Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B030116713111F18CB9F0F5CE1D38B0.roa
File: 4B030116713111F18CB9F0F5CE1D38B0.roa (raw, json)
Hash identifier: ZNBkwJJNDDuslFKrLmLsUa77GF/S0NaNTRlQyXMmuow=
Subject key identifier: 56:C3:38:10:69:7E:D1:9F:09:AF:A3:E3:F2:1D:2F:8E:E0:DB:6E:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D53F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B030116713111F18CB9F0F5CE1D38B0.roa
Signing time: Fri 26 Jun 2026 07:33:15 +0000
ROA not before: Fri 26 Jun 2026 07:33:11 +0000
ROA not after: Tue 28 Jul 2026 07:33:11 +0000
asID: 52263
IP address blocks: 154.194.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120127 (0x1d53f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 07:33:11 2026 GMT
Not After : Jul 28 07:33:11 2026 GMT
Subject: CN=6a3e2b3b-baee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:a9:0b:64:cf:ad:22:97:53:e6:a7:0e:64:
7b:b6:05:ef:56:a9:eb:28:91:79:18:e4:d7:e1:56:
c9:47:5f:f4:13:34:f5:b2:7b:c4:9e:30:93:b1:c9:
5d:7b:0b:b3:42:27:b9:97:cf:78:72:cc:47:45:34:
30:4a:f9:db:e8:16:4b:fe:a0:b0:02:70:5b:47:0f:
33:93:44:3c:1c:e3:d8:f4:3f:e0:2f:32:a9:ed:35:
18:19:15:8b:9d:99:65:c6:b3:73:f9:f4:7d:46:f2:
d6:06:c6:38:e2:6f:31:4c:6b:14:d0:6d:e3:4a:09:
fc:66:14:c7:d7:64:1a:a3:cb:bf:dd:eb:6e:fa:db:
26:16:ab:89:1e:48:bc:c4:82:40:a8:19:cc:7a:20:
c0:c3:29:c4:4c:c1:bf:fb:20:10:fa:f0:2d:65:22:
92:50:e9:26:07:bd:26:b4:39:a3:e5:e3:01:08:c4:
89:ff:39:fa:f8:29:c9:c6:ae:1e:cd:e4:3b:29:9e:
08:7f:44:b2:4a:80:f9:e7:02:56:6b:7f:88:eb:28:
4e:1c:52:b1:88:f3:d3:2b:ef:c0:94:a2:6c:90:2d:
75:30:26:d9:70:63:83:3c:06:1a:61:96:5e:9f:3c:
78:d3:d1:d3:f2:73:d3:37:f7:3c:f9:8f:63:dd:93:
f3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C3:38:10:69:7E:D1:9F:09:AF:A3:E3:F2:1D:2F:8E:E0:DB:6E:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B030116713111F18CB9F0F5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.69.0/24
Signature Algorithm: sha256WithRSAEncryption
84:88:b2:1a:29:4a:27:d8:a5:96:75:8d:40:d8:eb:59:d5:62:
fd:76:8c:d3:a8:cd:1c:de:a4:63:8d:1b:90:3e:d6:bf:b8:51:
67:66:e8:4c:6c:bc:ac:f5:a8:95:80:ac:a1:8e:f1:65:c6:46:
33:03:dc:ec:6f:bf:43:f5:5f:71:41:23:50:3f:8f:4b:9f:a2:
9b:ff:8b:84:2b:04:38:67:4d:65:98:af:ea:42:ce:11:eb:74:
e6:05:c9:eb:c8:4d:be:52:1c:ca:92:08:ba:a4:21:c4:30:f9:
d5:01:57:3d:71:de:ed:20:05:f6:d5:08:a0:3d:68:ad:da:61:
d4:0d:4e:93:60:78:15:75:a3:94:97:f0:41:29:a5:77:6a:a4:
e6:7e:bb:25:c9:7f:27:cb:49:a8:85:5f:08:a8:ca:4e:f9:9a:
96:c4:0f:44:ed:d1:85:21:11:cb:80:36:a6:86:91:00:26:4d:
df:02:14:a4:13:c3:ee:a4:fa:45:a1:a4:48:3e:bd:7e:14:61:
71:52:0b:3e:2a:f7:fa:ea:95:70:00:5d:48:41:f7:06:db:88:
5a:bd:fe:9c:9e:60:49:6a:57:37:d6:b8:e8:bc:f3:f2:e8:79:
ee:9e:48:ef:26:94:cb:52:bb:6d:30:53:fb:90:94:12:c3:69:
ab:8d:8e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:24:30 2026 by rpki-client