Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA59040843C911F1A4856C0DCF1D38B0.roa
File: EA59040843C911F1A4856C0DCF1D38B0.roa (raw, json)
Hash identifier: Gp1eblezItcZQzCyT1LDsLde2kTBfVd/7ioNTBj95r8=
Subject key identifier: 28:E4:76:84:11:CE:CF:25:DD:D1:CD:0C:43:EA:07:4E:45:1B:D6:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C7EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA59040843C911F1A4856C0DCF1D38B0.roa
Signing time: Wed 29 Apr 2026 12:49:53 +0000
ROA not before: Wed 29 Apr 2026 12:49:47 +0000
ROA not after: Wed 03 Jun 2026 12:49:47 +0000
asID: 198652
IP address blocks: 154.198.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116714 (0x1c7ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 12:49:47 2026 GMT
Not After : Jun 3 12:49:47 2026 GMT
Subject: CN=69f1fe71-c351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:73:87:21:ba:34:78:26:b8:88:cf:52:e7:03:
38:86:41:70:6c:15:55:01:3f:45:e2:c7:18:80:36:
7d:fe:bc:cc:49:07:ec:7d:4f:5e:09:d7:6a:cc:f3:
d4:29:8e:d0:b2:ce:e6:c9:cd:ba:e2:6d:ec:ed:7e:
dc:97:4c:dc:63:03:f4:00:ee:0e:76:5b:86:c9:e3:
dc:80:82:94:e4:5b:66:c3:17:49:28:20:88:02:9c:
1a:0c:30:cf:50:34:dd:bd:e6:ec:13:a8:60:ab:95:
6c:7b:e3:ab:c2:ac:d1:3f:2e:46:16:8e:e8:db:01:
c0:c6:37:98:04:fb:e1:c7:e8:93:7b:ff:0b:c7:f2:
87:90:fb:d8:56:d7:97:9d:a0:99:6f:de:52:c3:a4:
cd:33:35:82:8b:0b:f9:0b:11:b6:c9:be:f8:bf:46:
9d:b0:ee:a6:e9:0d:16:21:0e:2f:b7:d7:67:4a:ca:
5e:63:96:4c:70:cb:0c:07:77:a0:93:26:e7:93:eb:
d1:39:fa:30:ce:ee:a4:d3:04:4c:aa:7f:a7:ab:f5:
bf:84:2d:d6:4d:28:84:65:50:e5:7f:03:27:d6:4b:
81:c0:94:4f:fa:b7:ab:09:fe:81:bc:24:3f:d5:aa:
86:ca:00:69:c9:f3:27:8d:48:80:bb:5e:2c:19:8c:
5c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E4:76:84:11:CE:CF:25:DD:D1:CD:0C:43:EA:07:4E:45:1B:D6:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA59040843C911F1A4856C0DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.12.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:28:97:02:bd:b6:0e:be:03:7d:05:4d:5b:19:de:eb:9c:67:
14:19:6d:15:c2:d7:47:f8:b6:7a:3b:ee:15:f4:58:ce:9b:3e:
ed:da:1d:34:4b:a4:c7:c5:57:88:6c:6d:26:b4:e5:b6:bd:2f:
2b:2d:ef:bc:5c:6c:0b:a4:68:b6:41:b1:2a:8e:0b:e4:e7:ca:
33:80:f7:30:12:e7:be:99:6c:69:b4:d9:fc:89:53:c7:75:46:
67:58:d7:6e:ee:f9:af:e9:3b:82:aa:d2:c9:d3:84:64:67:cc:
65:52:bc:bc:7e:fb:8c:7e:2a:1b:69:1a:d1:23:ee:c7:c1:9a:
3d:57:67:36:a3:af:ce:de:68:57:59:00:bc:c1:d6:85:8d:c6:
43:3b:0e:7f:71:a3:97:47:ab:57:a2:b4:2e:30:64:04:98:d7:
90:1b:5c:35:71:2d:9a:67:6a:1c:b1:17:eb:c3:c8:a0:b8:3f:
6c:e8:c0:91:d1:2c:f0:c5:b0:38:b1:ab:21:be:75:af:35:48:
ea:20:96:d2:43:1b:0e:2e:f8:4e:92:04:58:68:8f:4c:c2:e8:
7c:c8:f8:61:03:8f:bf:7e:f9:af:2b:2e:12:99:97:4f:5a:34:
10:d7:93:1c:20:8a:2e:90:7b:f0:79:51:b4:b7:5b:b4:46:f1:
ae:26:0f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:03:41 2026 by rpki-client