Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EF1AA9473F111F182458EA1CE1D38B0.roa
File: 4EF1AA9473F111F182458EA1CE1D38B0.roa (raw, json)
Hash identifier: OXJW8PlFwGOOSYUghjkCZ21zmi+yg6vHmbwQk7iOlqA=
Subject key identifier: 0B:D2:E9:B2:9A:1E:45:F1:89:A0:76:7B:55:51:8D:DB:E1:EF:C1:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D614
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EF1AA9473F111F182458EA1CE1D38B0.roa
Signing time: Mon 29 Jun 2026 19:32:48 +0000
ROA not before: Mon 29 Jun 2026 19:32:43 +0000
ROA not after: Thu 30 Jul 2026 19:32:43 +0000
asID: 9304
IP address blocks: 154.92.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120340 (0x1d614)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 29 19:32:43 2026 GMT
Not After : Jul 30 19:32:43 2026 GMT
Subject: CN=6a42c860-1008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b5:df:d9:c8:df:51:2e:6b:6f:ba:5d:4e:e4:
1f:8e:01:4e:ea:59:a8:28:a2:94:49:04:93:4f:87:
1c:d1:33:c4:a5:79:3a:6f:89:c5:8c:38:3d:2d:f7:
da:d7:d4:b6:0f:2a:d3:3e:b0:3a:91:20:9d:17:7c:
03:1b:81:bf:ac:27:ae:88:54:ee:1a:35:2a:15:e6:
41:f2:34:22:95:c3:ab:ed:88:4a:ea:6f:9a:58:06:
6e:33:9d:6b:f1:04:17:1e:93:32:1a:7b:06:41:c7:
c0:20:05:b0:58:e9:ac:ab:7b:2a:07:ad:aa:7e:81:
b6:91:0f:74:2f:f0:a8:7b:e1:eb:58:69:11:c7:12:
7c:24:cb:74:7f:00:91:74:27:5f:19:e4:fc:52:16:
d1:d1:54:a2:0f:94:a8:05:89:9b:79:8b:b4:b4:3e:
fe:f6:e7:0f:81:c5:b8:93:5a:06:d3:86:76:3a:6f:
20:ca:b3:c2:c3:5b:9c:de:29:da:c5:92:aa:60:ff:
11:99:a8:5a:86:b8:1a:d5:c6:f8:31:8c:cb:c5:e7:
52:c0:48:f2:5c:9e:a6:33:ba:95:ea:9e:c2:10:24:
5a:dd:4c:24:01:3d:fd:3f:8a:53:2e:13:09:2d:27:
3a:47:f9:81:cb:8a:b4:a1:2d:a9:5f:2a:88:9e:fb:
be:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D2:E9:B2:9A:1E:45:F1:89:A0:76:7B:55:51:8D:DB:E1:EF:C1:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EF1AA9473F111F182458EA1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.216.0/21
Signature Algorithm: sha256WithRSAEncryption
a6:5d:7f:c2:c3:98:1c:fb:f8:24:da:79:39:40:50:f1:7a:e3:
f5:bb:a1:c2:eb:31:65:cb:a3:41:45:f5:0f:93:d1:31:ad:85:
1c:fd:db:6b:74:65:a1:c0:07:af:3b:18:1a:2c:fb:fa:e6:b3:
0e:56:6f:8e:2a:9c:6c:53:c5:2a:2c:c8:78:d6:14:08:b9:7c:
73:b2:4a:29:74:f2:72:06:ae:3a:a2:af:fd:38:37:2c:9a:c3:
07:fa:f7:6f:f6:66:91:78:04:ed:ea:40:78:2a:1d:df:54:6e:
6f:c3:1c:bd:d1:59:f8:28:95:33:84:0e:60:e2:30:d5:44:c0:
93:1e:d3:5b:44:a7:a0:74:7a:fe:ce:d2:87:ec:97:ab:59:5b:
bd:2a:ae:78:ac:ca:66:4b:af:e2:46:80:8f:c3:ba:8a:18:13:
ac:bd:52:20:0c:cd:49:eb:d1:e7:b4:ba:60:64:b0:ec:5c:90:
65:a6:c5:4a:44:49:f0:84:cc:c6:3d:08:4c:8e:32:f8:4c:28:
74:4b:78:f6:68:5b:df:d9:c2:21:97:f3:da:6b:b6:2d:ba:9c:
0e:29:c0:5c:44:37:95:87:24:e0:e2:2b:5b:76:11:94:cf:5f:
18:7e:74:15:b0:ca:a5:18:33:a4:12:1c:50:36:14:ad:43:49:
da:26:1d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:20 2026 by rpki-client