Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EA4586C451311F18C3443E3CE1D38B0.roa
File: 1EA4586C451311F18C3443E3CE1D38B0.roa (raw, json)
Hash identifier: fXaS5M3Xr4tK8DPBnu+08izvsmT5RZd5mqltdRVtgDs=
Subject key identifier: 92:D2:6A:50:5D:38:8F:97:BD:E4:A6:77:0F:C1:AB:89:F5:48:8E:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C866
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EA4586C451311F18C3443E3CE1D38B0.roa
Signing time: Fri 01 May 2026 04:06:25 +0000
ROA not before: Fri 01 May 2026 04:06:20 +0000
ROA not after: Sun 07 Jun 2026 04:06:20 +0000
asID: 138995
IP address blocks: 154.218.2.0/24 maxlen: 24
154.218.3.0/24 maxlen: 24
154.218.4.0/24 maxlen: 24
154.218.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116838 (0x1c866)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 04:06:20 2026 GMT
Not After : Jun 7 04:06:20 2026 GMT
Subject: CN=69f426c1-6c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:43:01:77:a7:9e:4b:d6:4f:0c:c7:50:f0:c7:
2e:fe:e7:ee:7d:8a:16:71:61:7e:e3:83:53:1e:68:
cf:29:f6:6a:a7:85:3d:e3:b7:87:7a:42:ee:41:33:
1a:34:8c:d5:f6:3c:00:b2:73:e9:26:1f:64:4a:e0:
42:8e:41:5c:2e:1b:21:3b:5a:07:fc:25:f2:25:f0:
cd:b6:12:29:17:ab:7f:fa:64:83:07:fd:7b:a0:0f:
9f:d9:cf:31:a1:22:64:5d:b1:90:f0:88:36:04:94:
d6:9c:ba:1a:75:fc:d6:2d:15:52:d1:7b:ab:df:b4:
cc:a3:d0:6f:35:0d:6a:67:62:67:3e:a6:29:55:51:
6f:d4:5c:6b:be:4e:d7:e2:26:54:35:dc:cf:9c:fb:
e3:fc:a2:41:c2:6a:0c:4e:f6:e6:68:e1:6f:a1:5b:
06:63:f6:61:22:f7:49:3b:da:bd:2d:8b:0b:b0:9e:
03:74:36:a1:06:be:93:99:6e:31:d8:46:38:fc:4b:
4d:a5:e6:2d:5a:dc:77:5e:a3:89:db:2f:2c:2b:fb:
27:bd:a3:e6:45:51:d2:42:de:20:69:05:d2:7d:d8:
3b:84:03:71:99:80:75:89:00:a4:41:d5:88:c9:a0:
88:1b:14:ef:03:bc:7c:6f:6a:93:48:90:f7:15:44:
ca:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D2:6A:50:5D:38:8F:97:BD:E4:A6:77:0F:C1:AB:89:F5:48:8E:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EA4586C451311F18C3443E3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.2.0-154.218.5.255
Signature Algorithm: sha256WithRSAEncryption
2f:76:d2:de:92:02:3a:c0:61:8e:46:d7:0d:ce:e6:44:bb:31:
55:30:51:3c:ab:9f:66:ff:38:55:c0:aa:9f:33:b2:ed:98:d5:
84:85:97:88:68:c0:09:f1:fd:bb:a0:a0:b1:31:06:ae:b7:9b:
7f:86:75:1d:20:28:62:9b:3d:1b:5e:8d:4c:b5:61:2f:1d:d4:
d0:16:7b:68:ec:b4:6f:39:ce:b0:0a:10:55:3b:80:ad:17:3b:
d4:9d:68:a9:18:7b:76:9e:0d:c7:7c:f6:1a:40:44:b3:6f:03:
af:61:43:5b:92:c9:4a:08:5b:0f:d5:e7:7f:20:38:5e:ed:f2:
f8:27:1d:4b:8a:88:5a:e1:a3:78:2e:ef:e4:d1:3b:3d:dd:40:
31:5c:6d:c8:35:e5:19:16:f1:41:6b:5b:5c:a9:28:3a:69:e8:
45:1c:85:28:1f:ef:d2:29:c6:a8:2a:d8:8e:5f:db:84:42:e3:
5d:98:34:f3:76:74:00:b3:39:db:20:f1:7e:00:da:dd:5c:4a:
1c:e2:17:85:0f:20:09:9a:e2:c8:7f:62:f0:e4:fe:c3:51:6d:
5e:86:09:be:96:83:12:d2:22:ac:a2:3f:43:1e:a8:be:e6:98:
26:e2:25:c7:3c:fc:14:e1:6c:bf:62:b7:9c:41:66:23:14:88:
0a:c8:b1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:03:00 2026 by rpki-client