Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E769D49844A011F18CF5A4A9CE1D38B0.roa
File: E769D49844A011F18CF5A4A9CE1D38B0.roa (raw, json)
Hash identifier: ARilL8HK+l9zH+Mqs/RGKTaFfSNoZeDxLHYssmdNWM4=
Subject key identifier: A4:CF:7C:BE:9B:BD:C7:72:BD:D7:42:9B:B7:32:3D:E2:2A:08:83:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C85F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E769D49844A011F18CF5A4A9CE1D38B0.roa
Signing time: Thu 30 Apr 2026 14:28:50 +0000
ROA not before: Thu 30 Apr 2026 14:28:45 +0000
ROA not after: Sun 28 Mar 2027 14:28:45 +0000
asID: 132513
IP address blocks: 154.197.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116831 (0x1c85f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 14:28:45 2026 GMT
Not After : Mar 28 14:28:45 2027 GMT
Subject: CN=69f36721-3cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b2:55:78:c9:c2:a9:5d:65:aa:5a:47:f6:39:
b8:80:88:e1:3a:24:a0:d6:8c:99:c9:a4:dd:0e:20:
e6:33:91:74:e6:75:b9:fb:c3:c9:dd:c8:e0:a7:c5:
98:ba:b7:d8:85:83:65:af:ed:55:14:b2:4f:78:e0:
50:33:90:e5:dd:18:1a:68:4a:28:50:18:b5:de:07:
f6:f8:87:b5:b8:09:52:ed:4d:f6:b8:9d:66:f3:47:
53:19:25:a9:40:a7:15:87:e0:ad:a0:3d:ff:29:8e:
52:87:36:f1:83:ba:7b:56:4f:e1:be:be:48:56:7c:
6e:d6:fd:44:53:b9:37:bc:81:22:2d:81:bf:73:5e:
31:66:55:cf:5c:28:bc:85:fc:53:b6:4a:7a:c6:02:
f2:73:0d:16:06:e9:60:92:79:85:4e:8c:3c:3a:4b:
ba:b9:e4:32:26:c9:e8:7e:cd:67:54:48:e3:8f:4c:
d7:c4:9b:91:db:9a:fc:6b:7c:d0:9d:1e:05:9e:23:
40:f4:8b:71:ec:cf:1d:8b:7c:d3:00:4f:ac:65:02:
29:d0:ef:f3:46:7d:2a:71:f3:e1:66:2b:ba:fc:b4:
7c:d3:ad:23:35:70:ae:68:2e:19:b6:36:83:5e:35:
f0:e3:39:cf:47:3d:ac:25:d4:62:76:f4:bb:e0:e6:
60:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CF:7C:BE:9B:BD:C7:72:BD:D7:42:9B:B7:32:3D:E2:2A:08:83:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E769D49844A011F18CF5A4A9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.44.0/24
Signature Algorithm: sha256WithRSAEncryption
18:24:e1:71:7d:56:93:f8:f8:ec:e6:85:44:80:b5:eb:80:aa:
55:95:ee:a7:68:06:38:14:f5:1e:ca:43:8a:95:96:c0:b5:f7:
1f:99:08:35:c1:71:c8:93:94:41:fe:70:a5:84:53:44:16:c8:
b5:e3:10:7a:5c:c2:a5:33:51:aa:ab:5d:eb:c7:d6:55:50:cc:
a3:3d:d8:25:6c:10:4e:48:b0:b1:46:ba:c9:11:da:42:2e:5e:
16:49:5c:01:f8:b0:88:5c:89:79:7e:73:da:01:f5:a9:54:e6:
ba:df:ca:d0:7a:5e:a9:20:44:cc:1f:ae:b8:ae:1d:15:72:58:
19:b0:66:9c:37:32:ae:33:5f:37:66:a7:31:4d:ee:85:fd:ae:
e4:ed:58:07:93:77:fd:2b:56:7f:02:5f:86:d8:b8:42:4a:db:
d9:39:ab:bc:0b:fd:6c:a2:91:7d:22:f9:8a:86:56:ef:a3:94:
41:08:1e:f9:cb:c1:6e:78:c2:c6:39:10:f3:4c:34:93:b6:ec:
53:40:5f:07:04:6d:bb:52:d0:d1:7b:32:68:e1:42:29:95:cf:
2a:d9:01:9f:6d:de:e9:55:dc:80:43:2d:af:ee:38:04:c2:5d:
c2:0c:05:2f:4f:7e:a3:97:07:71:1a:96:cb:34:c9:1c:30:b4:
d5:b0:9a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:59 2026 by rpki-client