Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B38DD2E3D6611F1933FEC01CF1D38B0.roa
File: 1B38DD2E3D6611F1933FEC01CF1D38B0.roa (raw, json)
Hash identifier: HRgXM4R4EhcP6XtSIEYbIN9J2rx3En1RYZ8vaccri8g=
Subject key identifier: 23:A8:CD:56:99:1D:2B:29:52:88:BE:5A:B5:D5:EB:FD:F6:15:B5:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C648
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B38DD2E3D6611F1933FEC01CF1D38B0.roa
Signing time: Tue 21 Apr 2026 09:40:18 +0000
ROA not before: Tue 21 Apr 2026 09:40:13 +0000
ROA not after: Thu 11 Jun 2026 09:40:13 +0000
asID: 214769
IP address blocks: 154.91.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116296 (0x1c648)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 21 09:40:13 2026 GMT
Not After : Jun 11 09:40:13 2026 GMT
Subject: CN=69e74602-fe46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d0:47:28:08:79:c0:e7:d3:cc:de:f4:2a:09:
f8:0a:b9:50:2e:f8:16:e5:1d:5c:b8:92:bb:dc:c7:
46:f6:60:3c:d8:9e:81:89:96:2a:3c:92:b8:f0:31:
53:cb:96:0d:46:36:7b:3e:0a:ac:c1:c9:52:2e:d5:
d2:f5:6e:7b:2e:6d:fc:a2:6f:08:ba:cd:9b:51:e0:
6b:f3:9a:e6:41:9c:e8:6b:8b:52:ea:b5:81:73:78:
2b:b6:a3:53:4a:0f:8b:f9:81:0c:0f:df:2a:52:bb:
e3:83:01:a6:dd:3f:78:18:eb:e3:1b:8e:93:37:be:
83:b9:27:bb:41:08:60:94:4b:51:cb:7e:6a:fb:9e:
6b:7d:7f:09:98:6f:d6:5f:80:72:b0:a4:08:6e:25:
15:18:84:ee:81:04:87:57:d1:27:db:79:4b:e6:0a:
a6:17:33:7a:74:19:a8:95:dc:2e:70:e7:14:f6:ad:
63:27:9e:bd:a1:20:19:91:d4:99:7b:e4:cf:4e:d8:
25:69:4f:e6:62:f3:9d:ee:56:ef:ec:d8:a0:59:01:
0d:33:91:e9:81:b2:2b:71:31:80:32:b4:69:32:21:
1a:bd:0f:41:28:f7:ef:26:a3:95:ad:57:b5:96:7e:
7d:20:05:d6:02:b7:fa:41:60:9c:ef:01:ed:83:da:
49:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A8:CD:56:99:1D:2B:29:52:88:BE:5A:B5:D5:EB:FD:F6:15:B5:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B38DD2E3D6611F1933FEC01CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.38.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:be:66:92:e0:34:48:1d:47:cd:af:7e:b9:72:c6:1a:f3:52:
cd:76:65:a4:65:df:9e:01:93:17:84:04:4d:60:3e:d7:9a:90:
c7:72:5b:ba:e8:5b:3b:98:ad:57:ce:66:5b:c8:64:86:e9:2e:
dd:c6:68:8b:39:2f:45:41:94:55:a5:90:0a:f0:66:cc:8c:b9:
1e:ff:34:c1:8c:e0:55:5e:6b:16:14:86:06:7a:4b:d1:cc:f7:
db:80:64:03:7f:64:06:f9:49:25:26:99:bc:52:db:ec:48:3f:
70:d6:a3:2b:d4:1f:18:1c:30:52:7f:3f:3b:ae:6c:c3:61:95:
3e:0e:c7:c7:bc:31:ea:99:a1:e6:10:ad:5c:a5:ea:4e:5e:dd:
8d:19:30:91:59:72:6b:44:98:81:85:fa:5a:97:e3:c6:c1:e0:
68:1e:a3:1a:07:36:69:3d:ff:6a:66:64:df:78:10:cd:65:44:
1c:4d:a5:9b:9e:74:3c:68:2c:79:4c:04:ca:7b:91:88:7f:d7:
20:12:fe:f1:c8:ad:11:d0:57:72:93:a5:cb:0c:79:a2:f0:c4:
27:c7:66:44:99:93:f9:9e:b3:8c:64:bf:e4:ba:74:e0:51:6b:
b8:9d:a8:19:de:59:db:1d:97:6d:b1:b3:09:9d:cb:be:d0:f0:
df:b4:b1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:00:25 2026 by rpki-client