Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43FF85DE479B11F1AA40C0CDCE1D38B0.roa
File: 43FF85DE479B11F1AA40C0CDCE1D38B0.roa (raw, json)
Hash identifier: 6MwSHfAWrDnRkT0T9svjT9Mwer4rMofHXKK5EpX7SLc=
Subject key identifier: 43:AD:00:61:A3:67:B0:DE:F7:79:E3:A8:7F:07:CB:2C:C0:7F:92:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C959
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43FF85DE479B11F1AA40C0CDCE1D38B0.roa
Signing time: Mon 04 May 2026 09:26:01 +0000
ROA not before: Mon 04 May 2026 09:25:57 +0000
ROA not after: Mon 08 Jun 2026 09:25:57 +0000
asID: 151347
IP address blocks: 154.84.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117081 (0x1c959)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 4 09:25:57 2026 GMT
Not After : Jun 8 09:25:57 2026 GMT
Subject: CN=69f86629-b03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:68:7d:2c:75:78:55:ed:4a:1f:9b:02:6f:
f1:91:cd:bb:7e:b6:39:d6:f9:fa:a5:2b:9e:f5:2a:
7e:b5:99:21:fb:1f:e5:11:ed:1e:23:71:d3:bf:20:
a1:8e:72:8d:cd:c7:eb:f1:81:98:21:69:91:2e:02:
08:a4:99:49:ba:28:b1:a2:4f:55:15:66:9a:42:4f:
78:58:97:01:f9:98:0d:03:be:75:4f:46:17:ba:22:
8a:9d:21:72:a0:97:e1:90:b5:02:db:32:43:e0:c2:
c9:8f:96:ad:65:2c:73:d4:65:04:23:09:54:ee:68:
38:95:42:8c:35:66:fa:6b:20:76:e4:b0:a0:38:37:
e0:a5:53:4a:28:af:93:bf:ed:45:d4:8c:3a:33:75:
b5:64:8e:13:4e:6e:99:bb:04:69:55:9b:c5:f4:1e:
89:d2:fb:02:77:e0:90:cc:c0:93:78:d8:83:75:b2:
33:c7:1c:46:d7:0d:55:0b:0d:83:57:25:30:8a:c2:
86:24:a8:4e:0b:d5:78:67:9e:76:03:25:1c:76:fc:
54:d6:be:36:f2:b4:ab:84:91:91:59:6b:17:9d:9b:
73:4e:18:9c:ee:02:ae:d4:3b:f8:38:bb:23:ad:e7:
61:cb:8a:90:77:c7:e6:aa:e6:58:6d:3b:ce:dc:46:
7f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AD:00:61:A3:67:B0:DE:F7:79:E3:A8:7F:07:CB:2C:C0:7F:92:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43FF85DE479B11F1AA40C0CDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.237.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:c4:fe:79:7b:e3:0e:12:4f:c6:01:08:dd:58:3c:04:59:78:
13:3c:e3:fa:5c:41:18:2d:84:b8:dc:04:d7:37:42:b5:ba:09:
f0:16:f5:32:78:d9:1a:04:b7:6d:fc:3a:b7:47:14:2d:5e:69:
2b:48:1a:e3:62:e4:ae:19:a5:cb:a9:78:b1:07:a7:b3:5d:aa:
72:fa:da:76:74:d0:2a:ad:76:75:cc:e7:39:5a:30:10:c3:bb:
40:17:53:2a:51:3d:da:0d:22:6d:ab:b4:95:e4:79:34:ea:9d:
22:59:23:18:64:84:1b:91:7b:53:2b:6d:15:1b:43:99:f6:11:
82:69:29:81:45:23:a9:cc:af:7e:37:2a:ac:ba:5f:0d:ce:e5:
d2:6d:5a:03:4e:d0:b9:12:86:46:15:06:a5:34:a9:be:f9:af:
b5:35:ad:f7:02:c3:a6:fe:fa:12:31:41:e2:5d:57:1a:a0:ac:
30:dc:2c:6e:bf:fd:9f:dd:b9:ab:37:f4:04:8a:26:46:cd:d3:
5c:a4:29:5a:40:6a:8a:aa:de:f8:92:32:06:5c:d2:32:dc:bf:
e1:02:1e:07:14:d1:f9:fb:6d:4c:c4:fb:12:f0:48:c2:09:e5:
9e:f8:d3:9a:0c:37:c0:27:dd:5d:0c:ba:90:b7:bb:98:5a:31:
57:05:68:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:08 2026 by rpki-client