Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/641A9ADA457411F1ACE2CCADCE1D38B0.roa
File: 641A9ADA457411F1ACE2CCADCE1D38B0.roa (raw, json)
Hash identifier: mEi+mS6HDaugZ4vcjJE/0NGsDTmR8I10qZ2sjS8hsmE=
Subject key identifier: E1:55:51:8D:94:06:62:19:EF:08:04:45:DF:CC:82:35:C3:B0:BF:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C8AB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/641A9ADA457411F1ACE2CCADCE1D38B0.roa
Signing time: Fri 01 May 2026 15:42:43 +0000
ROA not before: Fri 01 May 2026 15:42:37 +0000
ROA not after: Fri 05 Jun 2026 15:42:37 +0000
asID: 64126
IP address blocks: 154.88.128.0/17 maxlen: 24
154.88.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116907 (0x1c8ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 15:42:37 2026 GMT
Not After : Jun 5 15:42:37 2026 GMT
Subject: CN=69f4c9f2-967d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:19:2b:21:31:ab:25:08:d0:92:60:2f:53:14:
08:e0:e5:37:66:c1:c3:14:2a:73:86:7e:01:2c:5e:
ed:93:30:da:c9:5a:84:a0:2b:1d:15:45:94:89:b7:
53:9f:79:f4:a9:6f:9b:05:8e:ed:0d:e8:39:19:23:
df:d6:c7:b0:be:1e:08:f7:27:6e:46:be:54:bb:76:
91:01:fa:fe:bb:78:8b:d2:40:12:85:54:ca:af:e7:
80:4e:be:80:74:3a:fd:06:68:bb:4f:a0:49:c1:dd:
03:20:27:e2:02:ad:e2:be:33:fb:d9:ef:3d:43:58:
8e:b0:68:28:74:95:69:e2:81:73:32:5b:58:d4:a1:
01:19:73:46:d5:82:b8:4e:21:c5:a3:bc:14:b3:b6:
87:a8:ac:0e:e5:93:c9:07:0a:85:0c:e5:c4:c9:17:
b7:95:be:06:6a:db:e7:a2:4c:a1:77:b1:b5:23:2e:
9e:3e:f9:99:1f:5a:0f:82:1d:f5:96:13:63:1d:dd:
d3:5d:74:1e:6d:a7:47:8a:d5:e9:9e:79:74:b3:eb:
21:a1:31:48:c3:a5:7b:54:be:6f:13:34:f1:ce:2a:
e5:46:82:2b:6e:e1:89:b8:40:f5:c7:20:9f:4b:dc:
8f:92:d7:30:19:7c:36:61:49:3b:35:a7:86:c1:3a:
94:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:55:51:8D:94:06:62:19:EF:08:04:45:DF:CC:82:35:C3:B0:BF:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/641A9ADA457411F1ACE2CCADCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.128.0/17
Signature Algorithm: sha256WithRSAEncryption
d5:c7:3d:2c:41:a1:98:e2:32:05:8d:c0:06:04:8c:1d:d8:7c:
78:b3:fd:02:9e:bc:91:a5:11:0c:e0:f6:30:de:b8:c3:9b:ff:
e3:2e:e2:5e:f4:11:83:79:1d:dd:83:ca:fa:41:70:4a:9e:2f:
b4:9e:51:5f:bf:97:ed:33:24:da:2a:50:45:7a:06:b5:f2:72:
a0:6a:d4:50:9a:a5:3b:c3:ef:0f:fd:f0:db:ca:eb:57:df:1b:
92:0e:b6:18:c9:6d:69:d8:51:a0:d1:4e:97:3c:d4:2a:b7:00:
c8:c5:8e:50:f6:39:23:d8:50:1e:e3:d5:bd:ba:1c:a3:9e:0c:
50:c8:9f:f9:12:8f:49:3a:82:7b:04:26:67:c9:a8:09:76:e8:
8d:b9:e1:fc:25:17:8c:0f:69:3f:8a:3d:f9:41:1e:3b:1c:97:
50:e8:92:0b:37:92:53:9c:d4:4a:5c:6a:c4:33:f7:4e:c8:17:
d6:eb:9b:80:2f:e4:e1:98:d8:17:7a:22:30:76:8d:f3:d5:b8:
27:2f:9c:ed:9f:d8:aa:f2:40:b0:b6:03:9e:15:27:d0:79:10:
fe:97:04:ec:12:40:02:bd:bf:d3:ba:43:ca:7c:05:66:a3:79:
bc:e5:ed:52:a5:91:ee:be:74:af:90:35:36:2a:88:05:e6:4f:
e9:d9:2d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 10:59:57 2026 by rpki-client