Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64FFAB283E1E11F1A65282FACE1D38B0.roa
File: 64FFAB283E1E11F1A65282FACE1D38B0.roa (raw, json)
Hash identifier: VmQCD4DWq+m7rgbmeLgHPTRvXyS7qvztUjXAS3PekrQ=
Subject key identifier: D2:32:B2:4C:45:C7:6F:8A:06:24:B5:3F:4C:84:97:8D:5F:5A:4D:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C667
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64FFAB283E1E11F1A65282FACE1D38B0.roa
Signing time: Wed 22 Apr 2026 07:39:29 +0000
ROA not before: Wed 22 Apr 2026 07:39:24 +0000
ROA not after: Thu 28 May 2026 07:39:24 +0000
asID: 52263
IP address blocks: 154.194.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116327 (0x1c667)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 07:39:24 2026 GMT
Not After : May 28 07:39:24 2026 GMT
Subject: CN=69e87b31-7b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:00:eb:f6:41:58:89:58:ad:07:a6:e7:f8:7d:
2f:af:6f:bd:70:9a:db:63:02:3a:70:ce:ea:b2:0b:
48:f9:f6:7c:19:5c:a4:83:d8:b7:01:28:43:e6:81:
02:e4:6e:42:cf:26:e9:5b:c3:ba:13:e0:76:04:ba:
5f:07:d5:04:60:c6:91:15:d8:9e:2c:44:7f:d5:80:
ec:fd:a5:c9:b8:5f:b7:f6:a3:5f:2f:1c:b5:b4:af:
f7:31:50:86:65:4a:45:d0:74:22:eb:01:61:5c:31:
89:4d:e7:8c:02:b8:df:8f:bb:40:2e:48:a5:b3:ff:
b5:5f:5a:04:6d:b6:4c:f8:98:b5:32:11:ca:cc:8b:
df:32:22:72:4c:71:c5:a3:98:0e:83:82:63:01:74:
5b:fb:cc:1a:9f:88:40:8f:e7:e9:0e:85:8d:19:5e:
9b:ba:70:e9:a3:4f:71:1f:2d:74:6b:8d:88:c8:f1:
3b:e5:f7:08:14:79:5f:f9:cf:ff:16:af:db:8a:e1:
ab:35:e3:c3:f6:be:d0:69:d1:2a:9c:c1:4e:c0:fe:
6a:44:76:24:94:45:91:ae:be:f1:ec:a9:5a:0a:1b:
34:ce:7e:ee:99:46:50:95:c2:62:a8:55:22:6e:63:
79:17:2e:62:6e:fe:a0:f0:d6:46:ed:84:66:a4:51:
07:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:32:B2:4C:45:C7:6F:8A:06:24:B5:3F:4C:84:97:8D:5F:5A:4D:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64FFAB283E1E11F1A65282FACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.69.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:b1:24:07:6f:70:40:5c:f2:15:a8:a9:f2:a8:b7:0d:d4:83:
12:fe:6d:22:67:f9:3f:d5:a7:c8:b2:ef:bf:79:94:fb:99:40:
fe:05:52:29:b4:2a:6e:75:d8:7e:50:c3:f3:73:f8:17:54:0b:
2f:69:99:32:f2:3d:43:e0:d9:5c:72:0e:e3:d3:0f:aa:0f:ce:
f4:b6:41:75:66:38:b7:b2:cd:9a:48:6c:ef:e9:9e:56:df:bd:
cf:56:14:91:bf:5e:3a:b7:7d:3c:c1:14:7a:5d:19:bc:70:2e:
26:97:d7:22:14:f5:14:a3:69:c6:67:d9:26:ae:ac:0c:e5:63:
cf:20:ba:e5:d0:b7:c1:f0:6d:d6:57:48:15:0f:22:52:2e:b0:
f0:d4:1b:e2:f2:95:21:2b:74:3f:72:a5:3f:df:56:8b:e9:78:
59:7d:9a:e7:06:4f:30:07:c1:5d:3f:60:9f:5e:ac:47:42:0f:
38:85:52:8d:2a:97:26:f8:43:55:bb:16:ce:f4:92:f2:48:7a:
19:d7:2b:9b:91:a4:66:eb:c2:87:2f:1b:66:d5:7a:12:2c:4e:
85:26:16:de:6b:ca:6b:cd:94:41:af:4e:f6:ee:94:da:f3:07:
c5:37:53:e4:5a:d3:6b:1c:ab:cb:97:e8:4f:4a:97:69:4e:d5:
1d:f6:59:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:45 2026 by rpki-client