Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8905AF24407E11F18BD05302CF1D38B0.roa
File: 8905AF24407E11F18BD05302CF1D38B0.roa (raw, json)
Hash identifier: nhv6PXrBspAsVP8lBahQihzPCaGLIn90AuO8zWj0B9c=
Subject key identifier: 65:90:27:B2:B1:53:93:70:7A:22:9B:11:AF:82:55:67:1A:69:28:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C75D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8905AF24407E11F18BD05302CF1D38B0.roa
Signing time: Sat 25 Apr 2026 08:12:44 +0000
ROA not before: Sat 25 Apr 2026 08:12:39 +0000
ROA not after: Sun 31 May 2026 08:12:39 +0000
asID: 202656
IP address blocks: 154.200.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116573 (0x1c75d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 25 08:12:39 2026 GMT
Not After : May 31 08:12:39 2026 GMT
Subject: CN=69ec777c-2101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a1:3b:93:bf:c6:74:f4:3c:d1:6b:80:0e:3c:
d1:fb:1d:cf:74:c0:48:48:70:38:b7:8c:f8:38:b0:
f5:4b:55:e9:23:63:74:e2:a9:51:6b:49:41:e8:d8:
ee:17:83:fe:ba:14:cd:18:46:86:fd:8d:aa:fb:c7:
15:75:1d:10:31:b2:48:9a:5f:af:51:08:e0:bb:ed:
69:6b:76:f4:7d:9c:19:b0:2a:57:14:92:7b:3b:58:
99:dd:bb:62:78:66:08:84:0b:9b:35:78:a1:8d:c8:
bb:b6:50:fe:f4:e4:55:f3:2a:8e:4c:74:91:a9:af:
61:85:d1:90:c8:8b:ea:39:6a:a4:28:d4:0f:59:75:
31:61:d6:73:d6:cd:da:c1:a8:8a:c3:3a:4c:b3:10:
3f:26:6e:91:e5:3d:1b:1d:5c:54:a5:77:4f:c7:6f:
c9:c9:bc:d9:fc:94:7d:a7:07:b4:98:62:26:10:1f:
86:f9:5b:46:9d:77:6a:b8:3b:b6:4e:c4:83:08:6a:
d8:38:01:97:b1:e8:86:7e:e8:0a:45:1e:cf:c9:0b:
93:d1:64:0a:34:e5:2f:44:b8:07:2a:f9:70:35:57:
ae:56:2b:5b:09:a2:4a:e3:de:50:a6:e6:60:0d:c5:
dd:48:fd:8f:c9:15:ee:e6:a2:04:0c:9e:e4:b9:dc:
23:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:90:27:B2:B1:53:93:70:7A:22:9B:11:AF:82:55:67:1A:69:28:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8905AF24407E11F18BD05302CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.227.0/24
Signature Algorithm: sha256WithRSAEncryption
32:48:c0:86:4b:40:e6:c9:26:4f:9f:77:70:d1:53:f5:90:8c:
10:2f:b6:94:37:cd:e9:b0:f2:c9:28:51:fd:30:78:08:ad:d4:
ef:3c:19:23:3d:77:da:e0:fd:6d:95:a4:61:ec:a5:3a:d1:43:
bd:c1:9e:d5:d6:5d:7c:a7:ac:8e:c6:92:08:71:4f:d4:62:d8:
41:d2:5d:c8:d7:c5:71:e4:0c:0c:3e:4f:0f:c7:5a:91:55:07:
23:d1:b5:f4:fb:0a:98:dc:46:3c:76:1d:94:70:1c:48:11:8e:
92:ce:94:3d:2e:ff:55:3b:cd:5b:47:fd:29:d8:b3:91:2d:d5:
e5:a8:53:55:5f:c0:64:69:70:96:ca:72:63:ce:00:c4:9a:a0:
f1:7d:ba:7a:aa:f3:09:6e:36:ba:b3:ef:6b:62:3d:ff:a6:82:
37:bf:77:ae:c6:91:28:8b:fb:ce:37:12:45:15:81:e4:06:c2:
85:ff:7b:fc:6c:e8:db:b5:ed:52:74:6d:b3:b5:cb:94:33:50:
9e:2a:95:df:a0:b7:06:38:90:d2:15:46:31:94:88:9c:53:44:
4c:3d:f5:64:0a:cc:7a:52:55:92:b5:2e:0a:e4:5c:fb:93:8b:
70:b9:32:c0:a0:83:33:3c:28:72:45:e4:0e:31:f5:ba:60:5d:
ed:9a:bd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:44 2026 by rpki-client