Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4311EDB8457211F1985E36A1CE1D38B0.roa
File: 4311EDB8457211F1985E36A1CE1D38B0.roa (raw, json)
Hash identifier: mKGiRG8p/gbYzyqdNl6VIEXf3vLoFl/KOO9InuyCWmA=
Subject key identifier: B2:56:C4:EA:4A:95:F2:86:A7:44:C4:38:EA:99:15:B3:5E:9A:C8:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C8A9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4311EDB8457211F1985E36A1CE1D38B0.roa
Signing time: Fri 01 May 2026 15:27:28 +0000
ROA not before: Fri 01 May 2026 15:27:23 +0000
ROA not after: Fri 05 Jun 2026 15:27:23 +0000
asID: 264605
IP address blocks: 154.88.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116905 (0x1c8a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 15:27:23 2026 GMT
Not After : Jun 5 15:27:23 2026 GMT
Subject: CN=69f4c660-5dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:45:bf:a9:f1:a9:0b:9b:1c:cd:67:41:b8:8e:
7a:25:20:8a:45:23:76:bf:12:41:b2:09:3a:43:33:
6d:cd:db:43:c9:6c:33:5b:42:e6:68:9b:a8:58:75:
59:f9:d9:9c:f8:94:e1:a1:81:9d:21:1d:5c:1a:e3:
4a:9e:28:be:58:14:5f:9c:87:01:23:ac:ef:47:5f:
33:bf:09:6b:78:36:0e:a6:ab:55:f8:7e:ad:77:e1:
04:3d:19:2e:5e:b4:0a:56:53:07:fd:a0:ee:d8:74:
41:14:09:fc:39:5d:ff:71:6c:5d:32:fe:c8:5f:78:
04:4e:43:4e:53:0c:56:10:bd:9b:cb:6c:be:fb:cf:
0e:60:70:e6:16:0c:7f:70:31:60:dc:53:66:ae:78:
dc:59:fd:1f:c3:74:7a:18:55:4c:71:33:d9:2f:16:
d2:20:b0:76:e7:c6:97:02:0b:ad:06:40:eb:99:e8:
7f:a3:ae:8d:6a:3c:c8:84:b7:b1:26:5d:7e:50:a2:
14:8c:7b:cd:1a:83:45:1d:f8:45:30:60:6e:c4:0f:
c6:00:62:cf:f9:18:bf:f3:7b:cb:7e:cd:29:f9:d9:
22:da:21:cd:10:d9:fb:19:33:b1:ba:92:02:ee:d3:
74:a2:51:b8:d3:45:82:b7:8f:ab:89:e4:02:d2:0e:
83:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:56:C4:EA:4A:95:F2:86:A7:44:C4:38:EA:99:15:B3:5E:9A:C8:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4311EDB8457211F1985E36A1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.192.0/18
Signature Algorithm: sha256WithRSAEncryption
02:18:e1:43:26:fe:57:d8:75:87:e5:cc:c6:fe:b3:20:3a:76:
a9:e4:c0:05:54:eb:a5:b0:d6:90:67:7c:c7:b9:cd:b9:25:45:
b7:5a:f0:2d:da:f1:12:20:af:61:c0:b7:f6:15:c5:f3:e5:8f:
93:19:fa:2f:6d:fb:d3:6c:f9:00:0e:4b:2d:5a:6c:39:65:dc:
6a:e2:00:dd:76:6e:4d:c1:8c:88:be:72:86:b2:ff:93:a2:65:
fa:93:56:35:f0:3b:82:f7:44:9a:a0:6f:2c:a2:c7:ea:7b:3c:
c5:c3:e3:3c:37:a5:31:c4:80:f2:0e:90:e9:1b:e7:49:d0:af:
9c:9b:6a:65:bd:aa:79:23:b3:bf:33:38:46:6a:61:91:cf:eb:
c3:3d:2f:13:30:9d:7b:43:58:8f:ae:9a:34:16:3d:8b:f7:3c:
e8:7d:2d:68:ec:42:8d:a1:3a:37:82:25:57:40:ab:9f:21:6b:
f8:18:35:8e:81:38:4e:57:51:9c:84:91:ff:8c:d5:89:2d:e6:
21:a5:4d:37:50:a5:f4:b7:a9:76:29:5a:3d:8d:29:6c:da:68:
b5:45:e0:f3:c3:5b:39:86:01:a8:7c:e9:5d:53:f2:dd:a2:2f:
cd:f4:80:07:c5:43:21:d3:56:92:4d:91:a0:47:71:e8:af:d0:
5f:3e:ec:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:57 2026 by rpki-client