Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A9F01B67AAA11F1934B6809CF1D38B0.roa
File: 4A9F01B67AAA11F1934B6809CF1D38B0.roa (raw, json)
Hash identifier: QsZykJoGECaRNTkREkCfsPVH+PcFn8nj+CE7Iuwfzvg=
Subject key identifier: E1:82:7A:E7:AD:05:EC:AE:23:F0:47:B3:32:66:93:91:07:17:F6:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D78E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A9F01B67AAA11F1934B6809CF1D38B0.roa
Signing time: Wed 08 Jul 2026 08:52:04 +0000
ROA not before: Wed 08 Jul 2026 08:52:00 +0000
ROA not after: Thu 30 Jul 2026 08:52:00 +0000
asID: 402506
IP address blocks: 154.201.72.0/21 maxlen: 24
154.201.88.0/22 maxlen: 24
154.201.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120718 (0x1d78e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 8 08:52:00 2026 GMT
Not After : Jul 30 08:52:00 2026 GMT
Subject: CN=6a4e0fb4-64fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d9:c1:43:83:65:b5:a0:9b:b4:e0:48:f3:9c:
01:0d:25:65:e5:56:9e:7d:54:be:23:b1:32:7e:16:
60:fe:de:3a:bc:da:8b:7a:74:89:ab:2e:7a:e3:b9:
7a:6f:64:59:52:34:c3:48:07:a7:39:86:e5:af:38:
a6:3b:10:2f:df:4e:f4:dc:07:92:6f:b5:b8:8d:a0:
90:6b:a2:d7:c8:ad:49:94:ff:16:23:bb:f4:24:51:
cd:f7:3f:bc:1f:7f:69:28:33:cb:43:e1:20:20:56:
ff:77:94:c7:ed:c9:af:5a:b0:77:09:fd:54:24:d8:
c5:cd:79:e6:29:38:47:5b:10:38:6c:50:2f:7e:01:
36:94:28:ed:07:2c:2f:32:b4:22:11:c1:c5:ef:86:
9b:0d:d8:be:1b:3f:38:a3:6d:8f:33:10:2e:1e:a3:
f8:3f:2c:4b:2b:35:86:da:46:4c:89:60:81:e4:d5:
77:33:23:ff:0d:16:35:25:11:1e:a8:21:e7:80:a6:
02:d3:b0:e5:a9:85:f7:e2:64:2c:7a:18:6b:32:30:
29:c9:cb:43:af:23:d8:ec:8a:ff:93:6d:28:7d:02:
e7:25:e3:db:ba:77:40:a1:12:93:da:f6:ba:14:b8:
74:46:7d:ed:24:6f:f6:80:22:ce:aa:af:c9:f7:4c:
24:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:82:7A:E7:AD:05:EC:AE:23:F0:47:B3:32:66:93:91:07:17:F6:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A9F01B67AAA11F1934B6809CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.72.0/21
154.201.88.0-154.201.93.255
Signature Algorithm: sha256WithRSAEncryption
a8:67:d4:84:d3:d4:43:6d:cc:58:78:ce:f6:2b:b2:20:0d:dc:
30:85:e4:40:82:16:1d:33:fd:f9:c4:07:3b:01:cc:9a:24:23:
0a:fe:8a:3d:de:bf:f8:cf:f9:fa:0b:cf:92:56:55:e2:f0:a6:
ee:9c:0b:d6:14:72:10:8c:87:aa:d7:72:f4:97:67:13:20:6c:
75:3b:71:c7:88:23:d9:e7:c1:1b:02:35:cb:a5:18:e6:fb:07:
8a:8c:75:af:1c:fc:05:ab:78:b4:ea:e0:56:81:95:82:b7:09:
1c:d0:f5:40:60:c0:2b:b6:48:fd:80:8f:27:0e:99:cd:3e:fe:
b7:ec:27:0d:87:af:7a:a7:52:60:a7:d8:75:cb:2f:2f:da:ee:
06:c7:ab:84:75:b9:e8:94:56:d9:4f:13:9a:2e:61:07:f6:72:
f9:b7:d1:7a:7f:8f:8a:fb:97:b9:d4:64:ad:4a:27:38:45:83:
3c:00:e5:0a:36:ab:d4:c0:e8:dd:aa:a5:b6:b8:4b:65:e5:a9:
9f:09:ba:25:f5:85:18:8c:ed:75:c5:8d:6b:e4:ef:92:d1:6f:
79:a7:fb:70:2a:50:24:f2:30:55:06:2f:b7:b3:90:1e:f4:ee:
94:86:89:90:1e:c4:34:b5:58:2b:1d:34:54:7b:71:30:bd:f3:
94:27:e3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:23 2026 by rpki-client