Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B1489483C9F11F1B6CDD3B8CE1D38B0.roa
File: 4B1489483C9F11F1B6CDD3B8CE1D38B0.roa (raw, json)
Hash identifier: sRdu4Y921gUAp6NiK+BCU1vLC7YbT9TdNkDZTx9VsxI=
Subject key identifier: A9:FD:77:A4:E8:24:0E:3F:CD:C6:C9:BE:EC:8C:EC:4D:E9:63:E8:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C630
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B1489483C9F11F1B6CDD3B8CE1D38B0.roa
Signing time: Mon 20 Apr 2026 09:57:09 +0000
ROA not before: Mon 20 Apr 2026 09:57:03 +0000
ROA not after: Wed 27 May 2026 09:57:03 +0000
asID: 138915
IP address blocks: 154.93.124.0/24 maxlen: 24
154.93.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116272 (0x1c630)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 20 09:57:03 2026 GMT
Not After : May 27 09:57:03 2026 GMT
Subject: CN=69e5f874-3940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:53:5a:cd:25:86:d7:09:6c:fa:25:d9:0e:3e:
99:fc:0b:a4:f7:78:cd:52:d8:48:8a:a7:7e:a1:3f:
ab:0c:7a:a5:8f:00:ca:9c:ad:ff:53:84:27:c4:e2:
e0:53:6a:07:1e:25:90:e5:dd:5f:9e:0f:a9:89:2b:
d5:bc:8b:32:7c:75:91:f9:5a:dd:e6:15:bd:8a:00:
a4:28:ac:98:f4:84:36:39:03:c9:d5:53:17:cd:f4:
2a:3d:ef:94:0b:ae:e1:02:3d:97:01:bc:0f:e2:e3:
1e:05:54:97:68:98:96:72:c6:8d:34:8a:99:28:61:
10:31:87:b0:0c:ce:15:a9:49:28:70:91:ac:38:2f:
05:c1:0e:76:49:80:6c:32:61:07:1d:f0:3f:1f:47:
31:bf:86:79:29:1d:85:96:2f:2d:7c:84:6b:8c:8e:
86:5a:7e:f8:cf:00:55:bd:88:84:46:e8:3a:7f:2c:
bb:45:c0:6a:80:42:fe:80:12:d0:71:3e:59:6a:43:
19:31:34:dc:28:f5:e7:72:95:f0:c3:4a:a2:e2:85:
19:47:27:a0:06:c2:26:89:fc:a2:3d:89:d3:2d:d1:
2a:43:fe:c1:8f:76:47:7c:bb:e3:5a:0e:71:e5:52:
4d:51:38:96:7e:5a:de:86:51:25:62:ee:09:c6:b7:
a3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FD:77:A4:E8:24:0E:3F:CD:C6:C9:BE:EC:8C:EC:4D:E9:63:E8:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B1489483C9F11F1B6CDD3B8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.124.0/23
Signature Algorithm: sha256WithRSAEncryption
cd:14:68:86:d6:50:83:07:41:b0:aa:ec:ee:48:9d:39:14:0c:
c7:9e:fe:4a:9c:a6:2f:ad:d1:ba:9b:f4:f5:52:4c:55:0e:e0:
71:cf:74:8b:78:1a:6e:f2:1e:ff:97:85:b3:19:8a:57:10:e7:
03:52:17:19:25:1e:5b:0b:a1:11:3c:8e:b2:f6:7c:96:3c:0e:
ab:55:20:c0:06:1c:aa:7a:e4:8a:b8:09:77:02:47:e3:f4:00:
01:66:e2:62:b7:92:9b:bf:7a:44:fc:02:23:3e:a4:68:91:19:
1b:30:56:74:b9:93:1c:7e:fe:0c:2e:ba:51:1f:2d:ee:e5:ab:
1f:06:0f:80:86:96:d0:45:06:a3:e9:12:76:48:7a:f1:2d:a3:
d6:96:ec:25:64:34:34:82:e6:c9:dc:c1:ee:12:fa:3f:99:bf:
6a:4b:04:8e:50:e0:bc:72:19:4b:5b:68:62:0c:5c:31:b5:b8:
3a:c8:b5:fa:af:c7:6f:e8:37:a5:c9:cb:70:ba:c4:11:e7:6a:
77:be:45:e1:ef:9e:8d:e0:9d:75:d0:48:79:53:99:5c:3a:b7:
5c:93:13:9b:ef:e0:12:c8:62:de:e9:bb:40:d5:53:43:5b:3f:
5f:d2:4b:2e:80:c3:bf:92:08:80:32:4e:3f:0c:7d:f8:14:66:
f9:9b:4d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:00:41 2026 by rpki-client