Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D99379669EE11F1A86F6CFBCE1D38B0.roa
File: 4D99379669EE11F1A86F6CFBCE1D38B0.roa (raw, json)
Hash identifier: LYwR0Zbjxmvn/WWtMECcHhWFwqw9cuO/uo/1qn7cGZo=
Subject key identifier: DE:12:C8:9D:0E:73:95:10:FF:4C:48:43:ED:2C:B5:D4:3A:1F:33:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D39A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D99379669EE11F1A86F6CFBCE1D38B0.roa
Signing time: Wed 17 Jun 2026 01:46:05 +0000
ROA not before: Wed 17 Jun 2026 01:45:59 +0000
ROA not after: Fri 18 Jun 2027 01:45:59 +0000
asID: 219433
IP address blocks: 154.94.33.0/24 maxlen: 24
154.193.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119706 (0x1d39a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 17 01:45:59 2026 GMT
Not After : Jun 18 01:45:59 2027 GMT
Subject: CN=6a31fc5d-c99b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:94:f7:7e:71:57:91:26:b5:60:c5:a0:b3:f2:
0b:53:33:5e:ba:cf:a5:1e:42:71:16:13:f6:02:47:
e9:be:a2:ac:86:f9:15:c7:b3:06:24:a1:28:7f:d3:
76:c0:cc:81:ab:9e:88:8f:cc:db:7c:fc:e6:c7:d9:
5a:1d:e6:f8:3e:bd:2b:de:d6:3d:eb:74:71:5a:84:
bf:54:51:80:49:4c:fb:1c:8a:03:e7:50:7c:e6:03:
5a:4b:3e:b2:46:8f:f5:0a:97:c2:62:48:16:87:52:
f0:e3:d3:24:aa:09:4a:08:63:d7:58:89:b6:85:90:
f8:02:7a:d4:fd:d0:30:a9:e4:92:d1:29:9e:66:c5:
25:a9:ff:65:cc:5d:32:a3:9d:71:ba:7f:4a:81:f7:
bc:8b:ef:ab:41:2d:a5:a0:98:25:40:39:dd:ea:a8:
5e:b8:6c:4b:c5:a8:62:bb:75:e1:6b:db:3b:72:a7:
02:8e:0e:22:be:57:f8:cb:9d:a2:47:72:30:c6:90:
d6:d4:17:09:aa:6e:e5:1d:1d:2b:c7:85:45:01:96:
48:50:97:ef:0b:06:7f:44:e5:e1:16:04:60:7d:18:
16:ff:d8:43:62:87:b1:9c:b8:2b:e6:2a:fb:2e:52:
7f:84:83:45:bb:04:b2:96:2c:6b:bd:a8:af:8f:f5:
16:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:12:C8:9D:0E:73:95:10:FF:4C:48:43:ED:2C:B5:D4:3A:1F:33:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D99379669EE11F1A86F6CFBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.33.0/24
154.193.4.0/24
Signature Algorithm: sha256WithRSAEncryption
18:f0:12:47:76:f5:02:35:08:e7:96:ee:d6:63:9e:d1:d3:0a:
5a:8f:cf:8d:1f:35:33:b6:43:7f:33:84:9f:0a:52:70:63:9a:
3d:91:43:fb:65:ed:d7:dd:7e:fd:9e:29:cd:c7:15:52:a5:bd:
a3:2d:b7:88:ba:ce:d7:56:64:1b:a9:75:23:5c:d8:a4:19:e1:
80:a4:69:29:4a:2c:63:cf:2b:2f:6d:c3:0a:17:85:63:14:88:
34:94:21:48:c5:45:89:f7:a4:33:51:f1:e2:b6:0d:eb:53:1f:
59:dd:0f:c8:e3:3d:dc:42:8f:76:45:cc:6e:e8:b8:df:ee:a2:
54:2b:43:92:65:44:ea:3c:de:32:db:4a:4d:ee:2c:8a:4b:8a:
ae:82:2d:03:44:b4:f9:99:96:02:87:ca:51:c1:d6:57:13:20:
65:07:d0:8e:ad:aa:26:98:b6:63:a3:c1:e3:b2:c5:27:85:82:
99:b1:b1:0c:78:ed:be:3c:e3:13:b9:e5:34:25:f2:04:c0:66:
d1:d9:f9:cb:52:40:a6:d5:58:43:dc:b3:ec:57:d5:b8:4f:86:
6a:40:9b:33:5b:c2:5d:9b:8c:a5:4c:2d:38:0a:80:42:59:40:
81:c6:12:37:d1:44:a3:b6:47:1f:68:5f:e4:68:83:71:67:ce:
a9:62:59:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:31 2026 by rpki-client