Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FAD4A2E7D9211F1BFB6C7E1CE1D38B0.roa
File: 4FAD4A2E7D9211F1BFB6C7E1CE1D38B0.roa (raw, json)
Hash identifier: zTNSzwBehMm5iwci+7d8r1Z5hjhuWuFnotg9R3V0CBI=
Subject key identifier: 94:3A:76:5C:DA:51:50:E0:A8:EE:3A:00:62:B6:32:42:76:87:13:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D867
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FAD4A2E7D9211F1BFB6C7E1CE1D38B0.roa
Signing time: Sun 12 Jul 2026 01:37:58 +0000
ROA not before: Sun 12 Jul 2026 01:37:54 +0000
ROA not after: Tue 10 Jul 2029 01:37:54 +0000
asID: 17561
IP address blocks: 154.202.44.0/24 maxlen: 24
154.202.45.0/24 maxlen: 24
154.202.46.0/24 maxlen: 24
154.202.47.0/24 maxlen: 24
154.202.48.0/24 maxlen: 24
154.202.49.0/24 maxlen: 24
154.202.50.0/24 maxlen: 24
154.202.51.0/24 maxlen: 24
154.202.52.0/24 maxlen: 24
154.202.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120935 (0x1d867)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 12 01:37:54 2026 GMT
Not After : Jul 10 01:37:54 2029 GMT
Subject: CN=6a52eff6-9932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:8b:ee:45:77:ef:aa:3c:01:a2:80:ec:69:
0a:a0:c9:8b:5b:8b:24:ea:d4:2a:56:e3:f4:50:71:
d0:7d:bf:dc:63:68:39:ee:72:7a:33:eb:08:54:29:
2a:d8:1f:96:46:9d:b7:9d:2c:62:7d:91:2b:5f:e8:
63:50:2f:ea:14:a1:ec:28:62:df:3a:05:90:59:61:
72:5d:91:84:c2:6a:59:76:14:fd:f7:7c:42:a0:e8:
2e:12:94:d6:de:b8:f4:22:84:ba:84:0b:a7:36:ea:
b6:35:b3:80:0a:d9:f2:1d:ff:41:97:ea:72:eb:0b:
7e:84:b3:c8:a0:24:6c:6f:4a:43:ae:73:f6:e3:1f:
56:19:38:42:7a:f3:f9:de:d7:a8:1c:0a:78:f5:cb:
98:6c:ed:f6:df:92:a6:30:23:08:f9:fe:10:02:26:
e4:4c:2b:cf:3c:60:1b:88:78:6b:e3:f1:5d:1e:70:
0f:e6:01:16:aa:18:4e:5e:36:4a:a5:88:6e:b6:5a:
36:b8:f8:0e:a1:22:7e:e5:f6:b0:38:5c:d1:2a:96:
15:9c:58:f6:c6:e3:78:52:c6:65:37:a3:4f:cb:55:
12:e1:c8:ea:fb:16:00:e1:b5:56:be:1e:cc:71:69:
be:3f:12:f2:f9:ae:5a:6a:e6:15:53:b6:cc:6b:53:
e3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3A:76:5C:DA:51:50:E0:A8:EE:3A:00:62:B6:32:42:76:87:13:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FAD4A2E7D9211F1BFB6C7E1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.44.0-154.202.53.255
Signature Algorithm: sha256WithRSAEncryption
91:2a:0e:92:fa:cf:22:ef:19:02:f8:8d:0d:ef:59:79:e4:c6:
2c:ab:ca:fa:61:84:57:fa:53:a5:eb:ad:a9:2e:4c:76:6e:cd:
63:3f:bc:0b:19:a6:fa:bb:0a:f3:3e:14:38:63:95:6d:7c:35:
42:65:71:77:8f:19:f3:c1:00:41:f1:6e:57:29:cd:5d:c5:ab:
71:de:ce:35:25:3d:9a:5e:2d:9c:02:22:b5:37:38:dc:47:99:
96:f2:6a:fe:94:9a:b9:4c:bf:58:15:46:77:46:de:4b:d6:82:
6b:74:ea:bc:70:4d:6b:54:de:a5:56:63:86:fd:47:98:e7:d5:
75:36:0f:f7:36:74:16:8d:b8:89:21:10:82:ac:25:f5:73:76:
7b:20:e8:7c:e3:c3:e6:0c:67:c9:8b:e6:d8:ed:37:a7:03:66:
d1:f7:06:78:05:c4:16:4a:f4:f5:d2:a8:89:dc:b7:c1:b8:dd:
ae:b2:35:27:7d:51:cb:a7:5d:69:0e:42:e5:6c:7c:d0:13:08:
9b:02:01:d4:c4:ef:87:f8:ee:b2:dc:95:f4:15:4e:4c:cf:95:
f1:a1:5a:4b:3a:20:0f:6f:8d:0a:79:99:8f:eb:3f:2e:ed:3c:
f6:0f:a6:da:32:b5:4b:9b:9c:c5:f5:98:22:ca:32:03:38:eb:
17:0f:78:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:29 2026 by rpki-client