Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41C3C4D03EC511F1BE5F75F1CE1D38B0.roa
File: 41C3C4D03EC511F1BE5F75F1CE1D38B0.roa (raw, json)
Hash identifier: udjQWn2CRrgYF+F5kRhE8iGwTU+VhRWal9GpAeRDXbU=
Subject key identifier: 22:6B:30:72:73:32:E9:EE:13:94:24:71:88:41:99:48:45:47:7B:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C6B9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41C3C4D03EC511F1BE5F75F1CE1D38B0.roa
Signing time: Thu 23 Apr 2026 03:33:56 +0000
ROA not before: Thu 23 Apr 2026 03:33:52 +0000
ROA not after: Wed 10 Jun 2026 03:33:52 +0000
asID: 3257
IP address blocks: 154.81.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116409 (0x1c6b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 03:33:52 2026 GMT
Not After : Jun 10 03:33:52 2026 GMT
Subject: CN=69e99324-efff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:60:ac:03:58:99:6e:f5:f0:73:30:3b:ec:1a:
81:a0:00:61:0e:31:40:b1:20:91:a0:93:97:c4:fb:
43:db:75:38:04:0f:71:48:92:37:bd:99:ea:13:64:
18:63:55:c6:71:5b:f3:c4:89:66:3a:6b:a0:c0:b2:
6f:13:dd:66:e1:82:00:8e:c6:04:9f:04:c6:c7:d0:
62:2e:ff:f3:97:75:09:8b:1d:6a:ec:d9:89:f2:3d:
4c:70:88:4d:e9:80:1a:46:b5:f8:23:a5:23:b2:be:
bb:58:70:25:c3:ab:4a:3b:64:0d:d5:16:f1:72:9e:
fd:00:aa:c9:50:bd:35:2a:cb:2a:86:22:5b:ce:7d:
09:f0:73:ab:ee:b9:9a:a9:a0:a6:23:d2:44:90:03:
7d:3c:66:9a:43:ff:d4:97:d9:8a:0b:44:e3:79:65:
2d:3b:71:48:ac:55:be:a1:f6:4c:dc:5c:51:68:6a:
43:e7:c2:4a:6a:c5:64:a8:89:4c:a9:17:41:d1:1d:
f2:e3:35:9a:15:9f:77:be:e9:1c:9a:5e:45:88:44:
e7:c0:46:7f:4d:0c:cf:c9:36:97:ad:8a:e6:82:e0:
af:62:9f:71:ee:18:df:ec:54:e4:15:b8:a8:dc:21:
ba:87:e2:59:32:e4:e8:6a:ac:13:ac:6b:68:2c:ef:
38:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6B:30:72:73:32:E9:EE:13:94:24:71:88:41:99:48:45:47:7B:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41C3C4D03EC511F1BE5F75F1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.50.0/24
Signature Algorithm: sha256WithRSAEncryption
55:ca:7b:12:01:2a:c2:a6:f7:26:d9:1d:f2:06:3f:a4:f4:3b:
aa:39:c7:fd:e1:ab:09:de:18:6f:50:77:6c:b2:55:6f:e0:4e:
db:08:21:7d:27:b7:f7:ec:55:18:12:52:1b:bc:8b:04:61:14:
cb:04:c3:23:67:53:ac:fa:8c:ca:4f:37:d3:93:3e:16:93:17:
0b:82:db:cc:4e:da:3c:a6:ad:4b:b4:57:a0:a2:09:f4:dd:1f:
b6:d9:f8:ee:e4:95:b6:44:87:9c:de:49:4d:b3:b5:ee:4e:3f:
a8:20:aa:84:e6:dd:9c:e7:6d:b6:f8:01:37:47:33:4a:c3:1e:
c6:9f:21:dc:d2:85:ef:49:d6:38:c5:c6:b8:4b:78:4a:2e:9a:
21:e9:50:68:cf:71:b5:e4:7a:f7:c2:61:e0:cd:29:be:01:b3:
50:15:67:71:e6:38:de:ac:e3:b5:dd:fd:59:e8:2f:17:d7:e9:
76:34:78:a0:94:12:bd:50:48:7f:f7:a8:99:a3:37:28:72:0c:
2c:d9:a9:4e:bf:fd:d3:e8:3c:8b:63:c5:54:ac:35:34:1e:06:
73:88:bb:06:ce:59:98:8f:49:24:99:02:fa:6e:6f:7c:5f:bf:
83:13:7e:3f:5a:6f:c6:12:36:b2:7c:5a:19:9c:02:f3:ad:ea:
b8:6b:aa:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 10:59:56 2026 by rpki-client