Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72FB8D3A3E6111F1B5039B0BCF1D38B0.roa
File: 72FB8D3A3E6111F1B5039B0BCF1D38B0.roa (raw, json)
Hash identifier: KRmAJlrg8c489IBxNh7XzMJ9ONKtu3AOp3swnS45toM=
Subject key identifier: 96:42:E3:31:BB:B5:FC:06:B6:ED:DD:D9:F6:59:DC:7D:18:6B:CC:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C68F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72FB8D3A3E6111F1B5039B0BCF1D38B0.roa
Signing time: Wed 22 Apr 2026 15:39:29 +0000
ROA not before: Wed 22 Apr 2026 15:39:24 +0000
ROA not after: Sun 31 May 2026 15:39:24 +0000
asID: 9304
IP address blocks: 154.92.196.0/24 maxlen: 24
154.92.197.0/24 maxlen: 24
154.92.198.0/24 maxlen: 24
154.92.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116367 (0x1c68f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 15:39:24 2026 GMT
Not After : May 31 15:39:24 2026 GMT
Subject: CN=69e8ebb1-78c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c2:88:32:06:80:71:71:16:ac:36:b6:f5:b6:
e8:5c:e5:8c:78:6d:02:7e:38:bc:d5:7d:2d:6f:69:
10:48:a9:df:70:ac:c0:6b:71:0e:56:88:ec:f6:71:
af:e6:d3:af:4e:bd:1e:a8:7d:d6:de:fa:65:f1:2f:
d5:fa:44:57:05:16:da:32:2a:c5:04:91:f4:cc:a7:
54:1b:0e:dc:e1:19:92:24:48:a5:6b:38:0f:9a:91:
d0:33:cf:0e:53:f4:c5:82:7c:cd:92:71:a8:00:ad:
93:25:0c:ac:fd:d3:4c:34:01:65:fe:79:7c:34:e0:
56:08:f9:82:2f:57:d0:0a:6a:da:5f:6f:45:8a:d7:
29:25:00:58:6c:d1:c0:f4:08:c1:79:a8:c9:9d:9b:
f4:04:a0:06:70:08:82:90:57:70:5b:79:79:29:43:
43:6f:b3:c8:f0:68:11:8d:32:e1:a1:ba:ae:dd:21:
3f:ce:b8:a8:61:ad:d6:da:70:1a:ab:0a:28:f8:e9:
2b:fb:d5:90:ae:5c:11:69:eb:88:4e:c0:2f:24:ca:
1c:84:1d:73:ce:bc:2a:c2:0b:81:31:41:ba:68:c2:
f7:d2:48:53:2d:97:35:4e:0a:fd:f6:1b:7b:fd:5a:
49:04:d9:f6:ea:55:24:45:76:c0:83:11:75:cf:89:
43:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:42:E3:31:BB:B5:FC:06:B6:ED:DD:D9:F6:59:DC:7D:18:6B:CC:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72FB8D3A3E6111F1B5039B0BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.196.0-154.92.198.255
154.92.215.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:31:d3:fb:f8:f5:61:ad:12:6b:92:c2:76:e0:08:ab:6b:dd:
12:ac:b1:87:41:a1:30:16:58:8a:40:00:19:9a:64:78:f7:20:
96:89:03:d4:9b:25:9f:b3:07:28:05:a0:b6:4b:a6:fb:d4:2b:
02:a6:a6:09:41:7c:61:3d:f2:d7:f2:fb:9c:ed:3e:a0:dd:82:
56:95:51:e6:da:17:09:16:42:ab:bd:02:d6:01:58:10:d0:63:
e3:ca:40:3d:d4:a2:04:a7:f4:9b:bf:8c:af:34:0e:30:b7:d1:
30:95:f3:b4:fd:78:c6:7c:cd:fe:59:0d:71:b3:10:65:5a:d8:
e7:38:dc:09:0e:b1:56:5a:3a:a1:79:67:14:8a:a1:c3:66:7f:
8a:83:c9:de:f1:f8:95:80:c0:18:66:c6:d2:21:c2:68:fb:89:
37:7a:6a:ee:cd:3d:74:ee:38:30:0f:e8:54:75:69:3f:54:76:
78:e5:c2:22:e0:13:76:37:a5:15:51:fc:a4:a3:c3:65:1d:10:
06:eb:a9:a8:c2:ef:d4:82:9e:ac:44:ef:9d:98:31:d3:1a:2d:
ee:88:74:bd:77:92:35:ad:7a:48:a1:df:1d:e2:6d:bd:1c:b2:
e6:26:ca:0a:9d:db:f1:9d:53:91:e9:39:f3:13:c4:a4:bf:47:
54:d7:fe:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:06 2026 by rpki-client