Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/472D779A535B11F1B2ED5DC0CE1D38B0.roa
File: 472D779A535B11F1B2ED5DC0CE1D38B0.roa (raw, json)
Hash identifier: cM+p9czoU9hjC2a0U2HJWNIO37Ysg8PGLbx3XTn7mgc=
Subject key identifier: 39:BD:01:50:79:FD:B2:F7:95:82:8D:8B:DA:1E:C3:EA:68:63:93:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CC6E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/472D779A535B11F1B2ED5DC0CE1D38B0.roa
Signing time: Tue 19 May 2026 08:18:13 +0000
ROA not before: Tue 19 May 2026 08:18:08 +0000
ROA not after: Wed 19 Aug 2026 08:18:08 +0000
asID: 139923
IP address blocks: 154.210.16.0/20 maxlen: 24
154.213.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117870 (0x1cc6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 19 08:18:08 2026 GMT
Not After : Aug 19 08:18:08 2026 GMT
Subject: CN=6a0c1cc5-e4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c3:d9:19:25:65:92:c9:01:31:0f:86:94:0a:
38:61:ff:18:8c:96:25:c0:9b:d0:7e:fe:f0:48:a8:
9b:a9:60:d3:ea:37:87:4b:7c:f7:a9:66:99:8e:94:
48:2d:f6:36:f9:1c:c3:fa:24:da:09:dc:89:7e:5e:
fd:af:d8:e1:68:1e:ef:9f:82:d6:0e:38:f3:e2:e8:
ba:06:36:d7:c9:93:3e:f3:6d:c1:f8:39:4e:36:64:
da:a9:db:da:35:f2:9b:30:b7:34:03:69:c2:df:96:
20:01:38:ea:ca:af:14:cc:ce:4c:d8:eb:5a:ea:9b:
c7:05:8f:5d:0a:22:2e:41:9a:e1:7d:27:12:a0:b4:
e6:17:db:be:23:c1:8d:db:d0:59:83:ff:cd:cc:8c:
6f:01:e2:b0:ed:81:e7:03:fc:8b:8f:2e:8c:93:73:
84:17:ac:dc:7a:6d:5e:93:21:28:ea:cb:c5:ed:19:
45:a9:ff:66:f2:6f:ca:87:c9:09:3c:89:4c:11:a2:
30:30:08:43:80:fb:25:6a:66:b8:ae:60:eb:f7:0b:
b1:fa:48:91:f8:78:1f:55:d7:e8:94:36:fc:4b:b3:
e8:b0:f7:54:f0:da:bb:a3:f5:10:fd:cf:9e:82:e8:
12:31:e9:6f:23:49:bd:6e:55:58:11:57:b4:8b:55:
e7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BD:01:50:79:FD:B2:F7:95:82:8D:8B:DA:1E:C3:EA:68:63:93:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/472D779A535B11F1B2ED5DC0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.16.0/20
154.213.64.0/20
Signature Algorithm: sha256WithRSAEncryption
a7:d8:82:58:80:f2:6a:14:86:9e:62:14:38:84:2c:bd:82:85:
2a:32:b0:49:d6:ee:02:95:e2:21:df:a2:c3:5e:4e:09:2c:cd:
01:fb:68:df:e0:fb:38:7a:ae:e9:44:47:30:13:4e:22:97:3b:
ba:91:3c:37:36:01:7d:9d:e4:ee:ab:d1:de:67:ac:a4:82:55:
3d:e2:9b:66:42:cf:26:c1:38:b9:9e:c2:e5:1e:97:24:5a:0f:
11:7e:96:03:1c:d2:b4:0f:0d:04:76:3e:87:2c:1b:96:7f:60:
12:51:4d:cb:2d:97:89:20:3b:68:19:de:06:53:4c:42:c7:50:
64:18:d4:dc:66:be:39:12:53:52:9a:d1:ed:8e:30:26:c7:c5:
0d:ec:de:02:76:0c:0f:62:08:fa:b4:80:79:ec:e7:76:c1:77:
67:7d:73:2a:09:47:31:7d:5b:1f:f8:3b:d8:91:43:a4:22:8b:
23:eb:96:eb:e0:1d:98:fa:45:2a:21:51:e8:7c:0a:27:97:59:
81:26:fd:a1:88:35:91:27:5a:8b:d2:84:15:69:cf:c0:9e:65:
2a:8d:dc:dd:34:c7:a3:b2:8f:33:a8:7b:ed:1e:86:21:5a:7f:
03:da:72:ff:af:53:d4:5c:6e:5c:ae:f0:dc:1c:2d:f3:59:2e:
b8:31:34:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:55 2026 by rpki-client