Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D071FC7C449E11F1A061931BCF1D38B0.roa
File: D071FC7C449E11F1A061931BCF1D38B0.roa (raw, json)
Hash identifier: ruHgOei+x44MTSj25kK6vzV1EpZgsIc/3l6jS5o40eQ=
Subject key identifier: C7:14:05:C5:AF:0E:BF:35:55:9D:35:6C:04:25:FA:43:7F:58:25:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C85B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D071FC7C449E11F1A061931BCF1D38B0.roa
Signing time: Thu 30 Apr 2026 14:13:52 +0000
ROA not before: Thu 30 Apr 2026 14:13:48 +0000
ROA not after: Fri 05 Jun 2026 14:13:48 +0000
asID: 214238
IP address blocks: 154.219.23.0/24 maxlen: 24
154.219.25.0/24 maxlen: 24
154.219.30.0/24 maxlen: 24
154.219.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116827 (0x1c85b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 14:13:48 2026 GMT
Not After : Jun 5 14:13:48 2026 GMT
Subject: CN=69f363a0-b97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a2:5e:12:cd:98:01:49:9a:80:83:e5:29:f5:
43:30:4f:9f:6d:db:4e:a0:ed:9f:b7:cc:76:70:93:
91:b7:a7:bc:e2:b3:8d:cc:01:e5:d1:98:96:25:3f:
dc:77:2b:85:b4:23:20:1c:9a:95:b2:10:15:1b:43:
3d:09:2c:18:e0:5c:6a:42:36:e6:40:6a:27:64:0f:
ab:05:bc:de:c8:b1:04:4d:a5:53:53:0e:57:e0:0e:
63:27:a2:a4:71:37:97:76:2e:03:22:7b:3f:cd:9e:
29:26:e2:d4:7f:bb:8c:7b:73:cb:0d:01:1d:e0:bf:
0e:1e:e0:52:d6:d6:02:0a:2f:ec:05:ce:03:d1:03:
5f:0b:8a:59:a0:b6:70:7c:c0:ee:1f:e3:43:87:37:
0b:e1:af:57:26:06:78:84:68:02:39:5f:00:04:bc:
e3:ee:4f:7b:0c:ca:48:4c:d8:65:18:8a:cb:06:76:
a6:da:ca:d6:c3:47:bc:f4:dd:2c:8a:c4:1a:0d:c9:
4c:80:fa:d4:bb:62:15:55:04:79:9a:ea:1b:87:d0:
42:c5:fe:05:de:a6:3f:17:58:73:3e:a2:2b:fc:57:
42:44:9b:78:0b:00:d4:1b:2b:32:c4:ee:d2:d7:01:
ec:84:66:c0:d0:bc:29:b3:11:7a:41:3a:9f:bd:45:
65:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:14:05:C5:AF:0E:BF:35:55:9D:35:6C:04:25:FA:43:7F:58:25:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D071FC7C449E11F1A061931BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.23.0/24
154.219.25.0/24
154.219.30.0/23
Signature Algorithm: sha256WithRSAEncryption
60:4d:bd:54:93:2d:c5:54:be:1e:69:4b:a3:5e:3b:25:83:a4:
9f:bb:c2:64:74:46:7b:91:60:2c:14:46:80:0f:04:05:de:db:
8d:30:75:46:43:7d:ac:71:6b:ae:1a:ac:8e:9d:38:aa:aa:bc:
71:e8:c9:dc:6f:83:17:6c:24:47:f8:81:db:7f:4c:03:50:31:
c1:98:fe:12:76:f5:3e:a9:0f:76:f1:1f:95:e2:47:0b:96:b3:
80:99:a3:c4:18:45:6e:44:94:d4:16:64:b8:25:22:5c:47:8c:
18:9e:ef:6a:64:01:9c:9d:c0:6a:72:c0:56:9b:24:3d:19:f9:
81:c8:e1:b6:7a:37:00:f4:3d:66:1a:3a:7f:f2:83:9d:cb:23:
20:99:d4:2a:87:5a:47:57:f3:5d:47:fa:e8:9b:9e:30:69:76:
fa:27:5d:34:89:c1:81:dd:02:ca:7d:07:0b:b3:15:62:00:c6:
9b:de:72:b4:b8:29:90:b4:4a:5d:01:df:62:48:fd:32:d0:24:
a4:12:23:17:fb:fa:84:a1:f8:23:6d:40:21:61:d1:70:60:0b:
73:38:41:44:fd:7b:df:7e:de:6f:d6:5f:63:63:9c:8e:59:fb:
bb:5a:b0:94:64:55:a8:00:5f:8d:40:ac:93:1a:61:b7:27:15:
95:ec:3b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:59 2026 by rpki-client