Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/856637AA4AC211F1BC5295FCCE1D38B0.roa
File: 856637AA4AC211F1BC5295FCCE1D38B0.roa (raw, json)
Hash identifier: /tyR3SsQiXpEYQoxUOiMMb513fSZwg3pXNzx6lgVJQo=
Subject key identifier: BC:21:D6:43:AE:FD:B6:5C:99:3B:D9:AD:1C:08:C6:4F:95:2B:4D:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CA71
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/856637AA4AC211F1BC5295FCCE1D38B0.roa
Signing time: Fri 08 May 2026 09:44:35 +0000
ROA not before: Fri 08 May 2026 09:44:30 +0000
ROA not after: Sun 14 Jun 2026 09:44:30 +0000
asID: 17561
IP address blocks: 154.200.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117361 (0x1ca71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 09:44:30 2026 GMT
Not After : Jun 14 09:44:30 2026 GMT
Subject: CN=69fdb083-6135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b5:4b:6b:64:8c:b6:80:6f:c1:14:74:42:94:
e2:1c:b3:de:07:94:59:4f:df:5f:95:11:6e:4f:22:
72:73:59:9d:b1:a4:16:27:cd:1f:6a:cf:eb:37:c2:
11:48:aa:fa:98:94:19:2a:7a:ea:13:2d:68:e7:47:
b3:22:8c:df:ac:18:40:a1:ba:23:52:86:0d:37:47:
52:7f:4d:87:f3:a1:61:c0:b8:e5:17:cc:dc:75:50:
22:2e:c3:ce:02:ff:87:20:5e:91:c4:be:4f:3d:e2:
f3:0b:18:96:cf:cd:a7:60:1f:e2:c6:8c:a9:e5:a6:
97:03:35:44:6f:d6:56:2c:e1:dd:5f:83:05:87:72:
d3:cf:c4:e6:58:21:9e:d2:46:1f:cc:fe:1a:49:26:
31:95:1b:84:27:4c:c3:20:87:e0:57:cf:6b:4d:57:
d8:25:a9:9a:68:77:75:6b:72:35:ff:68:4c:81:86:
d8:be:0d:57:ee:08:c8:f2:da:d1:37:6c:f3:a1:4d:
09:86:cc:cd:f1:de:ce:f4:56:13:4f:f9:68:95:f4:
78:1b:89:11:c9:22:20:0b:51:91:8c:6f:95:f6:d9:
00:bb:db:28:b6:5d:27:13:0e:9f:45:29:5b:12:c7:
47:74:e6:33:13:f9:65:a8:5c:32:12:f7:dc:a1:57:
0a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:21:D6:43:AE:FD:B6:5C:99:3B:D9:AD:1C:08:C6:4F:95:2B:4D:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/856637AA4AC211F1BC5295FCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.151.0/24
Signature Algorithm: sha256WithRSAEncryption
16:6b:b4:6d:8f:97:ee:9a:31:8b:06:b7:4f:6e:9d:ba:29:8c:
63:50:1b:d2:55:77:d5:ae:de:0d:27:b7:ad:84:1a:37:ce:74:
9b:ea:28:82:78:3c:f4:cb:24:87:e3:af:84:eb:56:7e:5e:e3:
32:ba:c9:96:a3:28:89:20:74:c1:17:01:51:26:8a:4c:7f:7a:
17:ac:b9:65:85:fd:1b:e3:6f:26:72:b6:b1:04:16:77:75:c8:
70:e9:b1:6f:ad:1a:90:44:52:05:95:85:7e:d2:8f:7f:96:1c:
8c:66:1b:8a:89:18:ac:f8:7b:d8:80:cf:21:23:0f:cb:53:71:
22:c5:02:6b:c9:78:bc:f4:74:23:49:16:bd:bf:42:56:cb:4f:
74:43:11:40:7b:44:3c:d1:ad:25:83:a3:f1:f7:2d:7f:c3:1a:
68:db:d4:f7:8a:d9:37:fe:5a:8d:b6:13:b7:bb:e5:8b:3f:d8:
d6:0d:ba:a0:0a:5d:3b:4d:74:25:9a:17:ab:ef:75:24:2b:f7:
e9:57:f2:45:a6:00:a3:63:9a:2a:51:a7:b6:db:23:4d:f8:03:
cb:25:b6:76:e8:1b:b3:c0:f0:45:45:c4:d1:f6:4f:fe:79:5d:
d7:83:7d:6e:38:b9:b4:67:a7:28:30:8f:39:75:d5:aa:6e:0a:
db:0f:64:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:50 2026 by rpki-client