Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/487D1BDA64F611F1BB49C8D0CE1D38B0.roa
File: 487D1BDA64F611F1BB49C8D0CE1D38B0.roa (raw, json)
Hash identifier: 3DqLnqKbVhWXNNYUKPi1RqUzLBlD+DAJfdUqGC/0UpY=
Subject key identifier: B3:30:DC:7B:87:50:A5:75:FB:40:FC:BE:D9:E5:A3:7D:72:0B:E1:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D292
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/487D1BDA64F611F1BB49C8D0CE1D38B0.roa
Signing time: Wed 10 Jun 2026 18:00:37 +0000
ROA not before: Wed 10 Jun 2026 18:00:32 +0000
ROA not after: Fri 19 Jun 2026 18:00:32 +0000
asID: 17497
IP address blocks: 154.222.148.0/22 maxlen: 24
154.222.148.0/24 maxlen: 24
154.222.149.0/24 maxlen: 24
154.222.150.0/24 maxlen: 24
154.222.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119442 (0x1d292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 10 18:00:32 2026 GMT
Not After : Jun 19 18:00:32 2026 GMT
Subject: CN=6a29a645-8364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:9f:ae:3f:1f:7a:71:29:3b:d6:bb:1d:be:
0d:94:07:b8:1c:dc:7d:0e:c6:0a:fb:23:d5:3d:fe:
0e:f5:94:51:5b:e8:ff:27:04:70:a5:24:ad:25:b9:
72:df:cd:97:1d:04:e8:d1:c9:08:bb:9f:c9:8a:b9:
65:f6:35:c9:4d:3e:08:00:86:41:07:53:8d:13:c4:
cd:e1:eb:8f:49:26:73:ec:25:ba:74:40:8b:8b:07:
89:0f:ad:c1:f6:ef:4b:bd:4a:d9:5b:2c:9c:14:22:
55:41:23:c5:cc:74:4f:38:c4:e8:f9:07:3d:f9:89:
59:5d:aa:00:f2:e9:27:21:17:50:22:3b:0d:16:4b:
eb:45:f8:ab:c9:ea:b4:bc:d3:bd:56:4b:7b:49:ab:
10:e9:35:6a:84:31:ac:1f:58:8c:9c:69:af:92:16:
45:a4:89:60:94:75:2d:11:c5:d2:f7:0d:f4:e1:3c:
c5:4d:3d:36:56:78:81:2b:cf:be:48:a6:e1:f4:9a:
10:e2:af:d3:38:0b:64:03:45:7f:f7:1f:7c:de:8d:
6a:fa:a5:23:b3:04:06:99:4e:af:05:3b:49:8e:3d:
91:4b:93:e6:92:15:9e:86:98:1f:fa:f2:d5:06:dd:
6d:78:ee:3d:a3:bc:90:67:31:b4:78:39:72:45:12:
c4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:30:DC:7B:87:50:A5:75:FB:40:FC:BE:D9:E5:A3:7D:72:0B:E1:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/487D1BDA64F611F1BB49C8D0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.148.0/22
Signature Algorithm: sha256WithRSAEncryption
87:6e:d6:3d:8d:45:5d:7d:b6:a5:b6:bf:bd:a1:e4:f1:00:6a:
5b:85:5c:48:33:ed:46:f4:1b:32:fd:69:7b:58:b0:59:30:d3:
7d:d2:4a:c5:99:5f:8c:db:e3:68:f5:ea:0c:13:ec:26:a5:66:
ec:8c:8f:9d:81:39:88:b0:94:da:ee:ac:c2:a1:57:34:af:b9:
b9:c0:ed:1e:4e:ac:cd:11:d5:66:07:3c:00:c2:00:90:08:1e:
ea:e5:09:45:05:d2:4b:ac:e1:ae:ff:85:92:ff:66:6f:34:13:
0f:b6:0f:c8:5a:2c:d2:e4:98:1c:d9:a2:91:d5:f3:f4:64:81:
3d:5f:0e:b3:2b:5d:e9:45:fd:81:4c:71:a1:cd:b3:ea:6f:37:
c4:48:2d:01:f8:3c:95:29:ec:7b:e4:cb:22:19:a3:3d:38:94:
06:87:17:e5:1a:88:ff:92:a1:c1:fc:d0:46:a8:a0:20:44:00:
d4:ff:5a:7f:bc:4a:95:a2:98:38:c0:08:c3:a4:e6:58:42:fa:
b7:08:84:65:65:17:b1:ca:3c:27:a6:3c:f4:b0:82:0b:b3:6b:
b0:35:cd:87:79:67:4f:99:1f:b6:99:b7:19:66:ee:b7:95:7f:
6d:c1:6e:9a:44:ac:11:b4:bf:83:59:bf:cb:27:bd:10:78:b0:
7e:d0:26:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 11:55:37 2026 by rpki-client