Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B9D731C460D11F1A5BB63DACE1D38B0.roa
File: 4B9D731C460D11F1A5BB63DACE1D38B0.roa (raw, json)
Hash identifier: ksr/AvVrW9CHcKBDe2H5X5yM4UFoiHvfzd1aQVM+GSs=
Subject key identifier: 98:0D:51:34:23:22:4D:7C:58:8E:AC:4F:29:56:3B:C7:7E:AA:66:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C931
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B9D731C460D11F1A5BB63DACE1D38B0.roa
Signing time: Sat 02 May 2026 09:57:14 +0000
ROA not before: Sat 02 May 2026 09:57:10 +0000
ROA not after: Fri 12 Jun 2026 09:57:10 +0000
asID: 212042
IP address blocks: 154.83.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117041 (0x1c931)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 09:57:10 2026 GMT
Not After : Jun 12 09:57:10 2026 GMT
Subject: CN=69f5ca7a-8afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:3a:f8:c4:2a:35:c0:ba:27:e2:fe:4b:be:
92:12:3d:38:11:1a:29:79:0e:f0:97:b1:97:72:bd:
a3:c0:9f:dd:64:f7:2c:d5:2c:74:47:14:0d:85:1b:
3e:18:26:18:a9:ee:f4:b8:9b:db:a3:54:dd:2e:3c:
3e:fb:fc:e2:ef:54:87:d6:ce:97:33:28:ec:96:d5:
0e:e1:5a:be:5e:cd:94:bd:60:98:d3:f3:d5:4e:03:
49:20:71:52:45:61:5c:64:cd:9d:fa:d4:47:5e:be:
27:dd:cc:19:f3:3f:61:6b:6f:a5:d7:f5:f9:58:26:
43:84:cf:50:9f:12:21:43:56:a1:a3:9d:cf:01:71:
bc:24:da:4d:5d:d2:11:8e:75:7a:bb:62:3d:ae:05:
e1:b3:ca:32:53:7d:a8:cf:58:5c:53:25:b9:e2:29:
4b:72:ce:a9:91:73:5a:90:f0:de:a3:0b:16:6e:20:
3f:3c:c6:a0:a0:b3:6d:8e:34:3c:07:c1:11:3c:80:
45:37:88:aa:d6:79:6e:77:76:0a:1c:d3:7f:dc:1d:
95:62:8b:ab:fd:93:43:5e:55:73:37:06:85:34:f1:
a0:8d:fd:bd:97:b3:cd:5b:6c:55:f4:69:21:aa:ca:
19:4d:96:d1:0f:6e:55:de:2c:f7:1e:61:c9:9e:48:
5f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0D:51:34:23:22:4D:7C:58:8E:AC:4F:29:56:3B:C7:7E:AA:66:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B9D731C460D11F1A5BB63DACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.136.0/24
Signature Algorithm: sha256WithRSAEncryption
83:da:15:08:d3:62:a4:07:36:a6:12:cf:c9:9a:d6:8a:89:af:
05:97:d6:39:aa:7c:0b:d6:4f:2c:e4:6e:b5:8e:9b:32:de:d6:
37:03:c8:8c:1a:38:cf:9b:6c:58:fa:7f:9a:41:09:47:9f:75:
11:7d:50:af:2a:2f:7e:4c:97:5e:b5:a6:0f:5d:81:d0:0e:bf:
e6:70:d7:05:a3:a3:ab:13:4f:24:a8:d0:d2:32:e6:58:0d:d2:
72:22:a1:a1:b4:31:d2:b2:f6:d1:5c:2f:cb:03:7c:df:63:51:
be:ec:32:d6:d8:0b:2f:8b:89:a8:1a:6b:3f:60:2d:03:03:ab:
22:70:5a:97:34:45:1a:94:9b:e9:48:36:4e:0b:87:df:fe:8b:
8f:90:ec:a1:8d:bc:91:a0:09:96:5c:d5:a2:f6:f9:ac:0b:37:
51:e9:39:02:20:1d:b6:a3:80:ca:95:24:34:59:f3:45:96:f7:
8c:26:66:62:98:f3:c5:71:5c:de:2b:18:60:9a:71:5e:46:4a:
cf:b6:08:48:4a:f9:a3:cc:7c:a4:ef:68:08:1f:1f:c1:df:28:
a0:a5:c9:09:49:15:1f:c7:4f:b8:b6:af:c3:fc:6d:8b:c6:54:
37:a8:18:8f:33:51:2f:dd:ba:58:15:06:34:36:39:1b:08:0e:
59:0b:80:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:19 2026 by rpki-client