Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F49FEE62491A11F193FB94EACE1D38B0.roa
File: F49FEE62491A11F193FB94EACE1D38B0.roa (raw, json)
Hash identifier: IlWBDndfY+eN9+IIxaZW8GHsc+kwNrwTz7WkJ/vAGr4=
Subject key identifier: AD:5D:73:D2:11:C5:E9:D9:30:0F:51:A8:CA:9E:49:78:D7:4E:E0:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C975
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F49FEE62491A11F193FB94EACE1D38B0.roa
Signing time: Wed 06 May 2026 07:12:35 +0000
ROA not before: Wed 06 May 2026 07:12:30 +0000
ROA not after: Wed 13 May 2026 07:12:30 +0000
asID: 40115
IP address blocks: 154.86.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117109 (0x1c975)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 07:12:30 2026 GMT
Not After : May 13 07:12:30 2026 GMT
Subject: CN=69fae9e3-4428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5b:31:ac:1e:ac:cb:55:38:33:97:0c:87:cc:
19:7a:c1:43:83:6b:89:25:e5:a2:48:32:3a:c9:62:
82:9f:1b:cf:15:30:b8:a5:72:d9:bf:23:95:89:6a:
1e:0d:dd:12:36:67:e5:aa:33:94:e8:2e:d6:35:c8:
c0:e1:00:0f:7e:89:55:4d:ae:aa:06:bc:1c:ed:3b:
05:46:da:c6:10:07:7d:9b:ba:09:c2:1b:e9:a2:59:
de:66:91:20:5f:d4:08:7f:50:ac:10:a4:09:d0:96:
a0:29:19:8e:16:8f:bc:bf:87:21:e0:7f:58:95:dd:
cc:d7:5f:ab:40:4c:9c:a3:7d:8a:bc:05:4d:ad:e4:
ef:17:76:40:58:77:f5:8a:6f:9c:18:56:88:fb:ea:
e9:d8:fc:c8:e4:9e:4f:b6:db:0e:02:73:54:d5:0c:
41:43:93:72:c6:7f:40:2b:19:02:00:4e:88:cd:96:
c3:a8:4e:ef:67:d6:1e:47:84:5a:77:6f:75:cc:a3:
d8:0f:3a:f3:68:43:f2:bb:60:7e:65:a1:a8:33:9b:
04:4a:56:68:3c:44:cb:a6:5b:8a:c0:38:0d:14:b4:
de:7a:d0:d3:8b:96:0e:6b:6c:e3:93:f8:fd:c5:f6:
fc:ea:98:b1:b1:47:52:e9:19:59:d0:cf:7a:08:a6:
3a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5D:73:D2:11:C5:E9:D9:30:0F:51:A8:CA:9E:49:78:D7:4E:E0:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F49FEE62491A11F193FB94EACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/20
Signature Algorithm: sha256WithRSAEncryption
3b:a1:ba:ff:93:21:2f:94:7c:4c:ad:3a:9c:b1:67:f4:0f:1d:
5d:b0:86:8b:28:fe:b3:ab:aa:72:48:9b:b9:01:aa:3b:c6:3f:
35:46:ae:04:0d:b9:e4:45:8a:2e:00:82:6e:62:4d:18:fe:dd:
90:23:34:9f:6b:14:a5:51:d0:13:cb:53:fc:05:d0:d0:42:ce:
d6:ea:61:e0:41:49:6e:b7:41:5c:e5:09:79:3f:06:61:b6:d2:
4d:bb:67:cf:65:5b:b2:d5:95:31:1e:3d:b9:88:0d:e7:4c:09:
8c:22:f5:d3:7f:e1:86:0a:c7:33:c2:10:d5:bd:82:80:6e:f6:
55:d7:11:08:5d:4e:1b:f5:c8:24:cb:24:74:2e:98:86:bf:20:
23:fe:e8:6f:04:0d:54:c2:c4:2c:57:40:9f:2a:fc:24:4c:9e:
5d:53:62:88:dd:a1:a0:e3:0d:c0:28:41:48:48:f9:56:4c:ab:
eb:7d:d1:4b:d7:d4:74:b2:47:1d:c3:a5:33:d0:49:36:d2:b2:
1b:67:13:33:df:a7:bd:6f:02:15:bc:d1:c3:af:1d:c2:28:e4:
24:d8:78:09:f6:c3:d2:11:3f:2b:ed:3b:55:dc:1d:99:a3:c8:
a8:ac:0d:d6:64:ee:77:c6:92:a5:26:75:8c:17:fc:ee:dc:44:
d2:02:a5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:00:22 2026 by rpki-client