Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C04DD7084D5911F1BEC505B1CE1D38B0.roa
File: C04DD7084D5911F1BEC505B1CE1D38B0.roa (raw, json)
Hash identifier: otbQ/OIZk090SEzDpeLPnF/Mtkqiqn3pZrfS5rwFg8Y=
Subject key identifier: AD:E8:5B:F7:77:BB:DF:31:81:2A:C5:AC:EC:05:A1:D1:18:1B:69:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CB25
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C04DD7084D5911F1BEC505B1CE1D38B0.roa
Signing time: Mon 11 May 2026 16:52:10 +0000
ROA not before: Mon 11 May 2026 16:52:05 +0000
ROA not after: Mon 18 May 2026 16:52:05 +0000
asID: 9294
IP address blocks: 154.88.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 05:45:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117541 (0x1cb25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 11 16:52:05 2026 GMT
Not After : May 18 16:52:05 2026 GMT
Subject: CN=6a02093a-bd9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:56:b5:75:06:ef:07:8d:f4:98:6e:a7:59:cc:
13:0f:f9:ab:cf:36:12:8f:ec:d7:0d:ca:70:e9:51:
e4:46:3e:77:09:93:6a:c9:d8:eb:81:75:b8:aa:03:
78:6a:2e:b0:c2:c3:4c:90:85:39:65:51:38:ed:6b:
8a:cc:55:bc:6d:da:48:af:cd:ad:e7:b5:f9:af:53:
eb:b3:72:8e:aa:4a:be:4d:ef:82:9a:0c:87:96:c7:
25:7e:97:a0:4d:fd:93:ee:14:09:ce:e0:c3:18:8c:
fe:25:05:ab:af:a4:d0:66:6f:d2:89:a9:12:77:3f:
f5:1b:e1:ef:3c:cd:f0:46:f2:a9:ed:38:13:40:b8:
a5:9a:ff:cc:26:78:7a:f9:4a:1f:64:c6:c4:b1:41:
77:0f:30:37:84:a7:7c:01:a6:36:b1:ca:22:db:01:
a1:36:7a:de:fb:96:97:ff:42:88:a8:b4:75:d3:09:
03:e1:b4:77:f5:dc:b7:f0:74:b7:98:d6:8a:ce:1c:
c3:be:98:f1:53:cd:21:fb:91:12:e6:cf:40:0c:4c:
a0:83:34:45:d8:38:3e:50:68:5e:66:f7:06:de:bd:
44:6b:15:67:00:98:20:c3:7d:81:06:5e:69:fb:1f:
5a:7b:06:c9:a9:c8:97:d1:c6:e4:db:4d:af:a3:c7:
d9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E8:5B:F7:77:BB:DF:31:81:2A:C5:AC:EC:05:A1:D1:18:1B:69:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C04DD7084D5911F1BEC505B1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.96.0/19
Signature Algorithm: sha256WithRSAEncryption
3e:dc:ab:8b:e7:03:d8:9f:61:86:31:ca:7d:3d:6e:b0:ee:09:
30:d6:6b:88:c0:36:ca:cb:39:0a:75:27:a3:f4:a6:2d:93:f2:
1f:e9:37:67:e8:06:34:ae:46:6c:91:92:37:cc:07:be:64:ad:
41:67:85:08:c3:c4:ea:14:91:5b:f1:e8:21:19:ed:92:6b:d8:
6c:f8:22:3c:3a:91:23:83:e7:4f:f4:15:a7:fb:e4:b3:86:ed:
b1:3a:ae:97:29:97:66:be:4e:e8:33:64:e3:3c:cc:2f:1c:a4:
90:3f:15:a0:6e:99:db:ee:4c:6a:69:ee:ce:64:d5:43:32:34:
fd:20:ba:0b:ba:12:31:5f:af:aa:2d:14:35:d7:28:c4:21:1c:
37:e5:82:83:0f:a4:39:e2:22:d5:8e:4a:73:b5:76:dc:ec:66:
b1:92:0b:6a:db:d3:19:08:e3:aa:8e:f8:3e:6e:4f:d5:33:57:
55:c1:9b:e8:f6:1f:1b:79:6e:7f:b9:43:a0:74:18:bb:d9:a1:
5d:20:d8:a7:1e:af:ed:08:25:e9:ad:e9:e3:3d:6d:58:18:e2:
7f:54:18:08:92:e5:dc:a1:9a:77:6b:26:67:3f:85:84:29:97:
b0:e4:4c:13:63:ea:be:9a:56:b4:17:55:bc:4c:68:3a:4d:57:
a7:40:29:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:54:59 2026 by rpki-client