Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB3E5DEA3FDC11F190D6BCA2CE1D38B0.roa
File: FB3E5DEA3FDC11F190D6BCA2CE1D38B0.roa (raw, json)
Hash identifier: bWIRmxAZ2SsER4oU3LFUnSWEDa9jXDVNioia8hwEFf0=
Subject key identifier: 1B:2E:6A:66:79:28:8B:96:09:FD:64:2E:D1:E3:CF:2F:BB:80:AF:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C74E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB3E5DEA3FDC11F190D6BCA2CE1D38B0.roa
Signing time: Fri 24 Apr 2026 12:56:17 +0000
ROA not before: Fri 24 Apr 2026 12:56:12 +0000
ROA not after: Mon 01 Jun 2026 12:56:12 +0000
asID: 11427
IP address blocks: 154.194.232.0/22 maxlen: 24
154.194.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116558 (0x1c74e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 12:56:12 2026 GMT
Not After : Jun 1 12:56:12 2026 GMT
Subject: CN=69eb6871-1f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:95:01:b5:13:12:36:0d:e3:20:5c:ea:a0:3b:
81:80:77:30:da:80:e7:ae:4a:f2:67:f9:74:6f:e0:
c1:15:32:fb:b9:6a:7e:7d:20:a4:74:81:d7:07:79:
f2:8e:d1:f3:93:47:d8:61:12:c4:94:58:97:1f:da:
e8:ab:91:00:e2:5d:59:7f:23:50:7c:11:bb:d9:f0:
f7:d1:fc:f4:c1:91:c9:25:39:65:be:e9:0c:7c:84:
3f:f0:b3:0f:0d:71:b1:04:87:39:dc:90:4c:0f:55:
b1:f5:68:b7:25:b2:32:50:96:19:a7:ee:4b:2b:8e:
f1:89:9e:f0:3e:00:f2:72:5d:20:ed:4d:15:e3:69:
af:92:16:a2:c6:44:4c:fc:29:5a:42:6e:fd:c1:bb:
86:a7:8f:44:e6:73:3e:21:d7:67:fc:86:96:cc:42:
e5:4b:cd:9c:4e:bd:3a:77:c2:a7:16:2c:15:3e:e5:
f8:23:21:19:6f:19:7a:c6:64:c8:db:e6:06:53:ba:
0c:b1:61:56:dc:dc:ea:4d:9e:13:25:29:f8:7f:63:
d5:c2:38:ca:81:ec:a3:6d:66:8a:8f:c3:41:6e:d6:
f3:25:48:d1:be:8b:1e:4c:5a:c0:7f:90:df:7f:dd:
01:ce:21:6a:ca:2e:b8:3d:63:bc:a3:73:d2:e8:26:
59:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2E:6A:66:79:28:8B:96:09:FD:64:2E:D1:E3:CF:2F:BB:80:AF:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB3E5DEA3FDC11F190D6BCA2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.232.0/22
154.194.244.0/22
Signature Algorithm: sha256WithRSAEncryption
cc:2e:8c:0c:16:bd:65:a0:9c:fd:87:33:7a:5c:03:6d:7a:6c:
a3:a5:9e:d3:2e:5d:ae:20:8c:bf:ca:6d:20:a9:8c:af:56:99:
42:9b:77:42:34:26:f0:73:92:15:dc:09:50:fd:09:f5:47:a2:
85:b8:73:e7:66:81:fe:95:e0:25:b4:a3:06:9d:44:56:db:4d:
19:cc:2e:d7:98:74:70:9e:e3:07:1d:19:55:71:e8:8a:9e:d9:
1e:97:71:92:83:f0:39:1d:e2:56:6e:bd:6a:bd:d3:a5:07:6c:
53:92:47:b9:d5:d4:61:5d:10:66:b4:4f:cc:48:a7:7e:77:3b:
0d:2a:e9:72:ee:dc:90:d8:99:ca:63:21:c2:f0:03:fc:9e:21:
de:f8:97:23:b1:4a:4c:69:5e:93:54:bc:37:4b:15:45:a5:b6:
5a:c2:4e:e4:13:28:08:2e:bb:81:4e:e8:3b:1c:44:ad:7b:b3:
b1:f0:5d:01:73:d0:09:95:d6:01:a7:d4:ef:02:36:db:8b:e1:
94:89:22:84:a0:1e:52:d7:59:89:d0:ea:a8:23:b4:70:cd:be:
53:9d:1a:f9:5c:48:04:80:f2:25:50:a5:e3:b1:47:b9:8c:c7:
91:74:00:d4:89:cc:a5:f0:44:ad:9e:95:9b:85:05:66:16:57:
82:28:a6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:06 2026 by rpki-client