Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F49CEEA04A5111F1BE6536C2CE1D38B0.roa
File: F49CEEA04A5111F1BE6536C2CE1D38B0.roa (raw, json)
Hash identifier: B07RxvBVvxyQ6hheg7q1ABByn1WFJP5h46XW/TDGkOo=
Subject key identifier: 0F:2B:2F:17:9F:11:23:E8:BB:4F:3A:DE:82:B4:1C:3A:9D:6D:02:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C9F0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F49CEEA04A5111F1BE6536C2CE1D38B0.roa
Signing time: Thu 07 May 2026 20:18:49 +0000
ROA not before: Thu 07 May 2026 20:18:44 +0000
ROA not after: Sun 21 Jun 2026 20:18:44 +0000
asID: 2914
IP address blocks: 154.197.12.0/22 maxlen: 24
154.222.74.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117232 (0x1c9f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 20:18:44 2026 GMT
Not After : Jun 21 20:18:44 2026 GMT
Subject: CN=69fcf3a8-55d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b7:6f:5f:c7:82:46:e0:0f:dd:bd:a7:46:11:
6d:06:84:02:ff:66:dc:c7:82:50:06:26:85:2d:dc:
47:2c:d7:f3:9a:8c:26:24:8c:a0:28:1b:f9:b1:f7:
bf:ca:4e:c3:16:0c:3c:33:5b:93:f3:d3:cd:a3:d5:
b9:6e:89:00:c3:04:c5:da:dc:6d:07:0c:f4:39:1c:
6f:3b:b7:ca:e9:2c:7c:5f:9b:78:92:51:50:cb:a5:
35:69:07:d6:74:69:4a:f1:db:2d:a2:7b:ab:e7:22:
b4:1f:06:c2:08:75:cb:5c:26:54:d3:a8:99:3a:60:
9f:f8:3b:5b:43:6e:67:53:63:2a:90:12:25:02:4a:
e4:a0:dc:e8:da:d9:28:3c:65:04:1a:fb:48:a4:00:
e5:bf:1d:f1:7c:b0:ed:43:ce:1d:9b:67:97:ec:14:
3c:f5:46:9c:54:90:21:6c:79:75:df:b9:27:08:96:
00:72:94:a8:03:f4:2d:9c:f5:55:63:36:8a:64:d2:
85:33:c4:00:ab:a9:3f:28:5d:35:73:54:5b:9d:19:
79:f1:22:bf:c5:b1:b5:ff:d6:28:39:2e:16:64:ce:
f1:46:75:de:50:92:f2:87:e3:8e:1c:58:cd:f8:e5:
12:ea:12:9f:52:41:f5:83:b1:66:61:0f:4d:c5:4f:
2f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2B:2F:17:9F:11:23:E8:BB:4F:3A:DE:82:B4:1C:3A:9D:6D:02:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F49CEEA04A5111F1BE6536C2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.12.0/22
154.222.74.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:ab:e3:63:cc:73:16:a7:45:41:8d:75:56:c8:f0:4c:91:ca:
dc:69:56:bd:ce:6b:ab:ec:0e:6f:ba:cc:73:c8:39:38:f0:f0:
2e:a2:44:a4:0d:21:74:63:18:d3:7d:84:3f:67:fb:a2:69:0d:
4e:89:d7:58:af:57:68:24:1a:84:80:f9:95:00:5d:dc:11:90:
f0:e7:dd:33:62:11:4e:4d:56:88:6f:e2:87:6c:f0:fd:8c:7a:
ff:37:f1:75:0e:21:98:30:a7:11:e9:b6:44:81:52:4b:a2:52:
a8:eb:9c:8c:d4:c0:b7:45:ca:01:7d:dc:a6:8b:10:fb:4b:4d:
17:58:44:e2:f8:3f:ff:1c:6c:90:4c:4f:41:74:cd:76:ee:7e:
7c:64:a1:46:8f:6c:29:f4:77:00:da:5c:c9:87:cb:9b:a6:3b:
f7:1f:43:4a:3d:ad:5f:f6:04:3e:47:df:56:85:b1:49:6e:07:
bb:1e:e9:96:13:9c:2d:42:a6:6a:6a:5b:88:69:b6:b0:26:59:
87:63:23:c1:69:a3:8d:23:9a:5c:3f:d4:ba:90:87:18:9e:0e:
69:23:90:bb:3f:aa:1a:d6:2f:b9:8e:7b:4e:b4:b3:47:92:b6:
18:11:14:4a:0d:e8:50:77:90:59:18:57:29:c9:88:36:f9:e3:
34:78:58:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:00:23 2026 by rpki-client