Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA9A33D4455511F199C9D8F7CE1D38B0.roa
File: CA9A33D4455511F199C9D8F7CE1D38B0.roa (raw, json)
Hash identifier: 2gSASybwep+bq0sFD84fAiDQsFK4opjeZnN0yFolVfU=
Subject key identifier: F5:B1:71:8C:62:FE:48:EE:93:5C:72:4B:40:20:57:DC:86:B2:03:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C883
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA9A33D4455511F199C9D8F7CE1D38B0.roa
Signing time: Fri 01 May 2026 12:03:40 +0000
ROA not before: Fri 01 May 2026 12:03:35 +0000
ROA not after: Sat 09 May 2026 12:03:35 +0000
asID: 151352
IP address blocks: 154.82.136.0/24 maxlen: 24
154.82.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 May 2026 12:03:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116867 (0x1c883)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 12:03:35 2026 GMT
Not After : May 9 12:03:35 2026 GMT
Subject: CN=69f4969c-787a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:06:a3:b6:21:3d:f7:70:8c:29:2d:d7:8e:d0:
95:96:f3:95:24:1e:a6:03:3d:b7:cd:fd:fa:b8:b9:
8b:6f:82:1e:49:53:44:d0:e1:bf:ca:50:62:f1:b1:
6e:07:e9:2f:8e:8c:d3:1d:51:00:ee:27:7f:48:00:
33:ed:42:5a:02:4b:0e:f1:ea:15:97:95:9c:04:70:
f5:9b:6b:0e:5e:00:8c:dc:0c:f2:85:66:07:d9:2b:
4e:fc:6d:b2:4f:1e:d6:19:70:84:cd:89:1e:f7:89:
67:9a:2e:61:01:f5:02:1e:c7:20:a3:64:e7:c4:db:
43:95:41:ff:aa:b5:a4:6d:88:67:fc:b2:2f:18:6f:
80:08:2c:a4:9a:28:3d:36:1c:0a:7c:3a:4a:27:9f:
f1:49:f3:09:ca:f9:30:29:8e:8c:ab:ba:2e:9c:b0:
1d:ca:1b:be:e7:97:8d:03:54:67:e2:9d:88:69:46:
74:ea:7a:6c:7d:e8:07:33:7a:5f:66:ec:a2:36:7f:
2f:4a:5e:82:72:72:58:fe:98:6c:a3:8c:63:d5:42:
cb:25:11:df:3c:18:1a:bf:4a:36:90:be:73:50:0b:
9a:30:32:68:1a:ee:95:e6:f2:3c:c5:b5:9c:77:ca:
df:97:6f:17:cb:70:69:1a:d3:98:76:54:66:78:6f:
64:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B1:71:8C:62:FE:48:EE:93:5C:72:4B:40:20:57:DC:86:B2:03:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA9A33D4455511F199C9D8F7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.136.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:1a:6f:f1:46:a6:68:b6:0c:61:d2:cb:39:31:b1:a6:00:c5:
64:2a:82:2f:98:7b:5c:82:95:5e:18:ca:17:4c:61:d8:f3:1b:
ea:7b:f8:a2:de:98:e2:6d:e7:56:b5:31:cd:fa:66:19:a7:94:
37:e1:ef:2b:12:a0:b7:4c:c0:99:ef:1c:41:86:48:37:35:fb:
fc:2d:56:7e:1b:e0:8e:ee:29:bd:16:5e:41:92:a6:dd:42:88:
70:5f:b3:fa:ed:b3:50:02:ee:a1:02:2c:e9:85:ba:c2:04:fb:
f3:aa:32:45:80:8b:30:4b:57:37:17:f4:4d:57:f2:75:e0:5f:
bf:d6:5b:da:c3:03:19:b2:b1:84:5f:50:bb:25:ab:30:cb:75:
f1:e6:5e:f9:73:17:f0:1b:dd:22:5e:54:0f:4e:1e:95:5b:d8:
09:62:ad:24:b1:d7:1b:be:4f:cb:6d:80:8d:c8:60:69:d6:5c:
2d:78:b8:5e:57:3a:e9:69:22:3d:7d:45:8d:ba:78:1f:1f:79:
ef:d6:2e:11:76:1d:31:d7:cf:ec:6f:96:9e:ea:50:85:8d:04:
d5:ff:3a:31:6e:60:25:fc:d5:88:43:ae:47:b2:ff:89:54:ca:
85:4a:a8:f2:99:e3:4f:a4:8e:ec:95:ad:66:7c:b4:ec:26:6c:
2d:50:e7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:58 2026 by rpki-client