Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/224E696C4D0B11F180A916E1CE1D38B0.roa
File: 224E696C4D0B11F180A916E1CE1D38B0.roa (raw, json)
Hash identifier: 7ON9POUaHSlfkty2eUQv5disqfHUlnkO6LbJ2ORaJIU=
Subject key identifier: 73:03:D8:D1:10:16:D5:9C:0C:D9:7C:31:E8:B0:FC:4D:E6:FB:FC:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CB05
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/224E696C4D0B11F180A916E1CE1D38B0.roa
Signing time: Mon 11 May 2026 07:29:24 +0000
ROA not before: Mon 11 May 2026 07:29:19 +0000
ROA not after: Mon 18 May 2026 07:29:19 +0000
asID: 9294
IP address blocks: 154.88.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 06:17:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117509 (0x1cb05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 11 07:29:19 2026 GMT
Not After : May 18 07:29:19 2026 GMT
Subject: CN=6a018554-036e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:88:a9:80:16:b0:d9:03:fb:56:68:c8:cb:e4:
da:f3:1b:15:7b:e4:3a:7a:66:e9:ea:66:0c:31:b5:
5b:17:5f:5e:7d:86:89:91:f2:93:ae:de:21:43:e0:
0f:97:f1:f0:ba:d9:5c:e2:90:37:79:74:f6:e9:e0:
35:86:7f:a9:40:9e:37:3d:16:9c:5b:45:1d:1b:9a:
3f:b9:3f:80:7a:e5:0f:f2:31:73:1d:48:17:21:bc:
85:3b:33:8c:fb:34:ce:a0:56:22:0e:0d:72:a2:b8:
19:ca:87:c7:96:51:af:6e:6f:4f:63:02:3b:79:dc:
ee:e5:aa:c3:5b:d8:b0:5d:27:e2:d2:04:e2:f8:a8:
4b:5f:5c:f6:44:04:e5:47:fe:6f:78:30:29:ae:d7:
08:b1:46:50:cc:07:59:0b:0a:b6:08:03:8c:ee:64:
e6:f8:b8:c9:a9:a3:68:ad:a6:d7:bb:b4:d3:3c:8a:
40:60:d6:4c:95:a4:c7:d5:ee:67:49:62:85:2f:82:
89:84:f9:04:70:a3:f1:f5:3d:c7:bb:03:f2:b7:5f:
ee:53:0a:cb:9c:7b:0f:c5:cb:04:20:44:27:37:14:
2b:8c:45:d5:47:1d:3d:b5:81:1e:e9:c7:3c:98:36:
fc:2a:67:55:f6:70:89:d8:a0:d0:44:2e:ce:ce:84:
82:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:03:D8:D1:10:16:D5:9C:0C:D9:7C:31:E8:B0:FC:4D:E6:FB:FC:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/224E696C4D0B11F180A916E1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.96.0/19
Signature Algorithm: sha256WithRSAEncryption
3f:3a:d9:bb:81:77:a6:3c:cb:37:1d:32:b0:e5:bd:25:f3:c3:
70:f0:65:75:ba:29:ad:bd:6e:20:c5:0b:19:ee:54:7e:55:a9:
e4:b9:ab:a6:44:76:81:85:2d:22:fc:d8:81:f3:83:35:15:82:
49:7e:b2:5a:f1:a1:08:ee:7d:fa:f4:d9:3b:e4:f7:7c:81:ed:
21:fe:f0:a4:a3:19:d6:30:1e:38:03:2b:cf:9f:9c:e8:92:29:
df:f6:55:87:9f:ee:54:0d:19:96:1a:ed:91:7f:db:0c:61:26:
12:67:fe:39:4f:4a:e5:ea:8f:1e:60:6c:e1:5f:58:0f:d0:2a:
6b:ea:4a:8f:5c:7d:6c:77:f8:cf:d2:79:aa:4b:e1:f2:00:dd:
27:00:24:5a:6b:be:a5:a1:22:45:cc:96:14:0c:83:33:13:54:
0f:ef:64:26:2d:6f:39:3c:df:cd:4a:32:bb:1d:2b:52:6e:dd:
ff:85:4d:48:f5:b4:65:e2:6a:ff:17:df:60:71:14:7f:19:84:
3f:b3:5f:db:f3:cf:25:6f:b2:0e:86:69:19:2f:31:0e:36:bb:
82:91:e8:04:ab:8d:c2:76:d9:9c:f6:95:ad:46:2b:4f:4d:3c:
fa:e5:8e:e2:a8:5e:3f:41:fd:f4:ef:f7:11:9f:89:21:64:e1:
fc:72:ae:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:42:13 2026 by rpki-client