Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA0EE4864AC611F19A585315CF1D38B0.roa
File: FA0EE4864AC611F19A585315CF1D38B0.roa (raw, json)
Hash identifier: cQr7FYXa7jpp5U5WAV6mqVDKHzOzUth614YANU2QfAU=
Subject key identifier: 47:10:4B:61:EC:DA:43:7C:87:CB:1E:7D:25:3D:CC:59:4B:D6:3A:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CA73
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA0EE4864AC611F19A585315CF1D38B0.roa
Signing time: Fri 08 May 2026 10:16:29 +0000
ROA not before: Fri 08 May 2026 10:16:24 +0000
ROA not after: Mon 08 Jun 2026 10:16:24 +0000
asID: 63099
IP address blocks: 154.200.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117363 (0x1ca73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 10:16:24 2026 GMT
Not After : Jun 8 10:16:24 2026 GMT
Subject: CN=69fdb7fd-acf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:74:12:07:00:af:50:86:6d:34:d3:88:0f:cf:
86:2a:ac:a6:f7:8f:48:2d:0b:d3:dd:14:64:b7:d2:
82:1d:1e:4c:76:3b:ee:94:67:93:58:c1:b8:0d:f5:
f8:40:73:b6:a5:7e:1f:37:c3:8b:f8:27:a4:6e:ac:
5a:d8:9a:a7:a8:ba:91:b2:21:46:44:88:b2:be:4f:
28:82:69:9b:83:26:5c:d1:7d:95:fd:a2:f3:23:65:
ba:52:2a:32:56:f7:2c:9f:33:2f:75:6d:16:04:cc:
75:d0:63:e2:5f:20:d1:58:14:df:a6:0a:60:7f:1b:
71:d6:3a:c0:4a:bd:24:e1:79:e8:47:c5:3b:25:64:
40:91:d2:01:6e:2e:85:2d:6b:ce:03:9f:af:42:32:
9f:03:c8:e1:0e:ab:8c:e0:e8:61:6e:6e:61:ef:f9:
ea:90:0a:47:b7:fb:8f:33:e9:d4:39:9f:87:87:34:
30:4a:c0:52:3e:93:db:f5:29:d5:c0:17:9e:18:4d:
f5:6f:12:16:86:fe:05:16:80:f8:ff:ec:81:7d:51:
36:f4:47:b5:36:fe:18:a2:ed:15:cf:29:4b:7e:0f:
24:a6:bb:1c:69:05:f2:92:da:8d:76:ad:04:92:bc:
33:ea:3f:d1:8d:37:4a:d4:9e:30:04:43:9e:a9:52:
02:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:10:4B:61:EC:DA:43:7C:87:CB:1E:7D:25:3D:CC:59:4B:D6:3A:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA0EE4864AC611F19A585315CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.80.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:df:62:23:a2:68:b9:f8:6b:4a:6a:e3:f2:e3:21:d8:56:41:
dc:3b:df:f8:d3:a7:d0:9e:c3:73:ae:77:10:7c:93:f6:ae:e2:
38:40:5e:66:89:30:09:9c:19:18:ab:a4:d8:a4:25:49:43:bd:
ff:f4:9f:9f:a3:38:6c:a2:82:3a:bd:28:ed:b8:26:e8:19:d8:
26:d2:b0:c8:53:14:c1:4d:6f:29:1f:ec:96:02:19:72:68:5d:
db:59:fb:02:ba:5f:f6:f3:73:70:e1:69:e6:9f:c3:02:25:78:
0e:4d:fd:06:7b:4b:21:2c:5a:78:81:a4:a9:45:2f:70:f0:c4:
fc:48:29:b2:ac:af:0f:e7:e9:4d:36:c2:c3:c9:cc:13:7f:56:
f3:b6:0f:f3:d4:c7:40:66:0e:7c:12:e4:1f:ee:ff:6e:27:21:
d5:bf:93:76:01:c1:ab:57:e5:25:55:ce:0e:21:6c:fb:83:7c:
d7:d1:5d:00:d4:c6:d2:49:9e:27:ec:17:ac:cf:c7:37:9e:7e:
4e:bb:87:fc:75:4f:f2:f4:57:75:bf:22:a5:0e:43:f6:08:e7:
da:75:ae:f1:b9:7b:2f:37:8c:88:1e:be:83:4c:20:ce:f0:94:
72:dc:41:ff:4b:ab:a6:1c:d7:4a:c0:ff:13:01:38:84:f9:63:
0a:5e:70:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:30 2026 by rpki-client