Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30E40ADC460211F1B1254B16CF1D38B0.roa
File: 30E40ADC460211F1B1254B16CF1D38B0.roa (raw, json)
Hash identifier: Xpy61bjkPGAeuOp1B2cfykbT9B0c7oowO5TWgpuA8Zw=
Subject key identifier: A9:A4:24:19:A7:46:1F:5E:55:5F:48:44:30:29:93:DC:5D:5A:7D:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C910
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30E40ADC460211F1B1254B16CF1D38B0.roa
Signing time: Sat 02 May 2026 08:37:45 +0000
ROA not before: Sat 02 May 2026 08:37:41 +0000
ROA not after: Tue 09 Jun 2026 08:37:41 +0000
asID: 61112
IP address blocks: 154.82.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117008 (0x1c910)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 08:37:41 2026 GMT
Not After : Jun 9 08:37:41 2026 GMT
Subject: CN=69f5b7d9-ef9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2f:45:99:d2:dc:6e:60:93:38:c2:3a:5a:b1:
5f:35:a0:44:57:b1:39:27:dd:fc:80:c4:d6:f1:54:
e7:7d:8d:82:06:01:d4:89:08:de:5c:a0:57:2d:7f:
90:f5:6b:55:8b:d7:b1:c1:25:18:0a:3f:e6:74:35:
07:0e:73:97:d9:64:70:b7:52:d2:dd:ba:e9:d9:fb:
22:4a:cc:c7:e4:9d:67:c4:de:6b:9c:0d:f9:69:fd:
aa:5f:8a:d9:8f:fd:ae:70:81:42:40:a8:3b:d4:ab:
bb:68:4c:30:a0:3a:e0:4b:f8:26:e5:00:63:bd:89:
90:36:52:99:b0:4c:9f:39:3c:40:5f:4a:1c:be:ba:
0f:38:d4:60:b0:aa:ff:74:1a:ae:bc:b9:62:c8:b9:
79:76:63:92:b0:bf:45:c0:45:90:52:4d:54:42:ec:
46:e0:f5:b0:b2:14:94:5d:97:ff:95:5e:a5:84:07:
99:a3:02:ce:7e:cf:af:2e:a5:cd:8d:d1:e3:1b:cd:
6b:69:70:8b:e3:35:f2:46:5b:85:de:d1:91:65:42:
51:d2:0e:77:89:52:78:5d:47:73:1c:0b:88:30:e5:
cd:69:39:03:c3:32:8a:c3:73:8d:1a:39:4b:de:b8:
c8:e8:5b:c5:7c:2a:5c:69:55:55:70:e1:ff:ee:f0:
43:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A4:24:19:A7:46:1F:5E:55:5F:48:44:30:29:93:DC:5D:5A:7D:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30E40ADC460211F1B1254B16CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.138.0/23
Signature Algorithm: sha256WithRSAEncryption
88:b7:e7:07:a2:82:fb:16:36:c7:6d:cf:c9:6b:3d:5c:db:15:
90:6a:60:bd:1e:2b:34:73:22:7c:1c:28:ef:db:a4:3c:3a:7c:
b1:fb:77:b2:24:32:20:1b:b0:71:e8:3d:78:3b:91:d2:2a:c0:
42:08:58:ae:2f:ce:3d:28:b7:8d:c9:5e:52:95:2a:e6:ae:bb:
0d:e5:eb:15:47:1f:55:24:2e:6d:fa:5e:b3:5e:e3:33:d2:0f:
a7:c7:88:ed:49:07:36:54:33:06:cc:dd:38:a4:6a:2f:4e:2e:
4e:64:b5:9e:e8:01:22:0b:93:e3:7a:ca:6f:5a:86:d9:4d:7f:
13:67:c5:c2:a3:17:3b:ad:f1:9e:a9:9c:ff:52:49:bb:dd:88:
4a:42:32:64:2c:52:b7:72:b2:50:61:fa:8a:79:6c:d1:2d:f2:
2d:7d:c6:1e:53:24:6a:2e:6c:5c:d4:44:43:be:af:b5:1d:75:
83:22:e5:dd:14:1b:18:45:be:7b:b6:52:91:db:0a:65:db:5c:
3e:09:ac:13:63:32:18:25:10:ab:e1:56:fa:59:5a:3b:c1:a9:
0c:51:26:f8:54:86:68:14:9f:18:ad:15:a5:1a:59:ab:cc:38:
b5:42:47:ac:fa:4d:5e:9b:10:ff:a0:a1:20:02:8a:e8:88:91:
fc:7d:7b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:44 2026 by rpki-client