Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9249E3DC4DD211F181CDDF18CF1D38B0.roa
File: 9249E3DC4DD211F181CDDF18CF1D38B0.roa (raw, json)
Hash identifier: FbdIWUpTOPvDE2H8Qrzl3KsX9pLtNN0dgcXiAVBa0Zc=
Subject key identifier: FA:DE:EA:FA:F9:64:52:53:68:D9:2E:24:77:77:94:63:CB:2A:47:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CB31
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9249E3DC4DD211F181CDDF18CF1D38B0.roa
Signing time: Tue 12 May 2026 07:17:02 +0000
ROA not before: Tue 12 May 2026 07:16:57 +0000
ROA not after: Wed 10 Jun 2026 07:16:57 +0000
asID: 1405
IP address blocks: 154.83.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 14 May 2026 12:11:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117553 (0x1cb31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 12 07:16:57 2026 GMT
Not After : Jun 10 07:16:57 2026 GMT
Subject: CN=6a02d3ee-9b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b6:14:34:d0:12:16:1c:f6:d1:dd:67:96:6f:
48:54:1d:25:5e:18:14:88:3c:f4:4b:ca:38:5a:a8:
30:55:40:ec:48:4f:65:36:fa:00:b0:cb:94:b8:99:
88:74:1d:9c:a7:19:f7:18:ad:e4:12:f2:fb:f7:3f:
a1:4a:a8:1f:1e:42:8b:82:db:fb:8e:4e:5b:67:65:
c9:43:94:1b:2f:36:9d:54:2c:81:ba:3a:2c:d8:dc:
52:bb:87:f0:2e:4c:e5:46:0e:23:9e:65:0c:66:0b:
ee:7d:9d:a1:ca:58:9d:0d:3d:5b:c8:b9:9e:af:2f:
a1:ac:6d:ab:a8:05:fd:95:41:5a:bd:a0:8d:7f:77:
6d:5b:15:be:5e:b8:a2:1d:82:8e:90:08:52:ed:9a:
0e:b9:f8:f0:60:08:0c:84:c7:2c:9e:0f:8a:6f:9e:
0b:34:30:41:2c:81:16:f4:b0:60:61:d4:36:72:85:
89:c7:38:76:4e:d6:b7:58:43:f5:67:4d:e0:ec:01:
d3:01:4c:86:af:31:b6:35:ff:47:0e:d5:2c:fd:4a:
09:53:3e:b3:b8:b6:1a:1b:0f:4b:62:c0:2b:bf:99:
26:f7:8c:36:af:24:c8:c1:47:74:a3:5d:ab:22:2a:
e5:ab:73:83:92:d6:49:82:68:92:15:f6:0d:18:63:
23:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DE:EA:FA:F9:64:52:53:68:D9:2E:24:77:77:94:63:CB:2A:47:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9249E3DC4DD211F181CDDF18CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.88.0/23
Signature Algorithm: sha256WithRSAEncryption
82:c4:f3:12:62:0b:67:47:93:34:b7:72:b7:d7:c1:e3:9f:6a:
de:5b:f9:66:15:d2:33:fa:fb:7e:35:e4:2b:dd:ba:31:d4:03:
26:b8:b9:eb:32:74:e9:da:fb:68:e7:44:86:15:35:07:91:97:
d4:37:02:d0:8a:b7:87:c9:2f:85:1a:5a:90:7d:3b:1c:e7:b7:
b1:59:b5:4a:9f:96:18:46:87:49:a4:96:f0:dc:fa:32:4e:69:
5d:b3:89:8f:6f:53:8d:91:36:ae:d4:2e:38:af:23:c8:49:d2:
e2:72:af:59:2e:4a:c5:5e:9e:c5:1e:7c:3f:1d:81:e2:54:1f:
8f:f7:66:4c:8f:aa:97:8e:55:9b:a9:1b:51:f6:1d:7e:95:20:
f4:cc:1b:e3:53:fb:44:b7:a3:1c:6a:4a:75:c6:7a:92:c2:81:
e6:d7:4c:11:5f:b1:47:56:03:fb:73:95:84:47:a5:72:3d:76:
a4:78:59:ee:f2:ad:8c:46:7f:00:4c:1e:43:8e:b8:be:8c:f8:
a7:31:85:e5:9e:9c:b8:c1:9c:39:18:d5:29:7a:0c:18:d7:61:
04:22:58:ab:8a:ce:6f:70:62:d2:4a:96:20:41:c1:b1:f3:3c:
3f:c1:27:d0:10:5b:51:2d:0f:39:3c:aa:33:98:bf:f0:b8:b6:
84:fd:54:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:18 2026 by rpki-client