Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D537BB2506611F1BBA2C9C0CE1D38B0.roa
File: 4D537BB2506611F1BBA2C9C0CE1D38B0.roa (raw, json)
Hash identifier: D5FD+vQ4JapVvyZwThP4lrTkKfFEedhzQEku7EcGD9M=
Subject key identifier: 26:8A:59:69:95:B5:8C:30:E0:08:34:70:50:8D:0B:7B:64:13:E7:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CBBE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D537BB2506611F1BBA2C9C0CE1D38B0.roa
Signing time: Fri 15 May 2026 13:59:34 +0000
ROA not before: Fri 15 May 2026 13:59:29 +0000
ROA not after: Wed 17 Jun 2026 13:59:29 +0000
asID: 153671
IP address blocks: 154.81.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117694 (0x1cbbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 13:59:29 2026 GMT
Not After : Jun 17 13:59:29 2026 GMT
Subject: CN=6a0726c6-a80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:54:5d:0a:6a:5a:bb:50:f3:31:ae:bd:85:70:
8a:07:67:33:b2:50:7a:fa:43:7d:21:2e:3f:a6:c0:
2c:81:82:2a:a6:6b:e4:fa:50:21:af:91:6e:30:ec:
fd:a0:ee:8b:d2:4f:f9:09:7f:d2:36:eb:98:7d:72:
5a:be:32:4f:b9:6d:59:87:07:e5:05:1d:c9:cc:3c:
ee:82:1a:91:fd:dd:f3:15:17:cc:01:d7:7d:af:55:
f1:b9:f1:00:94:3e:63:98:26:72:7a:4f:b7:de:e6:
c7:c1:de:80:a4:a6:53:fa:6b:1b:d9:6c:6a:a2:3f:
84:d0:26:58:f6:ad:92:c9:ce:c1:9b:47:94:db:3e:
1a:56:15:5b:71:e4:c5:a7:63:de:2f:a5:66:e4:3d:
95:20:18:48:66:b4:84:af:e6:d7:06:60:4d:c6:4c:
30:2b:d2:6c:9e:26:46:ab:f5:55:24:0e:a6:af:8d:
8f:79:47:99:78:3f:56:47:30:36:45:d7:51:2c:ed:
79:34:84:a1:43:cb:1b:24:c6:73:47:44:29:76:56:
5c:20:4c:e4:26:5c:6a:eb:e5:79:fb:e8:84:1b:56:
bc:06:89:bd:25:7c:1d:cb:30:d6:e5:fc:aa:96:17:
9a:59:4f:87:64:d1:4c:b4:44:9e:ef:c9:c7:68:35:
38:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8A:59:69:95:B5:8C:30:E0:08:34:70:50:8D:0B:7B:64:13:E7:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D537BB2506611F1BBA2C9C0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.152.0/22
Signature Algorithm: sha256WithRSAEncryption
25:5a:65:d0:6f:93:c8:15:d6:5c:9a:70:2b:52:1a:f8:9c:8e:
04:60:dc:38:54:5a:38:5b:eb:eb:b2:c5:27:78:f2:eb:f9:e9:
bd:50:53:98:f0:22:7f:b4:61:b6:94:25:59:fe:80:b3:5b:30:
43:8c:26:37:4d:01:30:4a:36:9b:df:10:a5:be:97:e3:f0:45:
50:58:fa:35:5b:70:8c:a9:09:44:d3:7f:a5:58:56:9c:ae:99:
43:ef:86:29:d2:fc:ad:c4:a8:08:48:3c:ef:29:47:11:b6:11:
63:1a:c6:12:eb:ba:f3:70:6d:11:29:bd:1d:bf:ae:67:07:04:
07:7b:5f:b1:9d:0f:8a:3d:ba:6b:3d:44:7d:d7:c4:65:77:8c:
50:9c:08:a9:e5:8c:35:a6:f1:13:3b:91:e0:ec:e1:a6:50:4e:
94:fa:70:e9:45:ec:7e:33:45:8a:28:fa:5c:40:ab:5c:13:69:
79:b8:13:f2:82:44:0a:78:eb:b8:8d:c9:aa:46:5d:21:e9:0e:
aa:04:4c:4b:de:b2:ec:82:0b:46:b7:a1:a8:c5:9a:f0:42:93:
b9:69:a3:d8:88:91:0f:22:36:d1:5f:11:1b:61:fa:d6:4f:5a:
9b:83:57:b8:c5:ee:cd:cd:dd:ce:ec:26:77:81:fd:a7:ec:ad:
b8:58:34:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:26:46 2026 by rpki-client