Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9656E9CA3B1211F19C40A0BECE1D38B0.roa
File: 9656E9CA3B1211F19C40A0BECE1D38B0.roa (raw, json)
Hash identifier: Kozvg8XQCnTvBjLM991QwNhKubqljGfiUidfJYksCs4=
Subject key identifier: CF:5A:0B:8F:4D:38:95:64:98:3F:5C:2E:82:9F:D1:C0:31:D2:36:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C5F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9656E9CA3B1211F19C40A0BECE1D38B0.roa
Signing time: Sat 18 Apr 2026 10:37:24 +0000
ROA not before: Sat 18 Apr 2026 10:37:19 +0000
ROA not after: Fri 01 May 2026 10:37:19 +0000
asID: 139880
IP address blocks: 154.194.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 29 Apr 2026 00:07:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116212 (0x1c5f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 10:37:19 2026 GMT
Not After : May 1 10:37:19 2026 GMT
Subject: CN=69e35ee4-5f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1b:00:57:56:fc:36:cf:b2:94:dc:98:75:4e:
6a:fe:42:82:58:94:21:54:80:be:1a:31:57:96:e2:
e8:33:9b:d9:99:01:4e:31:19:47:03:84:20:7f:c8:
23:8a:1f:85:2f:1a:b5:ef:c3:e6:d9:fb:08:41:db:
5e:59:07:62:1f:4b:0c:15:fe:7f:ec:f1:b8:07:93:
b6:6e:56:c6:dd:65:5f:4f:b8:7d:6c:53:0e:e3:41:
c2:0d:cf:30:72:14:c8:89:0f:a9:20:6c:49:a8:62:
9d:1e:cd:68:c5:3d:76:a3:7e:58:7e:2d:f0:51:e7:
01:4c:94:18:c0:c3:26:67:1a:11:eb:e7:f5:1f:85:
a1:79:4b:54:8d:71:da:9e:68:40:b2:7d:59:f4:6f:
34:53:a4:72:6f:7a:a7:ea:f8:b0:98:89:33:e5:8e:
80:ac:4d:2b:08:06:b6:50:39:d5:33:28:83:73:8b:
fb:f6:84:1c:8c:41:a2:de:ab:8d:ba:58:ab:0c:94:
40:0f:a2:ce:66:a9:1d:aa:10:51:b3:d5:91:8a:19:
70:fe:9e:71:25:2f:4e:65:cf:70:17:0e:8b:d8:40:
a0:df:dd:de:43:58:a7:84:10:87:64:aa:4d:25:4d:
d0:89:81:50:81:0b:72:b3:a7:33:4b:54:05:27:c2:
96:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:5A:0B:8F:4D:38:95:64:98:3F:5C:2E:82:9F:D1:C0:31:D2:36:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9656E9CA3B1211F19C40A0BECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.128.0/18
Signature Algorithm: sha256WithRSAEncryption
b8:88:6f:8a:6d:d5:47:75:07:bf:0b:39:a2:5d:22:a2:46:6d:
2d:03:4d:10:b0:b0:12:80:fe:7e:9e:37:3f:d2:99:71:04:5b:
df:65:a7:80:19:bf:30:d5:34:9b:c8:0d:81:48:b2:c9:98:5f:
c9:4b:93:3e:3c:17:3f:33:85:13:5d:c7:64:ba:d9:28:55:66:
88:b2:f8:32:6f:e7:56:e0:26:f0:19:80:d1:a3:a1:4d:74:83:
a8:4b:02:8f:6f:25:1b:17:0f:7f:2d:c8:cc:44:ce:2b:9b:81:
21:90:7f:05:3b:aa:21:03:6e:30:78:83:de:c1:cb:74:cf:aa:
ef:5f:05:64:ab:3c:fb:28:3b:8a:28:0b:06:bf:4c:44:06:cd:
47:32:52:29:7e:30:6d:3e:ee:87:6a:51:14:6a:93:3e:58:ba:
c8:51:9c:a3:e1:de:97:a4:3e:0e:ff:c6:db:ae:df:39:a0:8e:
c9:8d:ec:91:41:cf:cf:a8:36:e7:f6:c2:4c:f9:a0:45:2c:62:
d7:3d:96:28:83:f8:f6:42:89:4d:7f:5d:d2:d5:f4:f6:04:9e:
8f:45:1f:2e:0b:5b:79:d3:df:ee:f8:65:3d:8c:58:b6:43:58:
49:19:12:d6:c8:1b:40:5e:30:d6:09:51:5d:55:40:11:b8:33:
6b:63:ca:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:34:18 2026 by rpki-client