Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FF1A16A409311F184815901CF1D38B0.roa
File: 9FF1A16A409311F184815901CF1D38B0.roa (raw, json)
Hash identifier: ii65Ga2U78+5U6VB8CIdJBByMm+41N/zdzkZcC3rQFM=
Subject key identifier: A5:FC:CB:17:85:6C:B3:B8:72:9F:8B:B5:38:66:F6:B4:FE:E6:98:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C777
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FF1A16A409311F184815901CF1D38B0.roa
Signing time: Sat 25 Apr 2026 10:43:41 +0000
ROA not before: Sat 25 Apr 2026 10:43:37 +0000
ROA not after: Mon 01 Jun 2026 10:43:37 +0000
asID: 49505
IP address blocks: 154.223.204.0/24 maxlen: 24
154.223.205.0/24 maxlen: 24
154.223.206.0/24 maxlen: 24
154.223.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 29 Apr 2026 00:07:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116599 (0x1c777)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 25 10:43:37 2026 GMT
Not After : Jun 1 10:43:37 2026 GMT
Subject: CN=69ec9add-10b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:da:fb:56:b6:7b:df:1c:a8:8f:44:c3:10:5c:
9d:9d:b5:3b:40:05:19:13:fa:c4:5f:e8:a3:f2:43:
b4:c2:76:6d:de:5f:b1:ac:f8:3c:75:3f:37:e1:53:
b0:bd:73:92:97:bd:c4:6b:fa:90:40:35:ee:8a:7f:
ab:03:0c:cf:b8:a0:ee:6c:ce:27:ef:ce:18:2e:4c:
3b:f9:43:b7:27:f3:8f:25:5f:54:f9:91:c9:06:0f:
1f:30:d8:65:46:02:d2:34:aa:71:34:97:e5:27:ed:
79:c2:24:b8:f0:a6:7f:74:e2:3c:ff:78:93:4c:ba:
7f:82:4f:ed:f8:95:9a:de:ca:0e:ac:0a:d5:97:ca:
0b:69:d3:4e:60:c3:3f:1b:d1:46:cc:15:17:21:5d:
c2:a4:d1:c0:c1:f9:08:79:e2:2b:68:ef:7c:17:b3:
49:c9:6a:26:1c:cb:ff:1b:bb:03:70:18:7a:23:2f:
9b:67:c6:fb:cb:93:65:36:24:06:d7:b8:ce:7c:51:
c6:49:7f:b2:b3:2e:0a:b8:ee:80:32:b6:0f:29:54:
37:de:21:5c:07:5a:c0:20:cb:49:ab:52:d3:7d:a5:
57:22:69:de:f7:19:cf:3b:b7:3c:c9:12:0d:bb:bb:
f9:3e:cd:1e:1a:d6:0e:96:51:21:cd:58:4d:de:a2:
e7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FC:CB:17:85:6C:B3:B8:72:9F:8B:B5:38:66:F6:B4:FE:E6:98:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FF1A16A409311F184815901CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.204.0/22
Signature Algorithm: sha256WithRSAEncryption
88:f4:e0:b8:89:a0:a4:82:29:72:68:4b:c8:88:c8:ef:88:05:
7b:40:3a:2c:5b:d3:cb:03:fe:56:2c:03:9e:30:0a:29:c1:80:
93:c0:d5:4a:91:9f:8e:a8:34:69:3b:8e:30:b7:06:fd:0b:b4:
ad:4b:33:86:a1:c9:6d:77:82:df:76:12:e8:49:e1:90:21:13:
dd:c2:42:98:03:89:ad:50:01:92:d9:6b:a0:e2:56:6d:a1:82:
8b:8b:77:c5:0e:2f:63:84:74:df:a4:63:72:34:12:2c:b6:7b:
d6:68:ec:db:28:3b:06:01:2d:45:4d:a5:b0:0f:d1:44:dc:88:
db:d5:86:07:c1:8c:01:78:59:59:4f:0f:5f:1c:47:dc:0c:a8:
73:60:8b:79:bd:59:51:6d:17:0b:b9:6f:d3:a1:50:c8:7d:cb:
9e:92:34:4b:20:16:e0:88:af:56:ef:8e:c5:6b:af:31:09:ae:
46:0f:49:27:68:cb:18:78:09:11:2a:96:bb:e4:c6:42:3a:bb:
92:58:40:19:11:b2:80:46:09:49:cb:9a:ec:ec:69:1e:2f:7f:
6b:53:20:a6:67:1f:ae:56:9b:df:ea:35:8b:0f:60:19:49:3f:
8e:92:31:6f:2b:1f:31:f0:8c:21:7b:e5:bf:bf:c9:5a:8f:b7:
60:c4:89:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:16:23 2026 by rpki-client