Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE0560724D0911F19ECF39D9CE1D38B0.roa
File: DE0560724D0911F19ECF39D9CE1D38B0.roa (raw, json)
Hash identifier: p9hBiAYWosr0DZRmrHLvA52z3PNoRBW4QPntHzHooyg=
Subject key identifier: 81:AB:47:44:8F:28:B5:85:80:23:79:BE:4F:C2:BD:37:97:72:EB:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CB01
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE0560724D0911F19ECF39D9CE1D38B0.roa
Signing time: Mon 11 May 2026 07:20:20 +0000
ROA not before: Mon 11 May 2026 07:20:16 +0000
ROA not after: Wed 24 Jun 2026 07:20:16 +0000
asID: 214413
IP address blocks: 154.194.226.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 05:45:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117505 (0x1cb01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 11 07:20:16 2026 GMT
Not After : Jun 24 07:20:16 2026 GMT
Subject: CN=6a018334-0a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2b:f0:18:d0:b9:74:a9:00:a7:79:29:fe:74:
b4:61:9f:e6:c0:7d:55:0f:2d:92:29:38:91:fa:ea:
6a:da:f5:53:6a:f3:b4:f5:31:a1:4e:ad:5c:9a:d1:
4b:a7:b5:9d:db:0a:17:ed:ff:fd:69:d2:ef:2f:f2:
10:8c:b3:e0:b1:1e:c6:b3:85:dd:c5:f4:09:72:ab:
f1:a2:4a:b9:a9:14:d7:12:47:65:6e:36:0f:8c:95:
85:fa:95:cc:c9:2c:6a:52:88:0e:53:0d:0d:2b:eb:
15:7d:f9:df:8c:ec:31:17:60:7d:92:7f:88:d2:4c:
1b:83:ed:52:53:e2:b1:e0:7e:70:17:29:fa:cd:82:
49:15:31:14:7b:a4:38:72:dc:22:bf:83:fd:68:3d:
57:9b:36:3f:2d:a0:3e:b5:85:d9:f2:c9:4a:0a:12:
5b:5e:f2:72:24:1b:ac:13:a9:43:87:24:84:51:01:
2f:c4:ff:63:aa:dd:5a:a1:f9:23:62:80:40:79:a8:
a2:81:b5:29:b0:2b:e3:09:aa:1e:6e:84:f9:34:ae:
d9:ea:b1:cb:d9:af:ea:b1:0e:2f:99:bc:cb:b9:67:
3b:79:8f:f2:8e:c6:28:42:7f:3b:43:25:8e:04:91:
50:31:45:4b:55:37:2f:f8:9f:6b:86:f1:9d:b7:8e:
92:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AB:47:44:8F:28:B5:85:80:23:79:BE:4F:C2:BD:37:97:72:EB:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE0560724D0911F19ECF39D9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.226.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:ee:cf:a4:28:64:37:57:85:81:74:84:19:40:1b:e5:e2:03:
97:0f:ab:5f:04:73:d0:03:9f:ff:50:b8:50:3c:1a:eb:2d:85:
2b:ae:7e:57:46:9b:e0:c2:e2:e4:f0:d3:92:94:04:17:ef:0f:
dc:72:04:91:d4:1b:9d:43:08:99:f6:39:96:7b:86:19:fc:bd:
35:34:f0:e4:9b:75:58:50:69:4b:5b:fd:1c:98:07:79:78:19:
6b:b6:b1:dd:6c:90:72:93:07:4e:bb:05:72:a1:1a:46:b5:37:
da:8e:ad:db:f6:49:98:2e:76:7e:b8:6b:87:a6:1d:29:d9:49:
19:d6:5b:ed:ba:8d:2f:01:e5:69:36:41:01:6f:e3:a5:02:a5:
4f:e7:9f:27:06:4f:dd:1b:a0:9d:5c:0f:b6:f0:9e:bb:74:db:
41:27:be:eb:c5:e0:61:c3:03:b7:52:b0:af:aa:2b:ad:ab:08:
36:aa:24:26:34:62:db:59:bb:38:07:b9:3c:0c:65:a9:6f:31:
fa:5d:8f:a4:3d:6b:ca:08:55:bc:86:72:58:ce:a9:f6:24:0a:
99:fc:37:e4:72:2a:4a:68:24:7d:f4:57:6a:a7:60:77:7c:84:
4b:13:cb:12:bf:f2:55:42:e6:61:92:0f:e5:f9:9d:4b:50:00:
3e:7f:e8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:23:35 2026 by rpki-client