Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27EFDA144A6711F1800134BFCE1D38B0.roa
File: 27EFDA144A6711F1800134BFCE1D38B0.roa (raw, json)
Hash identifier: hRMBngW6gFeVjKf2tIc37usT9lmglGSzPS7fRQnDs/Q=
Subject key identifier: B2:6A:A8:4C:BE:00:55:DC:40:19:B3:61:D7:A8:8E:2E:6A:C4:53:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C9FC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27EFDA144A6711F1800134BFCE1D38B0.roa
Signing time: Thu 07 May 2026 22:50:34 +0000
ROA not before: Thu 07 May 2026 22:50:29 +0000
ROA not after: Fri 22 May 2026 22:50:29 +0000
asID: 40779
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117244 (0x1c9fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 22:50:29 2026 GMT
Not After : May 22 22:50:29 2026 GMT
Subject: CN=69fd173a-a3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:71:2e:dd:e2:68:b5:9e:0f:5d:2a:d8:14:57:
59:d2:7e:ad:02:7d:a0:4a:6b:10:24:28:0b:3a:db:
90:f0:59:d3:c1:37:64:d1:c5:37:73:8b:b4:68:e8:
7f:91:72:a1:be:81:1f:68:a0:38:03:0d:7d:ab:28:
d8:ce:8e:31:e7:1f:2c:2c:4a:27:a6:5c:9a:51:42:
0d:d0:c5:aa:69:ff:ce:c8:a8:4b:77:a7:d2:4c:8c:
d7:eb:62:2a:ce:dc:02:54:b2:12:85:6c:77:ec:05:
ea:3b:36:67:8c:cb:2f:b5:85:53:2e:71:90:3c:e7:
66:19:21:7d:85:a9:bd:51:08:77:60:28:2b:a7:d2:
3c:86:b4:ad:69:2b:12:d8:61:8b:04:66:08:df:ce:
6e:fd:bb:74:4e:b1:ea:7f:10:37:cc:5e:cf:7b:83:
0d:d3:38:e1:dc:32:e0:3f:44:74:d5:12:f4:72:36:
c3:76:00:5d:d7:0a:3c:eb:fd:ad:95:bb:10:86:d4:
0e:fa:81:18:93:64:03:45:33:99:75:e2:61:91:f4:
99:d8:c0:be:7c:ba:46:ba:b7:77:4f:63:87:30:f5:
b5:c0:55:6f:cd:7a:df:c9:43:21:bf:cf:23:20:74:
2d:b6:2f:c6:b8:00:b3:10:ec:d0:9a:51:7c:78:d0:
fb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6A:A8:4C:BE:00:55:DC:40:19:B3:61:D7:A8:8E:2E:6A:C4:53:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27EFDA144A6711F1800134BFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
87:b1:a5:cf:1e:e8:96:bc:c5:c3:1b:02:0c:db:fd:88:54:a1:
6f:38:ff:30:94:29:40:c1:b3:92:7b:21:94:8f:0f:7a:25:98:
29:b5:63:0f:4e:46:82:43:d7:b1:b8:00:c3:c2:46:ea:ea:3a:
72:1a:ae:7e:4e:91:31:b4:89:e1:2c:f6:56:dd:d5:d0:42:a8:
05:96:2c:5e:5a:30:47:1d:a8:4c:34:3d:c5:b4:d3:99:71:53:
e2:1f:49:12:78:cd:f4:c7:48:08:a2:f4:1e:92:0c:1b:4a:5f:
2c:fb:4f:eb:92:21:ea:0d:e7:a9:38:21:d0:9b:13:34:79:4a:
94:bc:92:9d:07:37:3b:02:08:ec:c3:ca:10:2a:ea:b7:5e:10:
e6:c6:ea:37:d0:a8:f7:06:6e:c4:eb:41:b4:fb:5b:f2:c6:f6:
ae:0b:b0:91:35:79:c6:26:36:ba:d1:f9:6a:5b:a3:05:a2:6e:
13:08:8d:42:00:fa:13:d7:80:65:96:c3:28:cb:37:4b:74:32:
b8:ec:e4:18:33:6e:22:b8:84:79:94:d8:ec:39:92:c1:de:0c:
9b:d3:c4:89:56:22:49:c7:e8:f8:c4:1b:8d:8c:4e:a2:0b:e8:
85:24:f0:74:49:51:9b:cd:46:18:5d:97:39:ed:0d:f9:ad:ba:
60:9e:b5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:03:50 2026 by rpki-client