Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45B9A072672F11F1AE2972D2CE1D38B0.roa
File: 45B9A072672F11F1AE2972D2CE1D38B0.roa (raw, json)
Hash identifier: 3Q8MHg/J3mCVLWUN3+5JIPMYLkY6G80whCtz7Lth55g=
Subject key identifier: 92:4C:36:62:11:4D:E7:00:0B:6A:7E:57:DF:8E:A2:1B:35:35:59:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D2A7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45B9A072672F11F1AE2972D2CE1D38B0.roa
Signing time: Sat 13 Jun 2026 13:53:36 +0000
ROA not before: Sat 13 Jun 2026 13:53:31 +0000
ROA not after: Fri 28 Aug 2026 13:53:31 +0000
asID: 138152
IP address blocks: 154.92.22.0/23 maxlen: 24
154.94.4.0/24 maxlen: 24
154.94.6.0/24 maxlen: 24
154.94.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119463 (0x1d2a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 13 13:53:31 2026 GMT
Not After : Aug 28 13:53:31 2026 GMT
Subject: CN=6a2d60e0-b1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c1:3a:bb:fe:35:e4:cd:62:2c:73:de:c2:de:
21:eb:f8:3e:92:57:71:2d:15:4e:44:ae:f7:fd:b0:
e4:14:fa:f6:9e:ad:d5:72:bd:ce:d6:24:4e:d6:bd:
57:52:58:12:96:ad:ca:6e:96:bb:d8:4e:cc:13:50:
17:0e:6d:54:3e:66:65:34:1c:d4:5b:8f:03:a8:83:
b1:4c:b8:1f:b2:a6:dd:69:51:2f:31:dd:29:34:56:
c5:a4:07:79:92:94:34:77:6c:93:d1:e5:75:a6:2b:
b4:a1:2f:13:c7:20:ef:84:ea:58:4f:c1:5c:a1:b9:
e3:d2:3a:2b:dc:7e:b9:bb:e9:00:25:c9:f7:c2:b5:
8e:fe:96:18:bc:28:2b:a7:9f:a9:96:37:e6:bf:92:
cc:e4:52:e0:a8:ed:ce:64:23:0b:58:f2:49:0a:55:
2a:96:b3:31:b7:25:94:57:22:b7:c6:75:55:13:a0:
50:c0:ad:bf:de:c7:cf:ca:3d:66:3c:53:33:26:80:
35:3c:62:f9:38:39:56:6b:86:b9:f7:9b:de:4e:18:
02:ae:e3:82:77:37:b0:59:e2:a4:9c:1a:8e:49:4c:
cb:fb:52:47:cc:eb:96:76:80:42:84:4e:87:88:d9:
b4:dc:1e:d3:c2:dc:f0:1a:a5:a4:e3:45:cb:ab:54:
70:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4C:36:62:11:4D:E7:00:0B:6A:7E:57:DF:8E:A2:1B:35:35:59:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45B9A072672F11F1AE2972D2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.22.0/23
154.94.4.0/24
154.94.6.0/23
Signature Algorithm: sha256WithRSAEncryption
44:70:70:ba:47:35:62:b5:b7:30:fc:8e:76:1c:d0:00:fc:f5:
d1:0f:d9:9f:ce:48:6f:14:bd:31:39:be:3a:cf:5f:29:ed:3b:
de:d5:33:72:34:a2:f6:cd:85:c5:20:2a:93:10:38:f4:24:6f:
83:d4:f8:d9:78:1b:48:0f:ad:7f:e7:55:65:41:26:2c:d8:eb:
b0:30:bf:d2:eb:f2:91:2a:fd:69:6e:f3:9f:84:e9:3f:09:80:
5e:82:94:28:84:5f:0c:e0:1e:ec:a3:10:19:7f:fd:be:07:b0:
18:e5:31:a5:1a:03:12:cc:c2:62:b5:05:66:69:16:40:f4:3b:
3b:0c:e8:7a:8f:ba:a1:5f:ce:c9:57:1b:55:45:95:45:bf:b0:
e1:4b:7e:31:79:58:37:ea:9f:02:31:6d:63:3d:91:37:ac:f1:
da:fb:1f:49:96:de:1e:c6:46:fd:2c:e8:5e:09:24:08:2d:80:
7a:cd:76:7e:54:47:1e:0c:28:5b:d4:59:cb:02:83:7c:fb:1d:
33:4e:bb:1c:90:15:9e:ab:90:b2:46:7c:4c:78:36:03:e6:f0:
14:51:e5:6a:36:ef:32:18:16:10:5f:0b:d3:ce:3e:48:3c:12:
3f:91:97:9b:b2:04:1a:03:58:b0:89:f6:80:bd:02:2f:42:66:
02:fe:ef:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:52:02 2026 by rpki-client