Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49EC1AC2550911F1BBEA70FACE1D38B0.roa
File: 49EC1AC2550911F1BBEA70FACE1D38B0.roa (raw, json)
Hash identifier: 9LcHoi0BGSB4tWqyergELtVmmP29GluGz9UvkOCqKK8=
Subject key identifier: 89:21:A9:AE:97:14:6B:52:C0:9D:3E:93:FA:0B:C5:E6:B5:A9:1D:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CD47
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49EC1AC2550911F1BBEA70FACE1D38B0.roa
Signing time: Thu 21 May 2026 11:36:21 +0000
ROA not before: Thu 21 May 2026 11:36:17 +0000
ROA not after: Wed 19 Aug 2026 11:36:17 +0000
asID: 139923
IP address blocks: 154.210.16.0/20 maxlen: 24
154.213.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118087 (0x1cd47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 11:36:17 2026 GMT
Not After : Aug 19 11:36:17 2026 GMT
Subject: CN=6a0eee35-dcf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:0b:6e:1b:2a:f5:f1:1b:fc:a5:29:82:36:
45:19:0f:08:e8:5a:ce:b3:fe:33:ef:77:ae:f1:ee:
f7:75:28:7b:7b:df:10:e6:91:2d:95:11:6c:ad:e1:
fd:bb:50:76:f4:9f:aa:0d:27:53:65:eb:33:e3:53:
cd:3d:ad:98:3a:e9:79:45:f6:7c:b1:e4:1c:d7:55:
6d:fe:1f:b2:7d:b3:da:00:f1:f5:e6:02:74:7a:84:
45:e5:ba:40:3d:ee:df:3c:3e:86:52:de:d4:11:36:
79:c9:27:1d:f1:a9:c7:d4:a3:af:c4:a1:41:8e:c7:
11:1c:53:45:b9:72:25:00:f4:ba:93:b8:5e:50:02:
26:38:d4:f2:b0:1b:c4:18:02:66:f3:80:7e:4f:4c:
1b:a7:40:e4:18:09:ce:79:d6:47:68:07:cb:a5:90:
32:cf:ed:81:6a:87:11:20:fe:aa:1c:9f:20:1c:2e:
54:5b:6b:c0:87:95:52:d6:a4:57:cc:3d:82:14:9c:
ac:0a:a6:90:39:b5:da:6f:06:4e:7b:71:37:3d:79:
27:4f:e4:9e:a3:59:17:32:e8:84:c3:41:3d:8b:82:
46:f5:49:70:0c:70:a4:ba:cc:ce:7e:60:3a:70:21:
1e:c6:56:2b:bb:40:94:ee:2c:08:96:0c:b1:d7:8f:
f3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:21:A9:AE:97:14:6B:52:C0:9D:3E:93:FA:0B:C5:E6:B5:A9:1D:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49EC1AC2550911F1BBEA70FACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.16.0/20
154.213.64.0/20
Signature Algorithm: sha256WithRSAEncryption
90:2d:0b:a5:f6:36:72:d1:27:75:2e:27:7d:bd:58:94:1a:bf:
9c:3a:75:b9:a8:28:15:25:5f:2b:fd:f2:34:f5:5f:ac:2f:3f:
b3:b6:f1:26:1f:e6:63:e2:41:d0:63:42:f0:86:9d:c3:57:3f:
a9:7a:f5:a6:98:0a:5b:a4:97:2c:46:eb:7b:ad:3f:04:e7:f6:
09:16:a1:37:98:bb:d9:04:e2:9c:ea:da:36:14:0b:02:9e:1f:
22:c3:89:d8:86:d5:bc:24:65:7c:aa:8f:e1:0a:0f:a5:9f:f7:
8a:35:ad:76:10:95:db:0f:51:50:86:5c:63:32:1c:87:ab:73:
df:07:c8:6c:e9:5a:ff:01:30:55:fd:e7:35:eb:f5:23:f1:54:
84:b3:eb:e8:0d:d9:06:78:db:41:92:71:73:a8:d6:d2:8f:d3:
9e:4e:4e:7a:30:1e:aa:d8:fe:5c:b7:c0:76:62:e3:4a:46:bb:
7b:8d:ad:9c:b8:f0:ba:22:0f:04:9c:c4:7b:b1:91:9c:e8:e7:
7c:ae:a3:0d:80:4a:3d:0e:1f:cc:13:aa:2b:9f:0c:df:0a:15:
72:f2:da:67:69:bb:7c:9d:b2:90:cb:3a:4a:95:5d:62:11:72:
ca:5f:56:4a:e1:ea:a7:e3:ba:b4:28:ea:8d:bd:ec:e2:bb:ed:
0f:6e:9b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:54 2026 by rpki-client