Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/458EF1564A1011F192769ABCCE1D38B0.roa
File: 458EF1564A1011F192769ABCCE1D38B0.roa (raw, json)
Hash identifier: hP6Z0RkbsdU4M8CgrV5RsJXBMuaA0WGfRfMEmGk3jdY=
Subject key identifier: 5F:40:46:9C:49:85:4E:F0:31:D1:D6:6C:F6:BD:5A:0B:4A:57:3A:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C9D8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/458EF1564A1011F192769ABCCE1D38B0.roa
Signing time: Thu 07 May 2026 12:28:37 +0000
ROA not before: Thu 07 May 2026 12:28:32 +0000
ROA not after: Fri 22 May 2026 12:28:32 +0000
asID: 137899
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117208 (0x1c9d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 12:28:32 2026 GMT
Not After : May 22 12:28:32 2026 GMT
Subject: CN=69fc8575-ee9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:06:8d:29:ec:00:c3:27:7a:02:54:31:92:74:
6b:40:06:c1:ea:ea:74:32:9e:26:56:95:37:42:2d:
2e:38:9f:7b:87:2a:25:d3:c7:57:09:73:e9:fa:8b:
f8:74:84:81:39:c0:61:5b:5e:f1:d9:9a:82:91:04:
4d:2b:df:a7:13:a1:1c:40:7d:ff:78:9b:8e:5e:94:
36:0f:a3:0d:9f:a1:51:c9:0d:12:a0:50:91:66:a9:
60:34:72:32:cb:47:0d:b5:d3:3d:8e:dc:98:56:1d:
2b:cd:0b:5d:df:e9:c3:fa:c7:00:c2:0a:c4:5e:c1:
d4:76:68:50:33:ed:a1:29:57:9b:be:85:b3:66:92:
37:c0:2f:a1:22:ca:a7:91:d6:2a:6a:86:3c:23:e3:
ba:7d:47:eb:48:5b:01:81:b1:5d:35:c8:bf:32:51:
e9:3d:9a:20:3f:eb:07:df:58:b0:9a:99:de:9e:ae:
9f:25:9a:64:9d:43:06:a0:56:29:0d:81:ac:75:73:
a0:56:35:98:85:ec:b2:b7:b3:6f:73:52:11:99:e4:
a9:28:26:95:00:dd:ec:3d:5b:92:4b:2b:db:70:32:
b7:16:e1:07:6b:8c:53:50:d9:6e:73:24:71:21:97:
5d:07:1c:9a:ee:12:b4:df:e3:77:57:f2:4e:06:ac:
79:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:40:46:9C:49:85:4E:F0:31:D1:D6:6C:F6:BD:5A:0B:4A:57:3A:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/458EF1564A1011F192769ABCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
c0:d2:19:a3:ce:1e:9e:c7:71:34:51:05:1a:24:28:87:62:b2:
71:ba:71:3f:2a:1f:07:39:be:f0:80:30:d1:c5:00:15:36:df:
5e:9b:b9:c4:d9:c6:8f:c3:20:be:01:f8:60:cf:fc:b2:4c:e0:
53:92:b3:8c:66:5b:3d:f0:7e:f7:3c:a8:92:45:2c:e3:1a:f7:
6e:67:4e:ad:80:83:b5:c8:9d:cb:5a:0b:43:3a:09:98:11:f1:
cc:1c:06:9d:d1:89:1a:f7:5d:83:39:f9:51:6d:8c:76:76:52:
91:3f:fe:dc:f0:df:fb:e8:9d:dc:86:b4:95:1c:fd:4b:ce:bc:
10:0a:c4:3f:13:20:19:cc:50:76:9b:91:ca:9b:d9:7a:90:f6:
8c:7b:66:11:bd:cf:88:5e:11:03:8c:b1:90:a6:79:aa:81:36:
00:ac:b8:5e:6e:d9:3b:5b:c6:19:04:b5:d5:5d:eb:52:86:6e:
a5:a5:1e:cf:2e:3e:2e:3b:42:f7:2d:3c:2e:2e:e8:35:4c:19:
2d:8f:e1:d4:d7:a3:cd:9e:7f:a0:50:f8:9f:04:de:e8:88:29:
b8:b5:9f:05:c1:c4:a8:2f:49:5f:2a:87:74:d9:b5:1d:a3:55:
27:4d:9d:a2:a1:46:49:cb:4c:aa:30:20:3f:b3:7d:a0:22:f0:
96:a4:21:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:33 2026 by rpki-client