Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3CFD438491B11F1BB209AF0CE1D38B0.roa
File: F3CFD438491B11F1BB209AF0CE1D38B0.roa (raw, json)
Hash identifier: weyXLEKo0PYULPo+9dkGhIrMkLsx4f9vS8+0toCm6o0=
Subject key identifier: AE:9F:E1:9A:D2:93:7A:2B:D2:03:55:9C:F6:AB:2C:8C:42:AD:5C:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C977
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3CFD438491B11F1BB209AF0CE1D38B0.roa
Signing time: Wed 06 May 2026 07:19:43 +0000
ROA not before: Wed 06 May 2026 07:19:38 +0000
ROA not after: Sun 07 Jun 2026 07:19:38 +0000
asID: 147176
IP address blocks: 154.197.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117111 (0x1c977)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 07:19:38 2026 GMT
Not After : Jun 7 07:19:38 2026 GMT
Subject: CN=69faeb8f-a691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cb:bf:a9:36:7a:57:5c:5e:42:13:ac:35:78:
ce:42:5c:9b:8f:a4:02:1e:20:b9:5c:c6:25:3b:a6:
d8:c7:03:81:6f:09:24:a2:54:26:27:05:2b:ef:8a:
10:a6:0a:10:77:f8:ee:57:a0:c2:88:96:6b:91:25:
89:31:f5:54:87:dc:9a:fa:c3:26:10:02:5b:78:b0:
a2:ba:78:32:f1:87:55:60:b1:05:f6:34:26:2b:c4:
56:96:a4:90:56:4b:43:02:f7:f4:a9:07:a5:5b:cb:
34:8e:20:d3:04:91:4a:5f:b6:6c:94:eb:98:8e:ed:
62:c2:c2:6c:50:73:2f:35:0c:bd:4d:10:2e:39:2a:
3c:27:a5:89:ab:2b:63:bd:92:21:67:f6:aa:e1:ee:
6b:ac:79:e1:af:c0:68:ca:fb:6c:a1:a6:c1:3c:c7:
7b:39:24:51:04:d0:3f:b4:83:84:cc:0b:91:e7:56:
16:ff:d2:2a:33:24:c9:bd:07:a2:18:77:aa:9c:ca:
bf:4d:b0:b2:97:ac:d0:9c:a0:98:b8:58:cf:6d:ef:
f2:93:66:8f:c4:12:14:5c:d7:5f:36:94:18:d7:19:
dd:98:eb:32:72:d5:97:1f:17:37:d6:d2:bb:b4:82:
56:d1:07:66:88:c8:58:32:52:a6:48:35:46:9f:a9:
46:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9F:E1:9A:D2:93:7A:2B:D2:03:55:9C:F6:AB:2C:8C:42:AD:5C:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3CFD438491B11F1BB209AF0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.69.0/24
Signature Algorithm: sha256WithRSAEncryption
85:3f:28:d7:fa:cf:26:19:de:a4:a9:62:78:7b:b3:a8:d2:fd:
53:a8:13:21:7d:b4:82:6c:d3:69:f8:5b:1f:6e:6f:d3:31:6b:
3a:bc:7f:a9:84:bb:f9:11:10:6c:fd:5b:bc:72:d9:88:16:57:
a2:f8:de:76:62:fa:d6:7c:37:aa:5c:37:79:68:f9:b2:3a:ac:
a5:53:d7:d5:fe:50:92:31:37:6b:40:80:3b:38:89:df:74:02:
f8:3c:3a:24:a8:ca:6b:52:65:eb:a7:4d:64:45:3e:ec:59:8b:
f5:5a:61:a0:92:4d:9c:e2:41:26:ff:48:59:6e:5d:dc:03:2b:
89:72:88:43:00:08:74:d4:3a:46:71:e4:20:80:59:bf:70:0e:
e9:00:27:4e:13:39:bd:e7:24:f7:e6:fc:d2:85:79:97:8d:80:
84:fa:77:81:e2:c5:e6:ec:09:c1:20:78:0e:0d:01:d7:ba:7c:
d5:d0:6b:8c:63:90:18:c9:70:85:b9:b2:4e:34:6b:ef:cc:95:
29:c3:9a:76:a2:5b:65:23:9f:3b:bd:ca:b4:1a:38:38:7e:93:
a5:9f:eb:5b:03:b1:7b:d2:f8:a0:62:27:1f:1c:67:3d:ac:8e:
a9:83:27:68:70:58:67:01:28:6e:74:5f:a5:f3:98:56:e8:1a:
1a:de:7d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:04 2026 by rpki-client