Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F9BA4CE493D11F19659B8B8CE1D38B0.roa
File: 4F9BA4CE493D11F19659B8B8CE1D38B0.roa (raw, json)
Hash identifier: v2kBS2OXU/kPTR962ild7UYTnWxrehrGkiemnRgSup8=
Subject key identifier: F1:C2:59:3D:A9:EC:35:FC:B4:8F:CC:DC:0E:CD:8D:B9:05:32:45:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C9AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F9BA4CE493D11F19659B8B8CE1D38B0.roa
Signing time: Wed 06 May 2026 11:18:31 +0000
ROA not before: Wed 06 May 2026 11:18:26 +0000
ROA not after: Sat 13 Jun 2026 11:18:26 +0000
asID: 206675
IP address blocks: 154.92.10.0/23 maxlen: 24
154.203.0.0/23 maxlen: 24
154.203.204.0/23 maxlen: 24
154.203.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117165 (0x1c9ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 11:18:26 2026 GMT
Not After : Jun 13 11:18:26 2026 GMT
Subject: CN=69fb2386-d323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fb:25:d8:95:37:d4:7a:9c:0d:4f:6d:9b:0d:
36:d1:d2:2d:76:88:3c:bd:9e:86:0e:b1:ee:37:ea:
cc:a4:71:d6:39:be:74:1a:ec:ac:34:cc:1f:5b:7b:
2f:c7:f8:b6:54:77:33:a5:2b:88:7b:21:6a:be:e6:
a7:6b:49:f6:45:37:99:cc:93:a7:38:18:74:b8:4f:
d3:ce:72:a9:8c:f4:8d:b8:65:e8:ba:d2:1f:26:2f:
7b:83:d5:1f:db:7c:e1:79:74:80:d9:08:7d:90:10:
85:7a:16:05:57:f3:a3:39:bb:4f:cb:44:3e:c5:3e:
fe:e9:25:92:99:99:68:f0:2a:cf:8a:63:ec:4e:ea:
37:ad:44:00:c2:c7:86:77:4d:ba:7e:bb:f7:01:4f:
dc:26:6a:73:81:b4:8a:b2:5a:b5:4b:25:f2:bd:10:
67:83:99:91:d7:63:b1:25:b5:25:2f:af:48:89:c7:
6e:bc:ae:c6:3f:a2:a3:62:53:50:26:2b:09:26:24:
4f:4b:56:b1:ad:74:ad:9d:c4:74:41:1e:61:17:fd:
b2:e3:87:ce:dd:20:9d:08:96:59:b5:e1:b8:12:4f:
ca:6e:80:32:c2:ec:41:0a:aa:b0:b2:aa:a6:42:6b:
0a:40:ff:68:9d:ca:a9:8c:87:e3:2a:fc:e7:63:66:
1a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C2:59:3D:A9:EC:35:FC:B4:8F:CC:DC:0E:CD:8D:B9:05:32:45:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F9BA4CE493D11F19659B8B8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.10.0/23
154.203.0.0/23
154.203.204.0/23
154.203.244.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:63:ff:95:66:13:c0:b3:cf:9e:fb:0b:f0:e7:c9:06:7e:cd:
86:21:5b:9a:4b:cd:cd:b7:a0:74:d8:23:0c:ce:31:de:1e:32:
54:9d:93:d3:d2:06:58:2f:6e:05:a5:98:4e:83:f1:5e:84:0b:
ba:e6:fc:46:44:a3:72:16:1c:c7:9e:a7:96:f9:a5:b4:5d:e6:
56:79:d9:ef:47:54:ba:4b:ec:05:13:c3:ea:dc:1e:22:7a:f7:
67:80:77:6f:58:7e:83:cc:86:d6:ff:fe:b4:de:3f:26:6b:39:
e8:18:36:1e:eb:22:ac:4a:16:e3:98:84:11:79:11:ef:f2:ec:
19:51:ce:5b:18:60:b8:ba:be:c7:d9:06:6d:7e:32:3a:67:27:
21:09:b8:89:39:c7:d2:7c:98:10:29:14:80:8b:cc:26:24:7e:
c8:e0:26:6b:80:8c:ab:00:b8:6a:65:89:b3:8f:b8:eb:ff:7d:
54:35:3d:73:b3:10:62:d1:0a:6f:50:b8:a0:e9:80:3b:ea:6a:
d8:42:7e:18:22:84:30:37:ec:e3:81:48:41:77:3d:0e:fe:00:
ad:e2:a3:7c:78:ea:d2:d2:16:a9:a2:81:ca:c0:d0:11:21:6f:
99:0e:61:26:2c:6d:65:0c:05:f9:e0:fa:db:44:26:0d:ad:86:
9c:0e:24:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:00:22 2026 by rpki-client