Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/492146F4493C11F18DB6BBB2CE1D38B0.roa
File: 492146F4493C11F18DB6BBB2CE1D38B0.roa (raw, json)
Hash identifier: 9cEEA3XYKuMFjX03pa/YwUMm2d6wcUsllry/xPGEUSs=
Subject key identifier: 68:59:44:E0:CB:75:95:AF:A2:1F:CB:1C:DB:50:AF:1F:F9:91:FB:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C9A9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/492146F4493C11F18DB6BBB2CE1D38B0.roa
Signing time: Wed 06 May 2026 11:11:10 +0000
ROA not before: Wed 06 May 2026 11:11:06 +0000
ROA not after: Sat 13 Jun 2026 11:11:06 +0000
asID: 137897
IP address blocks: 154.92.10.0/23 maxlen: 24
154.203.0.0/23 maxlen: 24
154.203.204.0/23 maxlen: 24
154.203.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117161 (0x1c9a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 11:11:06 2026 GMT
Not After : Jun 13 11:11:06 2026 GMT
Subject: CN=69fb21ce-30bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1f:28:bc:d0:de:92:7c:b6:8a:7d:f9:1d:67:
68:91:43:fa:e2:2b:74:8b:d1:e5:8c:e3:4d:ed:2a:
7a:00:1d:4a:7e:48:46:68:51:89:05:6d:34:36:52:
a9:87:4e:2d:26:d0:97:c6:0b:ad:4f:9a:f1:fc:b5:
7e:a0:6e:28:f4:ed:ca:e8:a2:2d:86:36:6a:16:9a:
32:07:79:73:15:8c:75:42:76:e1:04:a6:1c:60:5b:
b4:fc:32:85:e8:f4:f3:c1:87:50:dc:85:81:11:de:
6b:08:81:cc:4b:86:6b:f9:5c:e9:f0:44:df:12:7f:
36:2f:af:01:c5:71:b8:74:92:ec:75:75:e7:a2:36:
fb:07:a0:30:af:75:84:60:ba:77:ba:1e:b7:ac:2c:
37:6c:28:8b:9c:9e:1e:9d:47:b7:fa:ff:3c:7d:63:
8d:02:5a:c8:83:e6:72:e1:d3:54:79:55:33:89:6a:
e0:7c:f3:ef:44:f0:cf:71:5d:ec:fa:31:d9:21:ba:
89:b2:be:85:6d:0c:11:8d:29:fa:49:04:64:0b:db:
e9:7a:fc:06:a1:19:ea:83:c6:d3:57:5a:9e:0a:4c:
da:e8:e8:dc:1a:d9:93:1f:f3:b5:5d:68:e4:a4:e8:
a1:60:55:fd:97:24:01:8e:53:a3:e0:42:26:dd:24:
e2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:59:44:E0:CB:75:95:AF:A2:1F:CB:1C:DB:50:AF:1F:F9:91:FB:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/492146F4493C11F18DB6BBB2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.10.0/23
154.203.0.0/23
154.203.204.0/23
154.203.244.0/23
Signature Algorithm: sha256WithRSAEncryption
15:7d:8a:53:3d:62:75:70:63:41:c9:f4:12:d9:00:8f:26:fe:
7a:3a:1d:e3:c6:f2:9d:30:f6:48:b9:4e:81:78:75:4a:d2:b7:
09:d3:ca:85:dd:f4:27:29:13:a0:a2:ca:d1:3b:e3:89:33:60:
37:e7:ba:74:48:f4:55:43:bf:6e:63:7e:7c:3c:eb:99:da:37:
35:a0:3d:b2:37:1b:82:1e:fc:42:6e:b4:8e:c5:27:50:04:6b:
0d:b8:0b:11:96:19:c0:e3:a4:0a:71:d4:72:47:46:fc:1d:c6:
34:6e:c2:c2:6b:c9:f4:0c:b5:5f:a0:31:a5:79:12:99:4a:e6:
3b:9d:9c:bc:7c:8f:d6:64:59:f7:3b:84:9a:d1:7a:52:9b:e0:
aa:b1:2f:a5:cb:5c:c6:f7:fc:56:4d:4d:ba:20:a8:59:d1:c6:
89:f7:36:9d:d1:07:67:18:2d:b6:83:6b:bb:03:21:43:18:80:
a1:62:6b:aa:a4:39:38:fb:89:83:e0:80:f8:77:94:5a:cd:c7:
e2:d2:f6:96:94:68:78:8b:73:4e:2b:21:76:56:79:2d:12:2f:
81:42:29:84:56:23:d8:7c:be:42:af:14:8b:31:b1:a0:01:50:
e6:ce:36:dc:c8:b8:70:a7:c3:7e:f3:b7:46:35:cc:6c:ac:50:
34:1a:d2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:00:10 2026 by rpki-client