Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4F4A7D4714411F1A40A56EACE1D38B0.roa
File: A4F4A7D4714411F1A40A56EACE1D38B0.roa (raw, json)
Hash identifier: v77T0XGqivC+oGFeVJgHHD7+GdqGqRIW6tBulUVtB4Q=
Subject key identifier: 48:A3:D3:FE:0C:FA:AD:5E:E3:92:52:D8:D7:BE:45:2E:8A:C1:1A:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D563
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4F4A7D4714411F1A40A56EACE1D38B0.roa
Signing time: Fri 26 Jun 2026 09:51:47 +0000
ROA not before: Fri 26 Jun 2026 09:51:41 +0000
ROA not after: Thu 30 Jul 2026 09:51:41 +0000
asID: 9304
IP address blocks: 154.82.197.0/24 maxlen: 24
154.82.198.0/24 maxlen: 24
154.82.199.0/24 maxlen: 24
154.83.65.0/24 maxlen: 24
154.89.132.0/24 maxlen: 24
154.90.65.0/24 maxlen: 24
154.90.67.0/24 maxlen: 24
154.90.128.0/24 maxlen: 24
154.90.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120163 (0x1d563)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 09:51:41 2026 GMT
Not After : Jul 30 09:51:41 2026 GMT
Subject: CN=6a3e4bb3-9e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:26:a4:dc:1f:d9:ec:a0:50:22:54:90:da:a5:
5d:dc:cc:f5:b9:ba:d7:a9:a0:9b:96:f5:51:e3:b5:
83:4c:de:6f:47:3c:84:8b:55:15:70:1d:ea:38:d3:
7d:db:e5:ef:1d:8e:13:f2:2a:03:e0:98:6e:b9:73:
63:10:a3:ba:fd:92:14:13:1b:d8:2e:8c:2c:89:ee:
95:2b:aa:48:b9:d7:5e:e9:f6:bc:7d:c2:fa:3d:74:
4e:c5:35:37:bd:eb:c5:e0:35:bc:a3:8e:5c:3d:0a:
51:c1:a7:d4:be:e6:9a:3b:dd:7f:2b:74:db:bf:7e:
fb:3c:33:e0:9b:ad:b8:39:44:98:e1:11:f8:9d:76:
fb:cd:c3:1b:51:9e:c1:2d:c8:b0:32:ca:cd:9e:bb:
fb:56:62:f7:3b:b5:e1:37:6a:08:ec:f1:fe:6d:86:
66:b0:44:45:61:6a:29:71:bf:95:9b:11:cc:f7:65:
f1:7e:da:78:ec:bc:42:d5:33:99:cc:ac:33:1f:d8:
7e:32:2b:7f:b5:5b:cc:1f:cb:48:a2:39:b4:b1:84:
49:5f:b7:b8:40:37:14:60:a5:e7:57:bc:53:73:3d:
e5:be:65:d2:7a:f6:5b:e3:43:76:70:bf:66:28:fc:
1c:73:b7:8e:a3:e9:4f:37:07:96:fa:06:aa:40:e4:
0d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A3:D3:FE:0C:FA:AD:5E:E3:92:52:D8:D7:BE:45:2E:8A:C1:1A:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4F4A7D4714411F1A40A56EACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.197.0-154.82.199.255
154.83.65.0/24
154.89.132.0/24
154.90.65.0/24
154.90.67.0/24
154.90.128.0/24
154.90.189.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:e5:ef:ff:21:3b:fc:60:1b:f6:0d:8e:cd:c0:56:48:fc:51:
0a:31:ba:92:f1:55:31:f5:0f:3f:f7:fa:b6:b6:1f:dd:56:fc:
ec:f5:b6:3c:09:07:ab:76:d8:b9:9e:38:f8:56:4d:ec:c6:51:
47:52:36:80:08:36:e7:9c:02:f6:ed:b4:6c:4e:89:85:80:7c:
8a:b2:69:2b:97:05:8b:77:f1:4b:34:c9:71:3c:00:17:8c:94:
31:78:29:44:f1:0a:f8:f4:87:e8:08:5a:0f:be:27:a7:24:96:
f3:ab:0f:7a:8c:b8:ce:23:6b:a9:f7:99:e1:70:ac:3a:8f:50:
49:77:f4:07:00:0c:6a:2b:9d:83:03:ae:9c:0a:38:e3:f8:0b:
86:2b:c6:30:48:d5:6a:48:cd:e8:03:6d:54:aa:20:43:8c:f5:
ac:f7:90:53:79:f6:5c:6e:ef:ae:54:5a:9c:4f:01:c0:aa:d7:
76:0b:78:ff:c0:df:81:ee:6d:da:c6:04:1f:ee:e3:62:92:fe:
dc:a7:e0:47:dd:1f:54:ff:59:58:56:86:62:84:0e:48:e6:b5:
36:3e:59:12:6c:fd:00:09:db:0f:2c:46:ec:bb:35:83:5c:18:
3e:1c:b0:51:d8:48:44:14:e9:8a:17:02:0e:b7:a3:74:c9:db:
ac:82:0e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:26 2026 by rpki-client