Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E8EA18E7CC911F1993A1919CF1D38B0.roa
File: 4E8EA18E7CC911F1993A1919CF1D38B0.roa (raw, json)
Hash identifier: KrTjXh+P3F8MmZNMKzKrYePPmpGMBqv4kcc1oTo+oNM=
Subject key identifier: C4:34:46:F7:8A:D6:E8:31:05:23:1E:5E:CC:A4:3A:F5:DA:FB:D3:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D81E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E8EA18E7CC911F1993A1919CF1D38B0.roa
Signing time: Sat 11 Jul 2026 01:39:08 +0000
ROA not before: Sat 11 Jul 2026 01:39:03 +0000
ROA not after: Tue 10 Jul 2029 01:39:03 +0000
asID: 17561
IP address blocks: 154.202.38.0/24 maxlen: 24
154.202.39.0/24 maxlen: 24
154.202.40.0/24 maxlen: 24
154.202.41.0/24 maxlen: 24
154.202.42.0/24 maxlen: 24
154.202.43.0/24 maxlen: 24
154.202.44.0/24 maxlen: 24
154.202.45.0/24 maxlen: 24
154.202.46.0/24 maxlen: 24
154.202.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 11:51:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120862 (0x1d81e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 01:39:03 2026 GMT
Not After : Jul 10 01:39:03 2029 GMT
Subject: CN=6a519ebb-d11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e5:0f:3e:4d:d7:6d:e3:60:2a:db:a7:18:46:
7e:d1:6a:df:ba:0b:e7:c1:dd:f6:f4:59:44:b1:5d:
39:c3:ae:cc:61:29:b6:b2:6a:bd:01:28:4b:b2:a4:
ff:d7:3d:c1:6b:2a:9d:39:e3:d0:35:53:52:5d:0d:
b5:cf:f3:62:b0:09:22:08:4a:0e:1d:2c:ef:55:37:
cb:81:c3:45:e8:47:52:aa:52:77:11:c6:9e:72:23:
a4:16:7b:9b:6c:dd:fd:67:c6:05:00:01:60:28:9c:
c1:5c:49:56:d6:87:ba:e9:81:73:a7:9e:64:10:7f:
33:1a:58:16:8d:d3:42:33:36:4d:12:91:bb:c4:82:
f2:ae:f2:20:f6:87:32:f4:66:a5:af:9b:d6:1f:e9:
99:e8:8c:50:75:1a:14:fc:15:eb:ec:11:0f:a1:c9:
61:45:58:7f:b6:1c:2a:44:96:5c:85:6a:e8:4c:bf:
b8:bb:58:f4:ad:4e:43:21:35:04:71:62:d8:da:b5:
8b:5a:70:fb:a5:8b:8e:69:39:b4:a7:ed:77:da:c4:
7a:cc:21:96:4a:5b:44:eb:37:56:70:b0:54:f3:5c:
f4:9f:38:dc:d1:cf:ea:20:82:aa:9e:cc:2d:25:d0:
13:da:b4:9b:1a:ae:22:ba:2f:62:0f:d4:ac:9c:58:
0e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:34:46:F7:8A:D6:E8:31:05:23:1E:5E:CC:A4:3A:F5:DA:FB:D3:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E8EA18E7CC911F1993A1919CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.38.0-154.202.47.255
Signature Algorithm: sha256WithRSAEncryption
35:71:0a:8d:3c:bf:e1:60:af:eb:27:b6:1e:67:b8:bc:eb:da:
eb:e0:eb:fb:ac:7e:be:b8:d4:0a:b9:1c:1c:f0:85:c1:53:04:
c5:2e:29:be:2f:de:26:38:26:a7:15:79:e0:1d:ac:44:36:80:
72:0d:75:84:fc:c1:3c:d6:2f:48:f5:7e:a4:3f:f4:86:b4:0c:
f9:38:dc:03:a6:52:8a:0d:df:3c:57:10:61:53:ff:14:f7:bd:
91:2e:0b:06:42:09:0a:3c:de:2a:17:83:f7:92:15:e7:cb:a1:
84:4b:bb:6a:0c:51:f7:6b:81:d6:e1:27:41:a8:07:d1:bc:48:
12:3d:9f:ce:af:30:f2:76:66:b0:2a:e0:51:c3:27:e3:15:63:
fa:9e:4d:78:b3:0e:a4:9d:4c:0a:21:40:54:13:f3:0a:a6:7b:
a8:20:71:4f:3a:00:a5:c4:83:99:fb:0a:49:5b:95:d5:44:53:
24:cd:25:db:e1:7e:4b:2a:3a:1a:b3:cd:e2:b9:8c:ba:7b:ca:
50:b9:c0:e8:25:47:ee:89:b8:e2:a4:4c:37:81:3b:3d:89:68:
e8:4e:69:33:3b:cd:62:79:e3:eb:11:ff:3c:c0:8c:3e:e2:10:
c6:da:b6:bc:3c:f6:b0:a5:31:e6:0e:02:a0:79:67:1c:3c:67:
ad:4f:d1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:46:24 2026 by rpki-client