Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B3B0A0A58EC11F1A1E955B0CE1D38B0.roa
File: 4B3B0A0A58EC11F1A1E955B0CE1D38B0.roa (raw, json)
Hash identifier: /GfRoWUaah7TE4LrYAsbwfdPWhJqXHzMYszXW8VfeGA=
Subject key identifier: E9:29:14:C9:C3:9B:78:15:31:DC:8B:5B:09:35:29:B6:56:F9:DC:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CFAD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B3B0A0A58EC11F1A1E955B0CE1D38B0.roa
Signing time: Tue 26 May 2026 10:18:53 +0000
ROA not before: Tue 26 May 2026 10:18:48 +0000
ROA not after: Wed 07 Oct 2026 10:18:48 +0000
asID: 142132
IP address blocks: 154.196.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118701 (0x1cfad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 26 10:18:48 2026 GMT
Not After : Oct 7 10:18:48 2026 GMT
Subject: CN=6a15738c-344d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fe:2d:bd:08:0b:ff:a6:ec:86:4b:49:e5:1f:
26:45:53:a7:5d:7f:9d:94:2c:c6:e4:e7:98:f9:25:
97:38:64:0e:07:b1:04:a4:7e:d7:51:1f:f9:f6:25:
54:e0:bc:4b:a8:21:74:9c:b3:17:16:54:09:6f:48:
e5:75:c9:01:54:fb:8a:8c:9c:f5:12:d0:84:2b:8d:
eb:15:e5:c4:1e:c0:64:7c:34:1a:51:e4:c6:83:6f:
07:1c:bf:ce:41:3f:4b:05:34:52:d4:f3:f0:31:3b:
05:0b:8e:ff:66:0b:14:c5:8f:eb:01:24:b7:b0:a8:
3d:ae:02:51:12:20:f6:9e:43:f8:25:50:ba:84:e6:
52:e7:f9:69:08:d8:1a:8c:4b:ab:70:c9:77:51:00:
97:85:e6:09:64:2f:f0:51:d1:2d:47:01:50:3a:56:
9f:5d:d3:48:d0:ba:ea:2d:6f:95:6a:74:be:a6:18:
ef:f0:18:4d:0c:f7:b7:25:16:ca:bd:ea:7c:bb:9d:
db:aa:fb:a9:de:22:2f:fe:93:1a:2f:e8:c6:00:b8:
41:7c:47:eb:7f:74:32:75:be:b3:72:90:ac:00:46:
25:2f:05:1a:f8:47:23:af:14:1d:d0:03:ab:3b:b0:
35:16:ba:d8:2e:5e:51:17:0f:f6:b8:56:90:56:f9:
73:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:29:14:C9:C3:9B:78:15:31:DC:8B:5B:09:35:29:B6:56:F9:DC:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B3B0A0A58EC11F1A1E955B0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.138.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:b0:c9:1f:33:b8:85:73:56:9f:c7:5c:0e:8e:06:32:a5:e9:
40:8c:a2:1a:61:ca:d1:6b:ee:ad:5b:b3:83:61:84:20:53:61:
4d:4c:1c:97:23:58:bf:97:86:1a:6d:73:60:11:8d:d4:e3:be:
37:c2:17:7a:58:68:db:19:59:7f:7f:7a:21:c4:ce:6a:89:a9:
3b:00:65:86:57:77:6b:55:74:6a:7b:1c:7c:1c:6e:fd:e6:0c:
72:75:c9:62:01:65:68:a5:33:d3:56:78:93:dd:23:c7:44:7e:
be:4c:e5:97:e0:fe:41:c4:fc:2e:bb:cb:a9:fd:67:9a:d5:37:
22:60:44:64:6a:3a:74:69:74:ad:e6:1b:11:76:79:c0:37:38:
1f:96:a4:5a:c3:35:76:06:dd:da:eb:e0:65:5b:44:80:ca:2f:
9c:ef:39:88:43:48:d0:ea:29:24:98:00:f6:30:82:a0:5d:e8:
11:03:f1:6d:9a:f5:1b:50:93:5b:ef:b2:94:c3:79:13:54:94:
b5:da:86:2f:78:30:76:57:a3:62:17:fe:af:56:18:44:86:6b:
c0:7a:54:e7:73:64:d3:3e:dc:d9:b1:ba:d9:0f:e4:1d:8b:f0:
ad:83:94:1e:ae:ac:8b:ae:0e:17:47:51:ed:0f:fc:9d:02:18:
8f:4a:82:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:20:24 2026 by rpki-client