Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/256EA78C3FB011F19D6C0B15CF1D38B0.roa
File: 256EA78C3FB011F19D6C0B15CF1D38B0.roa (raw, json)
Hash identifier: 6MfoZkifR977J/w6cfGQdPQyIpL6CsWCKbBRu+g0oZY=
Subject key identifier: 8A:F5:90:44:FB:40:E9:17:C0:C3:9E:DC:48:F2:C7:E6:6F:D3:08:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C701
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/256EA78C3FB011F19D6C0B15CF1D38B0.roa
Signing time: Fri 24 Apr 2026 07:35:20 +0000
ROA not before: Fri 24 Apr 2026 07:35:16 +0000
ROA not after: Sat 30 May 2026 07:35:16 +0000
asID: 142032
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 07 May 2026 15:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116481 (0x1c701)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 07:35:16 2026 GMT
Not After : May 30 07:35:16 2026 GMT
Subject: CN=69eb1d38-c33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:85:d6:c0:10:28:47:fd:65:34:b2:44:7b:3d:
e4:f7:d6:2d:ae:50:9f:6a:dc:54:41:a2:b2:51:f1:
49:71:dd:cb:73:39:08:28:e7:19:50:82:fb:12:52:
2e:85:ef:f1:f2:d2:a2:95:61:f7:0d:0a:98:ab:40:
c5:48:24:68:0a:a9:60:38:ff:4f:40:c0:30:3f:4a:
66:65:ea:1a:b6:fa:46:78:5b:bb:17:bb:19:84:03:
fb:d6:d0:98:f8:9f:f0:de:ff:f9:e8:66:88:5d:e1:
bc:c4:a8:54:42:e2:50:3e:24:5c:0a:96:bd:79:b5:
c9:0d:c4:ef:44:35:5b:4b:ec:3f:c0:c3:e8:2f:dc:
e7:5e:7f:0a:0d:1b:7a:df:b3:51:ff:ca:97:0f:62:
10:30:f2:e4:83:09:bc:7e:af:53:cf:62:5c:cf:38:
25:ba:de:7a:18:89:f6:ff:f5:d2:96:d7:c3:e5:8a:
4b:03:f8:c6:d2:18:5d:75:23:82:07:c6:31:0b:f4:
88:dd:d6:ad:aa:a2:b4:c5:74:12:0d:7c:a9:56:ee:
a0:01:52:06:73:55:b9:b0:ba:b6:26:eb:68:67:f0:
e5:22:47:2a:86:31:22:c6:df:ad:bb:fd:0e:23:71:
56:d7:2b:43:61:72:a4:e6:98:b4:c0:96:7c:52:87:
f4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F5:90:44:FB:40:E9:17:C0:C3:9E:DC:48:F2:C7:E6:6F:D3:08:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/256EA78C3FB011F19D6C0B15CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
bb:f6:41:29:51:ce:de:0f:9d:6f:ec:1d:ff:e2:f0:bd:fa:bc:
b6:e6:d5:c1:bf:0f:aa:7d:21:85:f3:fa:84:0a:f8:32:ac:c5:
a4:d4:af:d0:e9:21:0b:41:62:62:fa:49:8a:75:b5:00:f8:52:
0e:87:02:1c:b8:9c:30:4d:01:cf:75:d5:25:e2:97:be:b7:ef:
d4:84:58:fa:50:d0:d4:b2:b9:f0:80:08:b5:ec:5b:79:de:a3:
c2:04:43:52:e8:63:5d:c2:11:5c:70:d2:46:d2:41:4b:a8:70:
84:af:9d:c6:9a:b3:d1:a1:f0:4b:5f:87:f1:c1:40:69:47:00:
e8:ad:4e:b2:d2:7c:b5:f9:6c:2a:1c:2b:9b:19:40:65:2d:aa:
62:05:9a:c4:a2:de:00:fd:b0:8f:1f:32:7f:58:d1:bd:68:3d:
df:71:4e:a3:17:c2:80:6f:e2:fe:f1:f3:62:3a:51:ed:de:ea:
63:14:75:f5:80:25:91:10:0d:bd:c0:e9:c1:fb:af:dd:9b:07:
41:6f:a4:63:ff:ed:d3:71:2c:9f:92:09:1c:0c:10:12:a5:bb:
cc:2e:ea:2b:1b:0a:70:96:0c:bd:b1:ea:9c:14:56:33:ce:ec:
fd:30:05:ee:12:97:86:6e:6a:66:03:23:f8:ca:37:4f:eb:0c:
74:32:a9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 02:40:42 2026 by rpki-client