Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66E70BA23AF911F1B5C31EA9CE1D38B0.roa
File: 66E70BA23AF911F1B5C31EA9CE1D38B0.roa (raw, json)
Hash identifier: yIIWRls0svrSIUhaHuZy8rqaRnSWvrEvu0I0xMx6hpw=
Subject key identifier: 88:CD:D2:70:C1:C9:7E:67:B5:00:6A:78:D4:6D:53:90:C5:E3:C9:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C5F2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66E70BA23AF911F1B5C31EA9CE1D38B0.roa
Signing time: Sat 18 Apr 2026 07:37:08 +0000
ROA not before: Sat 18 Apr 2026 07:37:02 +0000
ROA not after: Sun 24 May 2026 07:37:02 +0000
asID: 200758
IP address blocks: 154.83.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116210 (0x1c5f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 07:37:02 2026 GMT
Not After : May 24 07:37:02 2026 GMT
Subject: CN=69e334a3-3dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a4:c9:2d:ba:fa:26:01:aa:81:07:59:12:cd:
34:bf:f2:09:78:78:8a:18:77:b2:cc:2c:51:7d:69:
bb:dc:aa:7f:b5:a1:e6:8d:62:64:3d:03:9e:d8:3f:
89:f4:ee:1d:61:6f:de:73:9f:2c:32:de:cb:f7:c4:
48:a0:5a:f2:02:90:47:7e:c9:db:0b:8d:1f:31:cc:
fe:8c:e4:5b:86:59:5a:8b:55:1d:3c:77:c1:c8:d7:
3f:76:84:a6:5a:31:da:90:70:e6:ad:1b:a3:0e:ed:
34:dc:e6:e4:df:40:ee:5e:ae:49:63:05:b2:e6:c7:
37:65:7e:e2:1b:ca:af:53:79:6a:4c:8f:ca:a8:fb:
bc:75:1b:8e:52:9d:0c:fd:ea:5d:e9:c6:3b:90:f7:
54:d1:f0:a2:2a:68:a3:8b:61:f1:3f:55:fd:a8:26:
4a:a4:62:7d:7d:ef:36:27:be:0e:dc:5d:a0:6a:9c:
78:ef:21:75:f3:c8:73:d3:91:bc:82:2e:4f:6a:ee:
ef:10:40:ae:2e:22:23:00:e5:eb:a0:39:cf:d9:2e:
09:9c:bf:7c:50:2c:7b:48:1d:8a:4f:47:96:1b:66:
9b:6e:e7:4a:3f:ff:dc:db:aa:df:d8:2d:77:1d:95:
f3:60:22:8a:64:2b:59:3d:9b:ec:ed:ae:f6:3d:18:
54:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CD:D2:70:C1:C9:7E:67:B5:00:6A:78:D4:6D:53:90:C5:E3:C9:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66E70BA23AF911F1B5C31EA9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.186.0/24
Signature Algorithm: sha256WithRSAEncryption
51:03:42:53:4a:ed:00:27:77:c0:dd:87:49:5c:da:f8:d5:c0:
6a:34:ae:73:ad:06:cc:44:a3:43:1f:5c:8d:0e:91:58:5c:d5:
41:43:67:96:10:d1:ef:65:38:52:c0:08:0f:b9:67:bc:e0:3d:
0e:71:35:bc:20:ab:c6:d3:f8:dd:d0:ae:61:63:3d:0a:b5:b2:
5e:69:22:e4:08:bf:be:be:04:20:13:73:63:1e:ea:d2:2b:87:
a1:bd:8f:8f:70:1b:47:8e:f9:79:92:3d:34:2c:25:c4:c4:d4:
66:42:aa:ad:2e:e9:cc:62:8e:a5:c5:89:75:4e:80:81:30:ff:
98:5f:58:d6:a2:48:bc:6b:22:db:89:7d:56:e6:c4:e1:6d:5c:
f6:38:a3:70:e4:29:04:bd:45:55:37:cc:a7:91:1e:d3:1c:25:
4a:d7:15:bb:2b:e3:dc:e6:5a:2c:32:d8:7a:00:d3:a2:7a:2a:
35:dd:bf:3c:14:c5:59:84:6d:32:8e:89:26:0e:98:f9:24:a7:
16:ff:41:99:9d:dd:22:b7:d7:a0:d5:10:19:db:4b:73:26:e4:
27:ef:b6:85:76:0c:a9:4f:e9:c1:49:08:97:65:1c:a5:14:e0:
ab:c3:de:8c:ca:ed:82:f0:ce:7f:28:b7:f7:fe:85:64:69:39:
41:7d:30:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:31 2026 by rpki-client