Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47A8FA825EBE11F1A1B531FFCE1D38B0.roa
File: 47A8FA825EBE11F1A1B531FFCE1D38B0.roa (raw, json)
Hash identifier: Rp7F+0QUCw7vAPWk8d0RgNASMFlNYnyyxp1ALn3W98c=
Subject key identifier: 71:BD:FC:B1:D8:67:11:7F:6E:49:F8:A6:07:A9:91:95:F9:E3:A5:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D162
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47A8FA825EBE11F1A1B531FFCE1D38B0.roa
Signing time: Tue 02 Jun 2026 20:04:37 +0000
ROA not before: Tue 02 Jun 2026 20:04:32 +0000
ROA not after: Mon 13 Jul 2026 20:04:32 +0000
asID: 14315
IP address blocks: 154.84.132.0/23 maxlen: 24
154.89.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Jun 2026 00:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119138 (0x1d162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 2 20:04:32 2026 GMT
Not After : Jul 13 20:04:32 2026 GMT
Subject: CN=6a1f3755-7daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:2d:89:55:79:25:5a:61:da:51:87:ca:c5:
3a:09:fb:0c:4f:ab:6d:fd:20:19:d2:6c:d0:e7:c8:
1c:42:52:b6:12:d7:46:fc:b2:3d:8f:0d:f5:1b:a4:
2e:4f:b3:f7:7f:13:30:d5:ef:db:e2:ec:42:8b:52:
19:76:c5:44:04:51:fc:58:e8:48:31:e9:ed:03:43:
de:21:1f:30:61:06:75:1c:ab:7f:44:c0:da:f3:25:
f2:55:40:85:00:ae:2a:49:75:2d:ab:6c:23:d1:4f:
43:89:0a:e8:90:f8:2f:cd:e4:57:26:8d:fc:ba:16:
d7:08:b9:27:61:17:76:c5:75:ba:e2:e9:f6:50:c0:
1e:71:ba:87:56:7b:39:14:26:32:75:0b:2c:2f:43:
26:45:c6:45:87:ef:b9:5b:bf:b5:69:8b:fc:89:79:
cd:1f:36:3a:f5:3a:e6:09:61:95:e3:68:e8:48:58:
a8:6f:ff:5e:2c:1e:dd:75:85:d9:c3:94:21:17:2e:
50:70:42:4d:3a:38:78:74:b6:a5:68:53:54:a4:d5:
8a:0a:d1:2f:66:8c:21:15:73:e5:10:31:5f:9a:7b:
2d:11:94:be:37:e0:d1:d0:6e:05:4d:59:13:28:ed:
f5:44:93:67:9d:5a:0c:38:fc:84:2b:9a:44:cb:4f:
f6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BD:FC:B1:D8:67:11:7F:6E:49:F8:A6:07:A9:91:95:F9:E3:A5:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47A8FA825EBE11F1A1B531FFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.132.0/23
154.89.1.0/24
Signature Algorithm: sha256WithRSAEncryption
88:48:8e:a1:40:5b:70:88:57:f5:0d:fd:d9:49:31:36:c4:6b:
46:58:35:d4:19:3c:4d:7f:24:5c:e4:17:f8:cb:40:e3:a9:ad:
77:a7:ae:3d:3c:89:b2:ac:b5:ca:9c:62:7a:e0:7c:91:ff:47:
0f:4c:ed:fa:7b:3a:0f:80:93:68:d2:31:db:2c:5c:4f:4f:cf:
dc:8e:38:68:f1:e4:9e:4d:2f:09:85:7a:93:a1:a6:d3:c7:a9:
07:ee:9b:bf:26:b8:9c:11:69:f8:99:5c:85:89:41:fa:d2:aa:
4a:0f:aa:0d:07:2e:32:48:3d:c6:2d:6f:8e:83:fc:04:be:13:
3d:29:2f:1f:27:c1:a1:b9:37:72:87:3c:b8:b4:54:6b:d8:6a:
2b:ea:ce:6d:75:38:62:bd:67:d1:39:8a:a4:a3:28:48:d5:17:
db:e7:0b:ed:ad:f9:30:90:27:dc:3f:6a:ff:5f:96:e8:3b:8b:
b9:51:f5:ae:f4:9d:2a:76:d7:51:88:48:7e:e6:ba:62:bb:ba:
36:1b:c6:92:b7:82:0b:30:5f:7c:d4:b3:89:b3:50:25:11:0f:
86:6f:86:04:59:44:e9:5a:20:8a:c6:b8:d3:20:4f:e0:30:12:
d7:0f:2d:77:37:f8:d5:b5:4e:1b:f3:81:3e:9c:d6:bc:b2:48:
98:fe:05:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:20:23 2026 by rpki-client