Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E76C6E443FB211F1BED108A7CE1D38B0.roa
File: E76C6E443FB211F1BED108A7CE1D38B0.roa (raw, json)
Hash identifier: fljF0A9yhhs823SMav3+WVRddmSOIDg8j61x9kHuJr8=
Subject key identifier: 4F:7B:B1:C5:59:5C:BC:29:39:4D:B7:80:59:B1:CE:A4:E3:37:03:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C709
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E76C6E443FB211F1BED108A7CE1D38B0.roa
Signing time: Fri 24 Apr 2026 07:55:05 +0000
ROA not before: Fri 24 Apr 2026 07:55:00 +0000
ROA not after: Sat 30 May 2026 07:55:00 +0000
asID: 40779
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116489 (0x1c709)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 07:55:00 2026 GMT
Not After : May 30 07:55:00 2026 GMT
Subject: CN=69eb21d9-64cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5f:ee:53:e5:ac:9f:c3:c1:f8:8b:8f:50:4c:
5d:fd:c7:3d:91:35:47:a9:dc:73:da:bb:69:6f:8f:
4a:be:93:0e:0a:52:e3:6a:8d:c9:4e:f7:aa:46:47:
23:4d:40:e8:d6:25:76:8a:29:ea:7f:49:cd:34:60:
4c:c4:f7:c4:9e:ee:eb:e8:b9:63:6d:c2:bf:8b:32:
ce:94:0f:fd:d6:e8:09:66:0f:5d:1b:42:68:76:16:
46:f1:9f:21:83:37:34:da:b1:67:88:fb:f0:16:ef:
58:84:61:c7:e6:40:3b:2a:99:47:b0:fa:05:b4:7c:
4b:92:40:02:5e:27:2e:49:b0:44:97:95:fc:3c:4f:
ad:59:51:ae:dd:a0:4e:ce:5c:58:2b:4d:77:58:7d:
71:f3:bb:31:d3:b8:d6:87:80:17:b9:24:39:e8:de:
52:2c:dc:74:7a:1d:16:e6:75:5d:1a:cd:2d:33:dc:
27:86:18:25:f5:bb:b8:42:63:2c:fc:ca:bc:8d:1e:
b1:f5:fa:66:b1:51:9d:69:dc:a8:af:aa:8b:ce:90:
3f:bc:6c:ea:fb:0d:2d:46:c0:5a:b7:9f:50:a7:26:
92:bd:69:3a:56:9e:88:c4:13:cc:7b:17:6d:19:ef:
29:26:6b:19:04:b7:6c:08:6f:fa:25:06:37:4b:e6:
79:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7B:B1:C5:59:5C:BC:29:39:4D:B7:80:59:B1:CE:A4:E3:37:03:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E76C6E443FB211F1BED108A7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
1a:ab:d3:1d:24:f1:7e:b1:1d:db:2c:6b:ed:38:dd:a2:2c:2a:
d0:ee:32:76:e9:14:e2:57:c7:8f:00:3f:81:61:a7:44:de:46:
27:f9:9d:1d:55:06:a0:21:0e:22:98:d6:9a:f2:98:c0:39:e5:
8e:a1:d0:b2:1e:4c:1d:1b:5a:60:98:7d:9a:a5:b5:40:83:b5:
ee:ec:ae:36:1f:d2:94:b2:e2:ab:1e:e4:d0:80:4e:15:ad:39:
a8:3d:2f:4d:7c:ad:bc:af:16:6b:21:4f:58:72:0e:e4:27:3a:
55:b9:c0:8b:64:0b:2d:57:b6:47:ff:94:85:7d:78:25:c8:a0:
39:e4:20:ab:5a:9a:d1:f3:3a:64:34:e9:14:2e:54:7b:96:59:
31:c9:16:7c:35:fd:0e:db:a4:a7:b1:6e:1a:20:48:4c:76:e4:
be:51:80:5b:a7:10:24:39:0f:5c:88:da:37:8a:1b:f7:c5:ea:
b1:44:a7:ce:89:9f:a6:ef:65:8e:94:18:96:77:19:14:63:ef:
21:5c:a1:01:1f:ad:dc:91:78:a1:f9:29:f0:22:6c:3d:c1:14:
cc:5a:47:cd:e7:41:55:0f:14:2e:1a:6f:91:c7:3f:9c:7a:95:
37:68:75:42:1d:aa:68:61:26:4e:34:6a:45:15:99:5e:22:15:
f0:24:76:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:30 2026 by rpki-client