Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F116BEC4A0511F1B9F7F3F9CE1D38B0.roa
File: 4F116BEC4A0511F1B9F7F3F9CE1D38B0.roa (raw, json)
Hash identifier: zD5UBu+4ITs0OQJFh0kosgq8fy8KZVXQ0V8rRl9lKJA=
Subject key identifier: 6D:40:C4:42:95:74:FE:82:F5:C1:2B:48:F2:A3:09:8F:6B:7A:33:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C9C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F116BEC4A0511F1B9F7F3F9CE1D38B0.roa
Signing time: Thu 07 May 2026 11:10:09 +0000
ROA not before: Thu 07 May 2026 11:10:04 +0000
ROA not after: Fri 15 May 2026 11:10:04 +0000
asID: 149014
IP address blocks: 154.223.168.0/22 maxlen: 24
154.223.176.0/22 maxlen: 24
154.223.180.0/22 maxlen: 24
154.223.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117192 (0x1c9c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 11:10:04 2026 GMT
Not After : May 15 11:10:04 2026 GMT
Subject: CN=69fc7311-9e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b5:b2:83:37:7e:19:e6:57:3c:6e:b9:96:86:
19:ae:3c:c5:af:1c:26:9e:20:1b:c6:ed:13:6b:b4:
0e:8a:86:ac:2f:7f:67:7d:70:2e:2a:a5:23:98:0e:
96:a9:83:75:f9:68:97:cc:8d:9b:6c:a9:68:17:be:
7a:97:74:91:1f:f4:6e:86:9a:d7:ad:3f:34:c5:6e:
d8:0a:1e:61:dc:3c:d3:3d:95:3c:dd:33:be:97:6f:
a4:53:01:51:8e:03:53:4c:a6:78:a7:b0:7a:e3:5b:
76:07:33:9b:3b:e7:74:8e:a2:06:f0:b6:1c:76:c5:
a0:a2:31:bc:a1:a4:bc:fc:37:b4:6d:0f:60:6a:2b:
9d:10:fb:62:ec:43:cb:76:97:c7:52:fe:68:b0:2a:
2b:e7:4f:df:68:fd:5e:2f:e0:d7:e1:1b:70:94:32:
37:63:7e:5c:4e:9c:20:69:64:79:d9:b9:5b:0a:10:
63:cf:9d:cb:33:8e:a2:f0:2c:eb:52:39:89:11:ee:
be:50:0a:9e:c6:a1:ea:c5:a1:f5:4d:6a:44:a0:b0:
26:dc:94:c8:7c:53:2b:cc:88:4a:c8:65:bb:06:b5:
53:74:90:a7:93:43:7f:8a:19:c3:c9:82:48:06:4d:
43:01:2f:dd:e0:78:8d:2f:67:c9:92:59:bb:61:bc:
2a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:40:C4:42:95:74:FE:82:F5:C1:2B:48:F2:A3:09:8F:6B:7A:33:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F116BEC4A0511F1B9F7F3F9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.168.0/22
154.223.176.0/21
154.223.188.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:9f:5b:f8:29:3e:04:c1:32:4a:6c:37:29:2f:a1:2d:44:3e:
aa:3d:c1:af:4a:91:04:eb:0c:a2:01:6b:f1:6a:72:c1:7f:5d:
8c:6d:58:a6:2a:51:bd:7b:64:4e:07:30:c7:8a:52:03:22:90:
71:ab:d2:b2:89:5a:d7:17:67:ae:0c:30:16:cc:fb:c4:fe:ab:
74:bf:82:14:34:32:53:26:b0:9b:17:48:10:e9:b9:c6:a0:03:
fa:d0:a2:a9:e7:6d:8c:e7:a3:46:1c:4b:ce:f7:e4:84:bd:32:
52:e7:e6:60:0b:31:ad:b6:56:8b:c7:47:78:1c:4e:4a:4d:e4:
33:aa:32:c5:fa:e7:49:03:a7:e8:e9:ca:9f:0a:2e:aa:f2:82:
8c:ad:17:02:d7:e0:a6:27:40:0e:a5:20:a1:dc:f1:8d:2e:a9:
b7:8d:68:a4:ef:84:2d:ae:ad:09:21:4a:76:70:36:c6:03:60:
68:61:91:b2:1c:84:8a:63:19:4d:2e:cb:d8:50:d7:26:8d:ff:
e5:c2:cf:94:b3:8f:a0:2e:5c:a1:a6:d8:bb:c1:56:8a:80:f6:
d5:43:94:d5:0c:27:84:e9:21:8f:6d:d4:82:c9:b9:5a:7d:ad:
43:31:df:11:3c:cf:24:e8:f6:7f:d9:89:98:90:1c:e5:7d:ea:
52:52:1b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:00:13 2026 by rpki-client