Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46A745003D7411F192CD34E0CE1D38B0.roa
File: 46A745003D7411F192CD34E0CE1D38B0.roa (raw, json)
Hash identifier: 9sidbILK5DThFOnEWo0iIe9NX4qIBvj/7ROcgNjdyYY=
Subject key identifier: 9D:46:D2:5A:5C:D0:FA:F1:47:6E:66:EF:9B:B3:DC:E8:EB:54:A6:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C64E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46A745003D7411F192CD34E0CE1D38B0.roa
Signing time: Tue 21 Apr 2026 11:21:44 +0000
ROA not before: Tue 21 Apr 2026 11:21:38 +0000
ROA not after: Wed 27 May 2026 11:21:38 +0000
asID: 20473
IP address blocks: 154.81.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 29 Apr 2026 00:07:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116302 (0x1c64e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 21 11:21:38 2026 GMT
Not After : May 27 11:21:38 2026 GMT
Subject: CN=69e75dc8-a190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b5:80:99:86:a6:48:bc:63:35:43:5d:08:6b:
9d:1d:db:9e:8a:96:81:58:3b:87:5d:a6:59:7a:23:
2e:ae:1c:9d:d8:63:8e:47:58:ac:83:48:d1:b3:d9:
70:a5:45:ca:fe:39:d8:9c:a6:2b:3a:dd:f8:69:04:
5d:8d:4e:e2:7f:4e:c0:72:77:f1:11:8b:5e:04:b8:
dc:3a:d1:bc:54:d5:32:fa:b0:c3:ba:c6:18:f6:3c:
25:ab:8a:a2:4f:f7:fd:42:0c:4f:f2:d0:76:10:0f:
05:0a:97:70:3e:a3:be:e6:be:e4:4e:36:bb:ad:0a:
7d:b2:e6:69:f6:a4:ec:17:1a:48:79:de:d9:e7:15:
a7:7f:4e:94:19:1c:87:35:34:34:e3:1b:90:05:79:
77:ec:54:69:79:52:2f:a5:91:7b:c3:b4:c7:3d:41:
d9:20:1a:41:62:d5:0b:1a:7b:40:08:d0:3b:48:6f:
60:ff:0a:87:09:21:42:5b:39:59:02:06:dd:51:b3:
31:a7:7c:b0:f0:bc:1e:49:a3:64:60:53:b4:22:98:
04:19:12:47:50:5f:70:07:02:b0:12:49:97:a8:2b:
46:e0:ef:a0:77:d0:68:cd:e4:f0:7b:cc:83:8c:dd:
e7:d1:cd:12:35:a2:d8:2c:0e:92:16:76:2a:eb:0c:
ee:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:46:D2:5A:5C:D0:FA:F1:47:6E:66:EF:9B:B3:DC:E8:EB:54:A6:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46A745003D7411F192CD34E0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.156.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:f5:f9:bf:59:95:e5:49:ae:52:8c:45:a5:e1:3d:0e:bb:93:
8b:72:bd:70:9b:a4:c9:29:80:d7:ca:cb:6c:23:86:01:64:5a:
65:4b:c8:c9:cc:44:37:38:3b:b9:ff:6e:53:d0:0a:06:61:bd:
dc:05:4b:08:c5:10:b6:e2:33:9e:c9:af:72:48:b7:ea:de:36:
39:ed:88:fe:34:d2:93:3b:39:2b:e8:a7:9e:b2:e6:91:7b:e7:
26:70:a5:dc:d1:cf:f0:8d:39:1e:9d:46:1c:38:68:e9:cb:bf:
cd:43:1b:4b:45:3b:d0:fe:93:0b:8d:2c:ae:95:b5:15:7c:45:
c5:db:c7:6c:27:7b:13:e0:9f:8a:73:4e:e5:ab:ea:f2:84:04:
77:51:b5:2d:ec:a4:b4:22:32:61:83:52:1d:02:95:50:ea:4c:
9a:26:73:70:0d:b2:e0:e7:65:46:9f:ea:7a:26:a2:d9:21:39:
ae:ca:64:90:cf:97:d4:a4:65:9a:b4:f6:13:60:c7:be:7f:7d:
7f:1e:5f:25:03:1b:6d:8a:92:1e:61:77:9a:7e:4b:36:fb:2b:
7c:f3:20:d4:e4:6e:63:ab:22:e4:b9:f3:6c:6d:94:6a:7c:6a:
3c:a9:bb:fe:9c:cf:e9:a6:29:c8:1b:9e:d3:e3:b5:fb:1e:da:
05:36:0e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 07:55:05 2026 by rpki-client