Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15A19E7A45A711F199889ADCCE1D38B0.roa
File: 15A19E7A45A711F199889ADCCE1D38B0.roa (raw, json)
Hash identifier: cHFrh1EQ27+gFtWL/OIrj0rr16mP65v7mydOR5RrJfg=
Subject key identifier: F1:DC:30:3F:D0:22:42:C7:5D:90:03:82:22:99:A6:0A:AF:47:11:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C8FF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15A19E7A45A711F199889ADCCE1D38B0.roa
Signing time: Fri 01 May 2026 21:45:35 +0000
ROA not before: Fri 01 May 2026 21:45:30 +0000
ROA not after: Wed 17 Jun 2026 21:45:30 +0000
asID: 140925
IP address blocks: 154.89.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116991 (0x1c8ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 21:45:30 2026 GMT
Not After : Jun 17 21:45:30 2026 GMT
Subject: CN=69f51eff-21ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:db:53:6e:73:d3:c8:12:6b:70:c3:92:12:88:
60:4d:4d:72:49:e3:76:b2:2e:39:10:6b:47:a7:86:
59:40:8f:b7:ba:d4:a2:09:42:bd:d8:3e:d4:42:ea:
85:35:0f:d7:31:c0:3f:39:9a:b9:4a:1b:ba:f1:9b:
17:b6:83:81:6b:b4:5c:5b:d4:fc:91:df:cc:34:bf:
9f:fe:da:58:6c:fb:a5:55:41:57:8f:cf:c6:aa:02:
44:6a:04:13:7d:09:9c:ea:55:90:a0:80:cf:e0:1c:
ef:f3:9f:b2:e7:12:12:7d:dc:6b:b8:ba:75:29:44:
06:4b:11:11:58:37:87:7c:af:cf:90:e3:db:f9:4f:
5b:d6:7f:60:a1:2b:77:15:a4:f9:72:24:6b:48:02:
94:b5:74:aa:18:9d:be:53:f6:4b:08:96:5d:93:eb:
1a:83:9c:a0:a5:ce:22:5d:82:91:13:e1:fd:c6:21:
ad:29:c3:f9:d7:81:a5:c5:b3:39:6b:34:64:61:c4:
cc:2a:5d:07:c4:9b:53:d9:ca:73:a2:e2:8c:84:7d:
15:c9:79:c3:bd:d8:65:89:7b:aa:70:bb:fb:fe:c6:
d5:f3:c9:73:9a:86:c0:15:5e:89:4b:d2:a7:5c:84:
b8:2c:a6:44:0c:88:75:de:5b:66:41:7c:90:ea:d7:
53:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DC:30:3F:D0:22:42:C7:5D:90:03:82:22:99:A6:0A:AF:47:11:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15A19E7A45A711F199889ADCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.4.0/24
Signature Algorithm: sha256WithRSAEncryption
97:43:40:c1:8f:85:83:3c:15:6a:9e:08:b7:c3:d1:37:b6:fd:
b4:dc:8f:67:d4:0d:53:f4:df:77:e8:be:c7:3b:13:42:d4:7e:
8d:a2:30:db:12:69:d9:4a:33:8a:4c:6f:1b:64:60:ea:c7:06:
90:f0:87:d4:64:8e:4e:da:b5:22:14:b6:ab:31:c9:33:93:eb:
9f:64:56:50:3c:79:ff:8d:0d:7f:9f:8b:1c:13:16:bf:d7:96:
dc:a2:55:d7:b2:ba:ee:81:9c:28:1a:d3:15:a9:f8:02:f9:e1:
56:81:e1:55:ca:95:4f:dc:5a:dc:45:5e:8e:95:36:ed:e9:b2:
15:a8:c7:d6:48:11:e0:1f:5e:6b:e0:22:5b:d3:22:0d:88:9f:
c4:51:f4:0b:29:ed:d4:29:72:27:e4:6b:cd:9d:bc:aa:6a:cc:
65:f1:7a:cb:23:b1:6c:f0:4c:4e:08:d8:b2:d5:f1:42:68:fc:
2f:1b:97:2c:92:5a:80:97:f8:51:d9:04:75:d1:d2:c8:cb:8e:
17:f6:58:31:5d:58:3a:17:6e:40:06:9e:0c:a9:75:0c:35:fa:
22:dc:39:43:ac:48:74:10:00:58:7c:11:54:fc:30:fc:85:f2:
61:36:a7:b7:b0:24:f1:ce:42:f3:cf:8b:0c:4a:ff:80:51:8f:
0f:e7:da:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:03:43 2026 by rpki-client