Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F32FE768414411F18E4164C1CE1D38B0.roa
File: F32FE768414411F18E4164C1CE1D38B0.roa (raw, json)
Hash identifier: oS1jNsNQ0WKQaJQAYKFNAxE31c+mZl5dd18BLLrwBUQ=
Subject key identifier: FD:41:CA:8A:80:7D:FD:2C:A9:1B:4A:0A:1F:32:7E:99:04:DC:43:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C78D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F32FE768414411F18E4164C1CE1D38B0.roa
Signing time: Sun 26 Apr 2026 07:53:02 +0000
ROA not before: Sun 26 Apr 2026 07:52:58 +0000
ROA not after: Mon 01 Jun 2026 07:52:58 +0000
asID: 395793
IP address blocks: 154.200.2.0/23 maxlen: 24
154.200.4.0/23 maxlen: 24
154.200.6.0/23 maxlen: 24
154.200.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116621 (0x1c78d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 07:52:58 2026 GMT
Not After : Jun 1 07:52:58 2026 GMT
Subject: CN=69edc45e-f5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:02:ab:a6:8c:ea:70:cc:0c:b0:12:20:57:1a:
e8:a4:55:16:5b:20:dd:8f:88:ac:ea:f8:28:70:49:
7b:8d:f8:e1:1f:96:3d:29:fd:ee:50:ef:31:c0:e9:
95:39:b7:1d:8a:e3:f7:c7:3a:66:d8:2e:ca:b4:24:
f9:45:d9:91:d6:2b:1a:b1:fd:42:6f:9f:28:96:71:
aa:28:0f:26:76:a4:1a:68:87:53:63:a8:89:4b:3b:
8d:6b:f5:b3:9d:f4:18:10:3c:fb:f5:52:ff:66:ac:
c3:1a:33:7c:b0:f6:36:8b:ca:17:30:c9:2c:75:44:
72:b0:c2:e8:7c:7e:d2:f0:b2:e6:a9:5d:58:1e:6a:
d6:aa:74:6b:b8:1a:fb:1d:90:3d:14:60:c5:99:2b:
ac:0c:6d:8b:9d:ad:ae:ef:ca:cb:df:d4:c8:f1:12:
d2:21:d2:7b:84:d1:d4:de:54:e7:1e:80:c5:2d:ef:
54:af:9e:d9:31:9a:2f:0b:55:80:1f:f4:f3:f8:25:
84:00:23:33:25:a2:25:d9:2b:32:d5:a1:62:78:33:
a0:20:3c:6c:27:60:45:d1:ac:a7:9f:f9:c2:53:61:
27:6c:f1:b9:08:9f:e4:4b:6a:54:91:07:04:73:10:
1c:51:c8:5d:77:e7:b5:57:d2:4f:51:c4:9c:5f:f2:
3a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:41:CA:8A:80:7D:FD:2C:A9:1B:4A:0A:1F:32:7E:99:04:DC:43:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F32FE768414411F18E4164C1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.2.0-154.200.7.255
154.200.104.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:92:7d:bc:2e:25:70:74:33:7c:a6:01:1a:c0:50:9c:0c:af:
09:d8:40:2a:57:0d:5b:fb:57:b1:2e:81:77:14:89:3d:a7:cd:
dc:20:fb:38:78:c1:13:f6:39:80:e7:25:7b:31:c5:25:70:e7:
e2:98:b6:70:54:8d:fa:1e:f6:15:ff:54:7b:ca:24:da:6b:4b:
b2:1a:9b:c4:44:c3:41:00:53:df:1d:6b:42:da:75:8b:7e:79:
09:d3:71:bc:82:d4:30:c9:11:e3:1b:c6:b0:6d:4e:50:30:bf:
4a:41:f7:ca:c7:71:99:de:ec:57:74:39:8e:b0:39:88:ff:e1:
fc:34:c1:35:ce:95:b1:fe:af:bf:33:4a:bb:02:6d:96:5a:0e:
6c:fb:73:52:67:58:9e:a4:83:a3:be:95:ff:8e:c7:2e:67:f8:
85:e6:03:21:63:a8:45:b0:4f:20:d2:47:cb:55:d0:11:ba:7f:
ed:4f:fd:f0:3a:72:6f:ff:c8:3d:d6:d6:8a:82:36:26:03:2b:
d9:81:49:11:07:cd:c9:a1:e4:7f:f7:a7:0c:42:80:da:55:59:
6d:94:6c:e6:96:32:e5:c9:43:99:f5:05:71:3b:f6:3e:01:39:
c3:a2:fb:ec:57:f0:a0:f3:36:2c:c2:38:2a:74:9c:09:79:e4:
94:fd:4b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:19 2026 by rpki-client