Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4C6F1563FAE11F1AF2AD90CCF1D38B0.roa
File: C4C6F1563FAE11F1AF2AD90CCF1D38B0.roa (raw, json)
Hash identifier: mTN6GZH0nvLIjiQudsS04GngrFl+u0CWb6GQTlEcrYE=
Subject key identifier: 16:E9:43:3C:42:E9:0D:FE:61:3E:8D:F0:8C:06:F9:5D:82:C1:C7:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C6F9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4C6F1563FAE11F1AF2AD90CCF1D38B0.roa
Signing time: Fri 24 Apr 2026 07:25:29 +0000
ROA not before: Fri 24 Apr 2026 07:25:24 +0000
ROA not after: Sat 30 May 2026 07:25:24 +0000
asID: 401701
IP address blocks: 154.201.64.0/19 maxlen: 24
154.201.94.0/23 maxlen: 24
154.201.94.0/24 maxlen: 24
154.201.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 May 2026 00:07:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116473 (0x1c6f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 07:25:24 2026 GMT
Not After : May 30 07:25:24 2026 GMT
Subject: CN=69eb1ae8-26f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1a:cc:d3:38:d5:10:f5:7f:d9:f3:02:97:37:
32:fb:bb:2d:40:63:53:bb:06:0f:d6:c4:be:48:0a:
43:2f:7d:cf:2c:25:8b:81:e6:33:67:aa:96:94:7e:
a9:8e:19:5a:45:b9:ea:ac:5b:94:7b:21:20:40:28:
5a:37:af:0d:24:4a:2e:28:be:fe:e8:1e:84:a7:19:
3c:dd:8e:bc:87:d4:a3:24:e2:2d:4d:8a:fc:d8:9f:
63:ba:c1:6a:42:02:20:c9:68:aa:f6:ef:e7:db:77:
6e:8d:f4:9a:8b:cd:05:5e:4f:a8:5f:39:cf:25:60:
07:78:39:95:c4:19:b2:b9:70:45:16:b9:6f:50:f8:
57:5c:6d:72:94:49:3a:ae:5e:4a:0e:0b:4e:3e:42:
a1:89:18:4c:eb:4b:24:95:34:72:c2:4e:9e:bf:63:
67:62:42:0e:1d:9f:e3:c4:b6:a9:64:ef:78:8c:b6:
87:29:63:7f:f2:d6:a1:e2:f7:76:3f:36:11:de:a8:
88:98:3e:23:0b:fc:f2:f9:3f:49:6b:6b:f1:06:6e:
4a:58:09:b2:b6:a0:df:1c:57:db:34:26:1e:01:6b:
ba:5e:a9:c3:d4:87:bf:dc:b3:04:b9:07:5c:d1:64:
e2:ca:16:d2:61:a9:53:83:6c:74:94:49:03:7d:20:
fd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E9:43:3C:42:E9:0D:FE:61:3E:8D:F0:8C:06:F9:5D:82:C1:C7:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4C6F1563FAE11F1AF2AD90CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
91:9c:aa:37:05:9f:54:4f:1b:f3:ae:87:11:6b:84:61:7a:ed:
7c:e9:44:c4:63:b3:4a:03:a2:15:3e:6c:bb:1d:2e:79:1b:0f:
3e:4c:eb:c4:36:07:79:55:cc:f6:20:6e:21:49:eb:fb:e0:88:
0e:2f:14:29:39:01:6f:1f:f0:78:00:f1:50:7f:ff:c4:e1:8f:
bf:2e:63:81:52:2b:ff:c8:ef:31:1b:1d:b8:42:f9:11:18:af:
e9:b5:29:c5:f5:00:79:78:16:1a:9e:a7:77:35:a8:ef:a5:7f:
88:20:1f:17:7b:b9:04:8a:9b:fc:13:3b:c0:71:34:0b:29:ea:
eb:0f:ea:6f:0d:fe:32:40:bc:ac:47:d4:dd:b9:08:9f:ba:56:
4e:57:ab:b3:b4:46:0a:a0:49:ff:74:d1:82:d8:2b:26:ab:71:
6b:22:8a:eb:57:27:1b:6c:b5:39:80:49:b9:f7:32:aa:56:18:
f3:11:75:72:da:bd:b2:79:59:dd:40:f3:73:c5:21:d3:43:55:
1d:88:6f:97:40:4c:b5:ea:44:ba:63:17:e7:d0:e2:dc:1f:45:
2d:07:31:78:c8:3c:67:46:39:68:32:d4:ae:94:39:59:8b:0f:
57:a3:5b:47:8a:f4:9b:95:6f:83:63:cf:24:70:33:b5:f6:e4:
d6:6c:c2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 05:35:22 2026 by rpki-client