Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/236E65923EEF11F18F7FABF9CE1D38B0.roa
File: 236E65923EEF11F18F7FABF9CE1D38B0.roa (raw, json)
Hash identifier: kTx+p2oi9qq6UqfoZkwf05ZGSAlBHigTsMqs8w/iUhc=
Subject key identifier: E5:61:C7:93:AF:03:00:2F:30:58:B8:05:75:9F:74:8C:4B:83:47:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C6D3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/236E65923EEF11F18F7FABF9CE1D38B0.roa
Signing time: Thu 23 Apr 2026 08:33:44 +0000
ROA not before: Thu 23 Apr 2026 08:33:39 +0000
ROA not after: Sat 30 May 2026 08:33:39 +0000
asID: 9304
IP address blocks: 154.200.43.0/24 maxlen: 24
154.200.51.0/24 maxlen: 24
154.200.52.0/24 maxlen: 24
154.200.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116435 (0x1c6d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 08:33:39 2026 GMT
Not After : May 30 08:33:39 2026 GMT
Subject: CN=69e9d968-055d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c8:ff:28:19:c3:b0:5d:64:35:6b:b6:9c:9c:
cf:32:c8:c2:d6:4d:32:c5:81:67:a2:4b:b4:c2:a2:
c6:a5:26:38:b1:49:e4:cd:7f:e9:95:6b:81:01:20:
76:ec:47:d7:a5:99:1c:88:78:2a:8d:33:58:e8:07:
d4:24:cf:ee:c7:c5:9e:1f:1b:44:6a:bb:96:de:24:
0e:b4:38:9c:f3:1c:00:d7:c2:55:59:eb:a2:50:77:
29:1d:a0:60:46:09:52:01:78:b4:73:63:af:fe:40:
da:6a:22:f1:15:0c:fe:d0:cd:68:e2:d4:d7:74:49:
71:2c:96:62:42:90:e0:c6:1a:4b:09:21:98:10:7d:
5b:bc:0e:05:aa:18:f4:13:f1:16:62:53:86:d1:c2:
83:01:4d:e6:47:36:2a:af:6b:49:7d:fc:56:54:3d:
c7:6a:1c:97:cb:80:88:fa:34:9c:8a:17:ec:d9:ce:
61:e5:41:61:4b:46:15:1a:e6:96:12:b8:d8:c5:7d:
47:c8:b5:3d:b2:06:d9:ae:8b:48:c7:7e:46:7c:80:
d8:40:9a:53:73:cc:94:a7:f1:a8:b6:99:ea:db:e4:
bf:33:10:01:3e:ef:9e:ad:14:a2:16:ed:87:4f:d8:
9d:2c:70:55:94:f9:b3:37:a1:0a:1a:ad:e5:bb:0e:
7e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:61:C7:93:AF:03:00:2F:30:58:B8:05:75:9F:74:8C:4B:83:47:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/236E65923EEF11F18F7FABF9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.43.0/24
154.200.51.0-154.200.52.255
154.200.129.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:7b:13:aa:63:01:ea:18:42:75:83:7d:84:d1:4e:65:ff:3f:
5f:18:2a:8f:17:66:19:25:c3:27:f3:a6:66:b8:aa:f5:6e:25:
97:38:a5:0f:ac:a1:ef:9d:71:cd:5c:fa:95:51:43:6a:03:3a:
bf:68:8f:74:12:85:35:06:91:ac:05:59:09:b0:f7:1b:96:17:
43:3b:dc:1a:4f:74:fb:27:3a:5a:9b:79:04:5f:bc:e8:92:a0:
04:df:1d:60:62:c3:25:82:6e:2c:cf:8d:b3:7b:51:e9:61:d5:
a1:c7:fd:00:ac:51:52:af:ab:c2:86:d4:f7:76:25:a2:30:ad:
40:a0:91:99:0b:7b:27:bc:50:84:fc:6e:00:a7:d4:58:2b:35:
73:4c:8b:a8:ac:6c:cd:19:53:a9:e6:05:bb:fb:49:55:20:a9:
23:9e:5f:35:f3:2a:6d:f0:fb:b9:d3:22:91:8f:71:b1:37:f9:
9c:b4:38:1a:ea:a3:e4:3b:b6:9d:7e:3c:dd:73:d3:c6:d9:48:
ae:e0:d6:ce:ff:22:9e:0f:22:84:af:26:ce:98:d4:26:d5:31:
01:58:ac:f6:11:70:d8:fe:ed:9e:55:74:5d:18:74:b9:07:c6:
e8:6f:5a:34:3f:48:db:4b:bd:c1:61:a8:71:0d:d0:ac:8c:31:
b9:0f:8d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:00:11 2026 by rpki-client