Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9072F550414B11F192D161E9CE1D38B0.roa
File: 9072F550414B11F192D161E9CE1D38B0.roa (raw, json)
Hash identifier: E59azPLWF9Vevks1WvKPcrB0mm/1tCG4MRdguSIPkxQ=
Subject key identifier: B9:70:5A:DE:42:94:23:5E:23:60:32:85:CD:4D:9D:A8:8C:E4:6C:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C791
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9072F550414B11F192D161E9CE1D38B0.roa
Signing time: Sun 26 Apr 2026 08:40:23 +0000
ROA not before: Sun 26 Apr 2026 08:40:17 +0000
ROA not after: Thu 04 Jun 2026 08:40:17 +0000
asID: 213169
IP address blocks: 154.94.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116625 (0x1c791)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 08:40:17 2026 GMT
Not After : Jun 4 08:40:17 2026 GMT
Subject: CN=69edcf77-a0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:46:d7:30:1b:41:df:ce:67:a9:e6:00:9a:37:
e2:9d:78:42:c2:6f:bc:b9:f3:37:ba:1d:60:2f:28:
8c:63:45:c6:6c:87:b7:04:89:85:7e:6a:c5:b3:fe:
3c:47:a5:65:44:0f:62:7d:64:de:dc:b2:87:1d:32:
5e:8c:6b:43:d4:7b:bb:ce:b6:9d:d7:53:6e:7b:d7:
f2:84:36:e1:6b:54:27:d9:d4:a1:a5:43:78:d9:73:
13:67:38:fa:7d:af:f2:15:14:01:51:a4:17:cf:14:
e0:40:8b:8b:23:cf:b9:8d:9e:db:7a:c3:7c:56:ff:
02:2a:a5:37:d3:18:fe:1e:2d:63:cf:10:36:0c:16:
32:fc:9a:75:5a:f0:e1:7c:b2:06:88:80:f7:32:9c:
92:d1:b4:cf:01:a4:ab:2a:73:bd:21:29:61:d3:39:
e4:5c:55:a0:32:e8:37:c7:aa:7f:af:e3:5b:32:af:
6d:0a:58:e3:fa:72:be:76:59:c5:cd:9c:54:63:22:
a8:5d:d1:b8:56:b7:02:0e:93:3d:14:74:44:9c:df:
1c:20:4b:2a:79:6d:e6:d6:04:ac:4e:fc:9c:9a:d7:
16:98:6f:c6:7d:81:8d:f3:6f:81:6e:0e:35:ec:ec:
a3:5f:59:98:be:a7:4a:5a:5d:c5:06:4b:0e:25:62:
bf:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:70:5A:DE:42:94:23:5E:23:60:32:85:CD:4D:9D:A8:8C:E4:6C:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9072F550414B11F192D161E9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.48.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:5c:1d:92:ac:98:06:bb:bf:f6:b2:c7:fa:81:b8:88:a6:16:
21:cb:ee:55:4b:be:fc:9b:70:d2:b3:d0:80:97:5e:48:3b:d8:
c3:d8:ed:cd:2c:6b:4d:ab:6e:c0:23:c0:4a:67:96:b7:25:f2:
60:15:41:a2:49:c0:ac:a4:1f:d8:f6:a0:19:17:1b:35:d5:b9:
6b:dd:e0:f0:b3:64:55:97:82:8e:ea:19:9b:24:06:b7:14:a7:
b8:2b:0c:27:3f:0e:ab:de:f9:ad:19:c4:38:2a:4c:92:39:c1:
31:8e:0c:ea:55:c3:83:6e:f2:9a:b1:af:66:3e:e1:ff:d8:b0:
f3:ca:93:66:96:c0:3c:21:96:8b:d4:7d:f9:ab:57:89:72:7c:
f2:16:8a:e7:79:69:ab:3b:c5:41:d5:e3:5d:bf:b8:76:89:b6:
09:e2:d5:ef:19:d1:b6:6e:40:58:1e:cb:78:56:90:a2:8a:1c:
ec:02:b6:21:0b:da:e2:c9:44:e6:88:24:80:78:38:3b:67:f2:
59:04:92:52:9d:36:86:dc:f7:59:25:b2:8d:b2:87:e3:5f:3c:
f5:f7:a1:58:fd:b1:2d:92:67:7e:da:0b:5b:15:17:53:a2:f6:
94:4d:7e:8e:a3:46:ef:23:7a:97:9b:b5:58:64:cc:3e:29:8f:
a0:cd:f3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:59 2026 by rpki-client