Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/685D3C90448B11F1A3AE01A8CE1D38B0.roa
File: 685D3C90448B11F1A3AE01A8CE1D38B0.roa (raw, json)
Hash identifier: R9UTNe1eE91+w1fCu9D3NavRZ9ELxIgwjgOhojrnye0=
Subject key identifier: 30:DA:5D:84:1C:1F:63:D4:C6:B4:D8:40:41:7D:75:C5:55:99:39:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C829
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/685D3C90448B11F1A3AE01A8CE1D38B0.roa
Signing time: Thu 30 Apr 2026 11:54:57 +0000
ROA not before: Thu 30 Apr 2026 11:54:52 +0000
ROA not after: Fri 05 Jun 2026 11:54:52 +0000
asID: 44559
IP address blocks: 154.209.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116777 (0x1c829)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 11:54:52 2026 GMT
Not After : Jun 5 11:54:52 2026 GMT
Subject: CN=69f34311-b547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:24:1e:74:52:7b:4f:a2:cb:0d:9c:10:cd:91:
c1:7f:24:ae:90:50:54:e2:33:b7:11:e1:62:92:d2:
cd:78:db:72:a2:2e:02:ad:84:92:5a:e4:48:c7:b0:
2d:c4:85:63:97:f1:70:22:2d:d7:1d:72:c3:9f:17:
12:7f:1c:b3:0f:8a:0a:4a:ab:34:d5:77:99:e3:70:
b1:6d:a0:30:26:cd:ba:75:f8:da:ee:86:ce:25:4a:
09:07:01:0a:eb:94:58:b9:ec:69:f5:f2:28:67:8a:
2b:c0:e0:df:a3:ea:e1:6d:a1:ac:09:89:ca:c5:5e:
77:89:54:82:a8:d2:71:fc:f2:b0:04:e2:10:79:4a:
5a:fb:e1:46:19:69:3d:61:bf:87:9a:63:69:ef:40:
d8:65:55:74:43:28:6e:be:f0:f0:7c:5f:09:46:7c:
a6:32:79:60:e6:e6:4e:f6:9c:08:27:d1:73:d3:94:
9f:4a:bd:60:af:1f:11:3c:6d:eb:53:c9:19:c7:89:
db:40:71:54:0c:38:11:50:0e:cd:47:be:a3:37:2a:
7f:ab:fe:63:48:2a:0b:86:51:54:ef:3d:47:c6:51:
f1:e0:4b:75:a3:5e:fb:73:f0:09:5c:e6:9b:0f:34:
c3:c6:06:95:21:f2:25:fa:ec:d9:9c:11:4d:3a:f6:
c4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DA:5D:84:1C:1F:63:D4:C6:B4:D8:40:41:7D:75:C5:55:99:39:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/685D3C90448B11F1A3AE01A8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.140.0/24
Signature Algorithm: sha256WithRSAEncryption
65:82:21:89:dc:76:02:bf:38:63:09:75:f8:84:7d:f9:8a:ea:
ad:07:47:c3:4e:cc:3e:58:33:5d:27:44:a1:3c:8a:0f:ef:06:
02:d7:06:09:1e:e7:93:b1:26:25:aa:bb:82:fb:4c:f9:e8:15:
9f:de:c5:74:65:c2:58:15:c1:ad:4b:e5:f9:22:97:c3:04:d6:
5b:37:05:02:71:1d:b7:42:8d:97:1c:2c:78:af:48:ad:75:92:
41:91:24:da:1b:e2:a4:30:03:48:28:50:5b:9f:f5:6b:03:e8:
c2:d1:04:41:fe:25:f9:64:5a:60:f1:67:b7:92:e0:2f:26:8a:
b2:d7:f3:8f:6a:b9:d1:77:c0:10:b8:01:d5:8e:c7:89:c7:84:
b9:29:da:42:c7:35:64:16:dd:44:9e:99:5c:13:8f:46:09:cc:
71:a5:c5:68:f5:61:ec:2f:b3:f8:aa:bd:4f:c6:18:7b:0e:98:
8d:6e:1c:69:e9:46:37:26:b4:a0:dd:6f:fc:a5:48:9f:77:c3:
97:29:ef:20:25:97:52:49:9c:f2:99:3b:35:61:06:88:71:0b:
0e:97:e1:7d:09:0b:8e:d6:46:c1:49:66:5c:e2:10:a0:14:d2:
ea:a8:ab:eb:7e:71:06:ce:0e:56:51:6c:37:0d:58:ca:7c:2a:
77:4d:49:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:19 2026 by rpki-client