Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C23F98E03E5811F1AD6ED2D6CE1D38B0.roa
File: C23F98E03E5811F1AD6ED2D6CE1D38B0.roa (raw, json)
Hash identifier: wbE/XNiKZH80uTLFy/Nx8vc/EGViOBCdKgeqR+XMRgk=
Subject key identifier: B1:D0:E5:10:33:0F:AB:C2:BA:42:F0:05:95:04:7B:61:BF:A9:84:BA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C685
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C23F98E03E5811F1AD6ED2D6CE1D38B0.roa
Signing time: Wed 22 Apr 2026 14:37:16 +0000
ROA not before: Wed 22 Apr 2026 14:37:12 +0000
ROA not after: Sat 30 May 2026 14:37:12 +0000
asID: 2914
IP address blocks: 154.197.12.0/22 maxlen: 24
154.222.74.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116357 (0x1c685)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 14:37:12 2026 GMT
Not After : May 30 14:37:12 2026 GMT
Subject: CN=69e8dd1c-bc3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bc:bd:a2:3c:5e:2b:a4:06:ad:0e:57:73:56:
e2:d5:61:77:3b:d9:46:f0:ad:b5:8d:62:88:d4:7d:
b0:a0:a8:de:a5:c3:49:b7:8c:6e:f1:33:b4:7c:0a:
7d:19:51:8b:ce:6a:1c:04:d1:14:3f:fc:45:a5:7d:
e3:12:42:28:d4:04:d3:de:41:38:43:d2:7b:72:61:
2b:2a:0c:5f:b9:7a:f5:c3:d4:63:ab:f9:87:d2:ce:
b4:9a:64:93:ab:84:67:e3:3e:0a:14:88:39:96:d1:
77:f6:b6:37:0a:8a:3c:37:46:53:a5:93:1f:a9:18:
78:ce:dc:88:77:97:a8:c1:27:1e:68:18:59:01:8f:
cb:6e:b4:48:8f:97:a6:11:5f:5b:b2:39:72:77:cf:
d1:54:99:9b:cb:9a:d8:78:e4:89:a7:bb:78:62:3d:
c0:26:a6:8d:6f:9d:fe:40:8c:95:07:1d:ac:0a:ca:
8f:2f:3b:e0:ee:24:65:4e:a7:68:d1:4c:3e:8a:bc:
45:0a:5b:b3:05:90:cd:a4:04:54:7c:da:15:18:bf:
46:d8:26:3a:e7:5a:bc:c3:e8:55:d3:0b:8b:34:5c:
ab:2a:09:a5:c6:84:dc:d7:5a:87:cc:a7:1f:ba:07:
7e:92:3b:be:be:8c:a3:cd:4f:4a:1f:91:a1:02:30:
ab:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D0:E5:10:33:0F:AB:C2:BA:42:F0:05:95:04:7B:61:BF:A9:84:BA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C23F98E03E5811F1AD6ED2D6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.12.0/22
154.222.74.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:c2:2b:60:aa:e7:b1:f5:8d:e9:43:0b:72:8e:02:f0:c2:ca:
55:a8:c8:f7:ba:71:77:00:05:2f:ff:1f:42:90:aa:bc:6b:65:
15:a9:bd:0a:59:27:8e:d1:4c:e6:70:86:2c:21:d3:ef:04:ce:
75:30:78:c3:22:83:20:f8:63:93:10:83:11:09:3f:1f:65:40:
bb:f5:fe:a0:d7:a4:73:f1:42:bc:8c:23:f3:79:8d:aa:81:91:
46:99:9e:d6:eb:d8:a6:fe:ac:b1:83:67:fd:3f:b4:ab:f9:b3:
b9:d9:6e:e9:19:cc:28:cb:a4:26:c8:80:bc:62:f4:79:2c:7c:
69:31:f2:1d:78:88:09:ba:b4:34:18:37:ef:ef:dd:5a:00:45:
b0:f1:0e:74:e8:8f:8e:d0:22:e0:6c:3b:49:2b:1e:a0:fb:64:
26:1f:48:1b:26:3e:bc:c8:bf:54:4e:fc:1a:6b:5e:3d:d9:2a:
d9:ca:49:ee:c8:c9:b7:c7:23:1a:f5:cc:e8:9b:02:c0:c0:dd:
e8:b5:63:ca:08:23:78:92:b2:5b:35:d2:d3:b0:dd:7e:cd:54:
6c:80:ae:da:e5:8c:6c:f8:8d:46:10:e7:b9:48:0f:f9:2d:e5:
1f:5d:9f:74:66:90:19:e9:ad:4f:b3:95:02:e3:9a:74:70:22:
cd:cd:2d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:20 2026 by rpki-client