Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A552A1B430F211F1B4FF75E4DAE4EC9C.roa
File: A552A1B430F211F1B4FF75E4DAE4EC9C.roa (raw, json)
Hash identifier: a7KpW6xcb6YpV8Y3pYtK+DGSQKzzgDx+wJ7W1jHEDiQ=
Subject key identifier: AE:63:24:2A:FE:28:C6:21:6E:28:34:77:5D:82:F6:65:68:98:E6:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C330
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A552A1B430F211F1B4FF75E4DAE4EC9C.roa
Signing time: Sun 05 Apr 2026 13:23:34 +0000
ROA not before: Sun 05 Apr 2026 13:23:30 +0000
ROA not after: Mon 13 Apr 2026 13:23:30 +0000
asID: 2914
IP address blocks: 154.197.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Apr 2026 08:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115504 (0x1c330)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 5 13:23:30 2026 GMT
Not After : Apr 13 13:23:30 2026 GMT
Subject: CN=69d26256-78e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1c:e1:ec:8e:02:02:dc:e4:b7:4f:47:3b:21:
5b:f7:27:60:0b:91:54:64:32:be:d2:71:c6:ed:4e:
be:4b:a4:4a:0c:6a:3d:a3:1e:9b:46:80:13:06:45:
96:b4:e3:5d:89:b5:b3:ff:43:1b:50:91:62:02:71:
09:81:67:0e:82:d1:2b:20:0e:c9:0a:a1:4a:94:d8:
85:b3:5a:b7:6a:17:9c:cc:d0:4f:ed:45:2a:c5:39:
3d:20:ed:ad:07:a1:11:01:c4:07:6c:d4:0e:b3:3f:
b0:1f:eb:d1:fc:f5:11:0b:ec:96:cf:5c:66:6f:d0:
82:65:c1:de:cd:45:7a:7b:90:4d:f6:74:1d:16:37:
37:42:7d:2a:c1:be:dc:86:36:6c:b4:c2:5c:cd:4a:
26:9c:dd:cc:ad:0f:1e:7a:ad:37:5e:f0:70:dd:82:
f4:50:d4:d8:0c:4c:28:33:5f:15:5b:bc:8b:18:48:
0c:dd:e8:60:8e:c5:44:cf:e6:c8:f9:78:2f:76:fa:
44:40:b7:38:e7:31:52:4b:a3:45:d8:2e:59:81:0a:
7b:18:f0:5d:37:84:1b:d6:51:84:73:53:9a:84:c3:
d9:8a:78:12:25:20:c5:a3:f8:1f:3a:14:e9:70:38:
81:96:b6:38:2b:df:47:ef:2c:52:e4:bc:d6:3d:a9:
18:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:63:24:2A:FE:28:C6:21:6E:28:34:77:5D:82:F6:65:68:98:E6:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A552A1B430F211F1B4FF75E4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.12.0/22
Signature Algorithm: sha256WithRSAEncryption
36:d3:a5:b7:b9:d0:49:76:ca:40:bb:58:17:84:ee:74:ec:cc:
fe:e3:dd:34:33:50:6b:8f:21:ca:63:7a:45:63:43:8c:e1:bb:
b7:82:37:6e:3d:14:84:15:55:d5:4c:26:5e:85:be:ef:b6:a7:
5f:74:fd:6a:a2:d4:71:7d:50:ae:cf:a5:eb:d7:be:3a:a8:62:
0a:ca:76:52:9c:4f:39:45:38:da:1c:6d:71:e5:60:5d:ad:d7:
93:4f:06:cc:a4:8c:f4:9b:a1:3d:3c:21:20:bd:9f:d4:f5:76:
9a:36:41:cb:e8:d2:16:9f:8c:7b:8e:00:59:c2:2a:0a:15:9a:
cc:4c:61:3e:f8:17:45:9e:f3:c6:2c:a9:26:6f:64:97:c4:1f:
5b:3a:ff:d6:00:1e:5e:4b:c2:54:ab:ac:13:dc:bc:d4:88:44:
11:8f:38:b5:33:62:78:37:8a:90:ba:43:e7:0e:19:4b:90:a4:
08:09:f2:38:a7:ad:4f:8a:9e:62:86:84:88:e4:c7:c9:95:9d:
9e:c0:c2:d0:47:57:06:70:6e:db:d5:14:55:5f:f2:4d:b6:de:
ea:3b:bf:97:38:b0:14:cf:61:eb:47:57:0c:d4:e2:55:30:2b:
87:16:da:ab:fa:b0:45:ef:28:30:c0:2e:9c:78:7e:1f:43:8a:
d9:e7:b8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:50:12 2026 by rpki-client