Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C6E427854D411F183F366B9CE1D38B0.roa
File: 4C6E427854D411F183F366B9CE1D38B0.roa (raw, json)
Hash identifier: FTYr1PnTwC0Xldv+vGA+I1rvku0BQwy54gt+IXgn9Qo=
Subject key identifier: 25:EF:8E:4C:21:C5:40:2F:11:D4:66:A5:01:B2:B6:91:5D:B6:3B:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CD30
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C6E427854D411F183F366B9CE1D38B0.roa
Signing time: Thu 21 May 2026 05:17:02 +0000
ROA not before: Thu 21 May 2026 05:16:57 +0000
ROA not after: Fri 10 Jul 2026 05:16:57 +0000
asID: 25160
IP address blocks: 154.81.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118064 (0x1cd30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 05:16:57 2026 GMT
Not After : Jul 10 05:16:57 2026 GMT
Subject: CN=6a0e954e-dc9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:28:73:4b:9b:a6:d6:67:ea:de:d0:9b:70:eb:
a8:62:9d:95:84:7f:0e:29:cf:a1:46:c6:54:16:40:
e7:06:c3:d7:62:3d:4c:c3:25:65:69:4d:7e:c7:db:
81:ba:3b:6c:c2:19:5a:d5:c2:be:0c:09:a6:8f:b2:
30:17:56:bc:07:d8:d0:fb:40:fb:e7:52:11:78:38:
92:a8:f9:cc:b2:90:5e:6c:22:4d:ca:55:69:09:f3:
47:9e:c8:56:85:d8:d5:62:5f:2a:cb:c5:0d:98:5b:
cb:b4:c8:33:e6:a4:02:7e:8e:1b:c5:95:a3:48:a1:
bd:46:c8:89:53:29:44:ec:d2:a3:9d:d6:fc:65:51:
87:9b:6e:07:7e:d4:3d:de:db:a4:b3:ef:78:92:3e:
6b:f0:18:ec:b5:05:4c:ec:cf:ca:8c:2a:32:3d:05:
53:1d:e2:47:f9:93:d6:65:f6:71:79:d8:56:50:a0:
55:01:47:ac:90:d4:46:21:1f:ba:e4:5d:2e:be:62:
73:75:67:74:bc:48:e1:64:f9:5e:60:28:a2:74:c8:
5a:e9:a7:0d:71:55:04:88:f3:c3:47:56:5a:93:6d:
0b:7a:90:dd:3b:00:9f:88:e5:b6:f2:44:da:49:aa:
b3:71:24:e7:2c:f6:79:64:55:d3:13:b8:b5:85:3a:
7f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EF:8E:4C:21:C5:40:2F:11:D4:66:A5:01:B2:B6:91:5D:B6:3B:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C6E427854D411F183F366B9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.50.0/24
Signature Algorithm: sha256WithRSAEncryption
93:8e:db:17:45:ff:85:6c:36:af:e9:24:b1:64:1d:03:c4:f9:
c8:75:7e:a3:e7:9e:cf:3e:54:63:84:50:3f:a5:77:b8:c8:e8:
a8:19:41:e8:24:7f:24:65:7a:d0:79:1d:b6:31:a1:12:3b:a1:
42:d7:f9:52:19:d0:bf:ad:17:fd:da:8c:cf:e8:ff:92:25:97:
0b:1d:30:06:05:68:7f:3b:14:63:90:78:aa:ec:88:93:bd:c4:
1f:ea:a5:93:88:6b:3e:2f:75:23:1e:aa:01:2c:aa:c7:bc:e4:
2c:79:ed:e8:a1:53:96:b4:4d:4a:dc:bf:b4:db:15:79:46:ae:
e2:4c:8c:18:61:a3:1d:d3:44:aa:d2:73:5b:95:dd:b3:62:49:
9b:48:2d:12:0a:d9:1f:41:a9:70:d2:aa:41:fb:8e:a3:39:4f:
22:ab:ca:bb:4f:c8:9e:05:de:94:51:21:e3:b2:f5:2f:f0:2f:
f5:0a:f1:bd:f2:6f:32:3c:6f:14:53:68:01:a7:40:97:1d:c4:
cc:be:48:5e:47:b3:bc:e9:31:8a:f0:b7:a6:57:7e:40:b5:b6:
76:2a:fd:44:c0:cf:a1:d0:1b:31:d5:bb:19:6d:56:25:26:f9:
e3:5b:be:78:1c:c8:f4:70:6e:26:cd:a3:80:38:c0:70:28:c5:
59:80:9f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:38 2026 by rpki-client