Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5CF1C102EE411F1A13F78E9DAE4EC9C.roa
File: D5CF1C102EE411F1A13F78E9DAE4EC9C.roa (raw, json)
Hash identifier: 4ibiz1KQGjiQrcDga6tnteLmqexiKJfonoSl8/MlOy0=
Subject key identifier: 1E:F5:C5:19:19:F6:62:CF:B8:C8:B0:CE:24:0C:E6:2B:5A:C8:68:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C28F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5CF1C102EE411F1A13F78E9DAE4EC9C.roa
Signing time: Thu 02 Apr 2026 22:39:40 +0000
ROA not before: Fri 03 Apr 2026 22:39:35 +0000
ROA not after: Thu 14 May 2026 22:39:35 +0000
asID: 211826
IP address blocks: 154.197.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 Apr 2026 00:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115343 (0x1c28f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 3 22:39:35 2026 GMT
Not After : May 14 22:39:35 2026 GMT
Subject: CN=69cef02c-dceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4d:cb:fc:06:a3:da:3d:52:74:59:58:cd:9e:
bf:f4:43:e6:50:e5:79:80:92:81:f2:f7:63:4e:11:
d6:ed:fe:57:aa:a1:87:91:ae:a5:f0:91:4c:ac:8e:
b4:57:93:98:68:32:ce:44:d8:c4:b0:c3:8d:1c:83:
1e:e4:b1:e8:62:f0:0b:7f:b1:57:28:bc:fe:25:1c:
2f:95:30:72:d4:58:ca:d5:2d:75:d1:75:f6:d5:4e:
b5:67:9b:c4:01:72:d8:2a:61:45:a8:50:2e:e3:d6:
9c:7f:a9:9c:34:02:02:1e:86:c5:8f:91:b2:f9:55:
de:d7:98:06:89:ea:10:fc:16:75:ca:0f:8c:1e:cd:
95:1b:b9:0b:e0:4f:9a:6b:67:c8:75:65:93:f5:be:
e5:53:f8:4a:60:67:e2:cb:16:30:67:8b:54:1c:54:
0d:17:73:47:28:f8:1b:b9:89:1e:48:0f:49:68:d9:
06:f0:84:1a:d5:d9:df:b1:36:42:3d:8b:dc:af:63:
43:ee:30:2e:07:75:7d:11:27:30:a6:70:32:f9:71:
a1:b0:9b:e5:ff:97:1f:fc:9a:9c:c5:99:53:97:20:
2b:2c:3f:b8:67:5a:ec:04:90:ad:a6:36:84:dd:83:
e2:35:39:c0:39:98:09:18:7c:1c:ec:9b:fb:65:25:
ec:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F5:C5:19:19:F6:62:CF:B8:C8:B0:CE:24:0C:E6:2B:5A:C8:68:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5CF1C102EE411F1A13F78E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.110.0/24
Signature Algorithm: sha256WithRSAEncryption
31:35:50:f2:35:c4:9f:56:a8:0b:fc:a8:08:48:d7:c9:ce:05:
6e:5b:e0:03:a4:a1:db:2f:38:c1:b6:62:34:b5:19:93:6c:45:
22:9c:32:7a:16:5f:e8:5d:81:3e:1e:42:79:97:7e:7c:4f:12:
6f:13:8b:5a:f5:6d:c6:48:2d:db:4d:06:be:61:cc:54:16:1e:
58:60:2a:d2:6b:cf:57:15:6d:04:92:9b:6a:86:7d:5c:b7:a4:
ce:81:33:82:66:04:01:1c:01:cf:9a:67:40:e9:70:9e:2f:c1:
ed:63:8c:6d:8d:6d:8f:7f:34:56:58:8e:26:f6:fc:4a:e1:b1:
25:f8:ac:e0:6f:25:02:d8:e6:a6:a3:9e:06:0f:84:db:5e:64:
0b:e5:e0:dd:d0:dc:4b:2b:ed:ba:ba:15:86:85:aa:d5:c4:2d:
76:44:e1:e2:e0:59:5e:99:6a:47:ab:42:cb:1f:19:1c:78:ec:
d9:df:7f:e8:e4:08:bd:2c:11:dd:84:2a:ae:09:5b:a7:f7:0e:
2c:20:76:ba:08:7f:39:4f:e9:05:26:50:6c:7c:24:0a:12:71:
13:09:e7:72:3c:6f:1a:35:2b:ae:66:67:85:9a:be:70:91:5f:
06:de:8d:e8:1b:5f:3c:a5:d4:51:b2:ba:16:8c:14:bf:ae:c0:
5a:71:5b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 16:15:28 2026 by rpki-client