Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/966E09E643AC11F1BD0516E0CE1D38B0.roa
File: 966E09E643AC11F1BD0516E0CE1D38B0.roa (raw, json)
Hash identifier: i4djrg29VbuFu1YwcYEf+k9ykmSjYAeZDv+tRw5B9TY=
Subject key identifier: 90:F7:2E:73:1B:DD:90:A3:57:5A:21:6F:8E:7E:BB:69:53:CD:56:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C7D5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/966E09E643AC11F1BD0516E0CE1D38B0.roa
Signing time: Wed 29 Apr 2026 09:19:57 +0000
ROA not before: Wed 29 Apr 2026 09:19:52 +0000
ROA not after: Thu 06 May 2027 09:19:52 +0000
asID: 135600
IP address blocks: 154.81.144.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116693 (0x1c7d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 09:19:52 2026 GMT
Not After : May 6 09:19:52 2027 GMT
Subject: CN=69f1cd3c-5bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:76:d4:fc:b7:41:57:9b:66:0c:ad:3a:a1:bb:
88:00:02:11:98:9b:0c:5d:40:5f:42:88:78:11:f4:
a8:e4:40:1c:b3:a2:86:79:70:f9:af:39:2b:90:43:
af:0f:65:7e:62:6a:04:a6:f6:3f:c2:7b:33:f4:57:
01:c2:5a:4d:c5:c1:a6:c5:2c:d8:ef:95:60:18:a7:
92:a6:a5:20:cb:ea:f2:e7:71:9b:c8:f5:55:af:91:
96:9b:3f:2a:66:2a:21:21:46:36:23:78:49:e2:30:
60:a6:d2:25:06:f6:e2:d8:d5:d3:7a:d3:04:22:85:
11:08:66:b9:d5:b3:f8:22:83:55:36:b2:d1:43:92:
4d:4e:bf:47:c4:4b:2b:84:c8:77:69:38:93:2f:ba:
ec:32:46:b6:74:62:60:42:da:64:3f:28:ec:db:20:
45:62:7f:e0:e4:51:06:12:75:e2:8c:63:32:b9:11:
1e:0e:07:fd:f8:29:31:cd:e1:d1:73:6e:73:c8:95:
1f:76:65:29:3f:f3:cc:6c:77:9d:df:5d:92:49:55:
c2:3a:34:d1:dd:c0:85:2d:3f:0f:82:0c:b7:98:9e:
ef:83:6d:3a:6c:ed:dc:22:cf:cf:e7:60:1a:4f:64:
5c:f0:b0:e6:8c:e5:3b:22:30:15:3c:86:ca:e9:c5:
6b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F7:2E:73:1B:DD:90:A3:57:5A:21:6F:8E:7E:BB:69:53:CD:56:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/966E09E643AC11F1BD0516E0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.144.0/21
Signature Algorithm: sha256WithRSAEncryption
77:04:6c:f4:46:bd:fa:24:7a:7b:5f:80:3e:e7:98:8b:d6:cb:
4f:ac:fb:6a:69:25:cb:e5:7b:10:3f:63:ee:74:64:e4:39:e9:
be:d6:fe:12:1b:78:7b:27:47:84:3a:95:1b:bb:dd:85:c3:d3:
18:03:e7:57:36:10:60:8a:4e:7e:3b:13:70:48:51:09:4b:23:
9d:96:41:3a:6f:d3:ec:0e:2d:ce:be:bf:85:6f:28:27:f4:71:
73:ac:eb:bd:97:32:7e:bf:37:65:cf:3b:ce:e9:79:0b:67:27:
15:78:89:ac:59:2f:f2:9b:57:42:b9:9f:55:d7:84:7e:fb:d0:
a8:f5:5d:64:8e:b9:8e:8d:7b:17:89:be:56:21:b1:46:58:34:
7d:c1:b6:4b:2a:80:d1:8a:9b:5b:31:e5:d8:13:45:ed:ba:fa:
1a:06:1e:8d:cb:d8:9f:98:89:7d:ee:28:a0:d1:83:14:16:b8:
c4:89:c7:17:d2:88:a7:7d:9d:25:4c:4a:bb:ed:eb:50:bb:c5:
18:45:d7:91:1e:61:7f:3f:0f:b9:56:22:74:ad:21:73:0c:ea:
2e:8a:6c:b3:e1:fc:4f:85:c5:41:2d:77:42:aa:3e:6a:17:d9:
b0:90:79:9d:17:c0:10:d2:e0:f9:53:a3:06:85:04:25:ea:19:
d6:bf:d9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:04:00 2026 by rpki-client