
41:42:6f:f2:dd:9e:34:a0:17:60:ce:85:87:88:26:
a4:ed:1f:af:6b:06:f4:35:68:57:73:16:e3:1d:c6:
88:d1:49:ec:70:c1:23:6b:78:1b:ea:14:18:e6:0e:
b8:98:f7:c8:07:f9:de:74:16:2f:fa:e1:08:fd:45:
0f:64:0a:0f:5a:80:36:e6:07:e3:bc:8d:f0:f6:80:
1d:b9:1f:74:20:0e:64:d8:0a:b5:97:09:0f:9b:dd:
53:56:be:b8:11:f9:1c:6a:90:ef:e5:ff:e9:fc:9b:
39:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:16:F8:E5:3C:B5:F9:CD:36:44:4A:2C:E9:78:E7:2A:BE:78:41:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/079C5FD8421711F1815609C0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.241.0-154.200.242.255
154.200.248.0/23
Signature Algorithm: sha256WithRSAEncryption
95:e1:86:06:d8:05:da:75:e7:ed:9d:d1:76:ad:68:ee:95:90:
d4:59:65:7f:c4:b1:95:8d:34:2d:32:0a:a1:b9:b2:27:9a:24:
7f:7a:38:40:87:ea:17:5d:5b:01:9a:aa:5f:f4:30:b6:45:df:
fc:5f:67:00:42:aa:69:c7:76:eb:52:49:51:8a:28:e9:8b:2a:
fc:a5:3b:c8:b8:9a:f0:54:e7:59:61:d2:92:49:57:90:c9:ec:
26:ca:78:84:ef:19:b7:3b:10:6b:fa:24:74:10:3a:91:61:33:
83:d3:b4:ba:fe:63:d8:d9:80:d2:07:38:ac:45:5d:c6:6d:3b:
f5:27:f9:f5:7a:a1:20:db:67:8e:8c:6b:8a:c2:8e:8e:7d:f2:
41:1c:50:fb:96:dc:22:fa:ac:b1:59:fa:07:8f:a1:5b:3f:65:
c3:b1:d6:b3:62:fe:2b:86:29:02:e6:f7:29:f0:02:33:59:23:
97:a1:88:f7:a5:bf:ed:0b:76:dc:ad:a7:44:a2:13:6f:2b:7e:
89:48:9c:fc:4a:3f:ae:0b:ae:7c:d6:72:32:72:b8:8a:81:aa:
3b:92:f5:ca:8a:e4:6b:49:24:88:88:6e:d9:8a:5b:fd:53:59:
88:39:24:aa:78:1e:44:0a:35:e2:56:60:9d:f5:67:c1:d1:2c:
0b:07:49:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 23:48:27 2026 by rpki-client