Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4E837FE430611F19373BFEACE1D38B0.roa
File: A4E837FE430611F19373BFEACE1D38B0.roa (raw, json)
Hash identifier: +JBAaW4Bv5VFFCU1EAc64kadPlB1AZfSeMYxb3vreh8=
Subject key identifier: 5F:8E:38:A3:D4:07:40:30:1B:65:ED:B9:9C:4B:C9:6F:86:ED:96:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C7B9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4E837FE430611F19373BFEACE1D38B0.roa
Signing time: Tue 28 Apr 2026 13:32:04 +0000
ROA not before: Tue 28 Apr 2026 13:31:59 +0000
ROA not after: Fri 27 Apr 2029 13:31:59 +0000
asID: 17561
IP address blocks: 154.90.28.0/24 maxlen: 24
154.90.29.0/24 maxlen: 24
154.90.30.0/24 maxlen: 24
154.90.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116665 (0x1c7b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 13:31:59 2026 GMT
Not After : Apr 27 13:31:59 2029 GMT
Subject: CN=69f0b6d4-a741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:78:0a:2d:2a:72:ea:6e:99:31:25:b0:67:c5:
c8:aa:5c:20:23:9d:ea:8f:e9:d9:a7:ad:d0:12:97:
64:b7:f5:ef:d9:85:82:04:24:1d:1a:c3:55:e8:4d:
c4:5a:e4:a5:b3:05:e1:58:dd:87:8e:c4:29:5e:3a:
6a:57:6a:b1:68:c0:f1:18:8c:1f:80:c5:ee:96:94:
2a:59:a1:7e:22:88:2b:d8:69:be:eb:7c:80:86:00:
99:3b:fa:44:bd:48:b6:b0:3a:e7:31:58:e0:2c:01:
fe:11:b8:f1:e3:25:83:95:26:e2:0b:a1:75:07:0d:
9e:ab:cb:9f:b2:24:fd:1d:7f:39:d1:38:04:20:50:
1a:7a:52:65:53:e2:7b:c4:fc:21:37:44:a9:c9:e1:
de:f0:91:14:00:22:8f:9c:8a:54:48:9a:0c:8d:5d:
cb:8e:64:a2:94:ef:14:41:74:53:49:1e:67:05:e5:
27:fb:35:5d:b5:41:52:c8:43:48:1f:ab:00:d0:38:
4c:1c:96:16:b8:a4:eb:39:d3:da:92:35:6c:71:fd:
47:a3:de:61:70:ea:3a:85:0f:86:54:ca:9d:45:66:
6a:e3:91:84:1e:b5:7d:65:ec:90:89:64:a4:88:b5:
76:9a:2d:2b:c1:68:05:6c:8f:c2:9e:6a:29:84:18:
2c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8E:38:A3:D4:07:40:30:1B:65:ED:B9:9C:4B:C9:6F:86:ED:96:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4E837FE430611F19373BFEACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.28.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:c0:bc:96:16:f4:b1:c0:84:0d:e5:9d:9b:7a:a4:16:2a:6e:
fc:21:71:d8:63:bb:c0:9b:2f:8a:23:2f:75:7f:a6:67:da:a8:
16:c6:1a:d7:c1:3a:92:c7:0a:68:fe:3c:90:a3:01:e2:b3:ba:
67:4b:1b:87:eb:4e:d1:7e:c0:5a:2c:58:9e:67:59:28:66:87:
ef:40:4b:90:69:0b:a6:65:b2:7d:da:87:13:c4:9a:f9:ee:8d:
0d:c9:c9:3c:99:0d:51:f4:9f:98:53:74:36:96:84:25:40:53:
17:19:b1:5e:36:a7:b7:5b:26:50:38:99:02:9c:f6:32:33:9c:
1b:33:88:b2:22:dd:d9:a7:15:57:da:50:04:3c:6e:2a:0c:d9:
e3:17:5a:06:65:fc:6d:ea:ff:0a:b0:40:9d:6a:97:18:c2:30:
bc:d8:6f:62:74:70:84:35:07:f5:b4:1a:26:86:92:eb:8f:04:
a7:f3:b5:d1:16:9a:6d:da:ba:c5:c6:fa:6f:49:0b:18:83:2b:
55:ff:8a:32:ff:58:1e:50:1c:c5:6d:66:25:41:c5:26:e0:4a:
67:7e:37:1c:72:4a:d4:61:fc:93:14:85:c1:92:ed:0a:13:73:
b3:3b:b0:f9:53:60:8d:e8:9a:a4:23:65:bb:e2:31:7e:21:c9:
60:11:6a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:51 2026 by rpki-client