Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C6A43003E5D11F1A2D865F3CE1D38B0.roa
File: 8C6A43003E5D11F1A2D865F3CE1D38B0.roa (raw, json)
Hash identifier: 2L4WlPovcx9+a+Gx/Q86vOe01tyAazaXKGD4i7I/1Ng=
Subject key identifier: E4:D3:52:A0:8B:16:D8:67:E3:09:45:9B:94:BC:14:EA:5D:65:7E:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C68B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C6A43003E5D11F1A2D865F3CE1D38B0.roa
Signing time: Wed 22 Apr 2026 15:11:34 +0000
ROA not before: Wed 22 Apr 2026 15:11:29 +0000
ROA not after: Fri 22 May 2026 15:11:29 +0000
asID: 214467
IP address blocks: 154.222.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116363 (0x1c68b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 15:11:29 2026 GMT
Not After : May 22 15:11:29 2026 GMT
Subject: CN=69e8e526-5e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:df:c3:b1:66:5a:cb:8c:d0:1d:35:5d:66:5f:
63:2c:ae:d9:fb:8a:eb:d1:73:62:f5:bd:ea:4c:15:
5a:e9:99:c6:74:11:a7:ba:32:9f:20:73:6b:8d:ac:
07:e8:52:2b:3a:85:93:a8:80:1e:46:03:82:04:26:
b4:bc:88:ae:80:13:10:3e:d9:38:c6:d2:0a:c9:50:
e9:6d:c2:0b:fb:82:6e:63:08:46:da:38:0c:8a:a0:
5d:89:ef:3e:76:e4:53:a9:25:53:b2:47:fc:c3:38:
7d:3c:4f:95:48:f0:11:47:d8:90:d6:1a:0d:3b:20:
66:7d:b9:99:a8:29:89:e6:77:e4:88:62:86:4c:e3:
05:0e:82:99:1c:9a:33:94:a8:93:88:04:c8:c1:1e:
e3:f5:29:4b:af:39:9b:25:42:fe:fe:8c:e0:30:dc:
82:0e:93:4a:89:07:78:06:cb:d3:6c:71:bc:fb:84:
49:36:34:57:ae:d8:07:7e:47:96:3f:05:34:1f:3b:
90:b2:ee:5f:f1:79:56:fa:4b:9c:08:8c:91:ee:02:
74:aa:c0:d7:31:93:06:d7:b4:e4:e1:b2:2f:b0:fd:
45:ce:ee:d6:17:0b:83:69:3a:96:c4:d9:06:94:27:
4b:f2:ef:54:53:65:31:c8:a6:87:6c:75:80:61:0c:
a9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D3:52:A0:8B:16:D8:67:E3:09:45:9B:94:BC:14:EA:5D:65:7E:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C6A43003E5D11F1A2D865F3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.10.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:05:3f:89:3d:a3:95:9f:6d:59:b6:bb:76:b8:11:f2:23:62:
32:7c:88:10:ac:ab:d1:97:8e:1a:29:a6:25:67:5e:b3:49:0c:
77:e0:59:a7:ac:2b:a4:4b:7c:51:7e:4e:70:52:e1:de:7b:d2:
c2:cf:45:9b:56:66:ca:a2:32:5f:89:37:d8:4a:e3:5f:9a:52:
75:42:97:07:8f:eb:0e:b6:58:72:ca:4e:01:04:07:76:f6:b0:
0d:be:b5:5d:15:26:93:e7:fd:b3:3e:77:09:e4:d2:d6:da:9c:
aa:5a:8a:c2:23:d9:2e:98:fe:80:fd:f1:ba:2d:42:ca:6c:5e:
cb:62:9a:d1:55:37:72:69:66:6e:8a:e9:10:9c:f1:42:44:3f:
96:8b:f4:93:81:45:e3:dd:89:59:b9:12:8d:cb:46:0e:49:07:
7c:4b:5e:a2:f8:d9:fa:98:7b:96:1e:e8:a3:48:47:f9:ef:ef:
e6:15:2e:9c:6b:f0:d4:ac:81:b5:25:6a:9f:79:eb:c8:6f:df:
b1:63:60:a6:d8:a0:49:ce:04:49:8f:80:2e:8f:74:e7:2a:35:
7b:33:53:cd:2c:68:73:4c:16:96:5d:90:79:48:7f:17:db:06:
1d:73:90:be:c4:1d:6b:a5:e0:7e:77:69:10:45:e6:8e:95:d8:
f3:ee:a1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:19 2026 by rpki-client