Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/4FE947B8748211F1BEF1D21ACF1D38B0.roa
File: 4FE947B8748211F1BEF1D21ACF1D38B0.roa (raw, json)
Hash identifier: gMf5DUZWS8LRzzUKIgiaI5m52/YhBJXqXPqfDQ4cQck=
Subject key identifier: 32:E1:50:BF:24:EF:C0:FF:13:E8:83:BC:B2:28:53:9D:63:4F:F2:F0
Certificate issuer: /CN=F3675053AF/serialNumber=958EC4ED3493F805189F49681700C79E088E7EB2
Certificate serial: 04
Authority key identifier: 95:8E:C4:ED:34:93:F8:05:18:9F:49:68:17:00:C7:9E:08:8E:7E:B2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lY7E7TST-AUYn0loFwDHngiOfrI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/4FE947B8748211F1BEF1D21ACF1D38B0.roa
Signing time: Tue 30 Jun 2026 12:50:46 +0000
ROA not before: Tue 30 Jun 2026 12:50:42 +0000
ROA not after: Mon 31 Dec 2035 12:50:42 +0000
asID: 37512
IP address blocks: 154.73.56.0/24 maxlen: 24
154.73.57.0/24 maxlen: 24
154.73.58.0/24 maxlen: 24
154.73.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/lY7E7TST-AUYn0loFwDHngiOfrI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/lY7E7TST-AUYn0loFwDHngiOfrI.mft
rsync://rpki.afrinic.net/repository/afrinic/lY7E7TST-AUYn0loFwDHngiOfrI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3675053AF, serialNumber=958EC4ED3493F805189F49681700C79E088E7EB2
Validity
Not Before: Jun 30 12:50:42 2026 GMT
Not After : Dec 31 12:50:42 2035 GMT
Subject: CN=6a43bba6-23ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:74:64:e0:71:da:7e:ca:40:c7:8e:62:8a:a6:
35:34:c3:9f:df:cf:03:57:73:cf:98:20:55:7e:71:
cb:57:80:89:17:63:c1:7c:a1:9d:80:82:ae:ca:b2:
c2:b9:56:9b:14:47:5a:ea:06:ab:52:30:b3:77:b6:
29:d3:3b:32:51:c8:3b:19:03:91:56:2a:db:ce:c5:
e9:e4:c5:a8:e1:23:0d:ed:1d:82:4e:db:4e:f8:01:
00:19:d3:f1:e9:27:7c:87:d4:c9:89:5f:30:d5:f7:
1a:cd:a1:19:fb:48:b4:64:3f:3b:59:e7:16:43:49:
04:be:a4:4a:71:bf:b5:25:1c:12:2b:c3:e4:46:86:
c1:ac:61:8c:da:cb:d4:90:fe:fc:11:75:16:11:f2:
ec:35:c7:3f:50:b4:f9:b7:6b:71:e5:c8:23:ab:70:
a8:2b:78:d6:05:e8:38:84:7f:cd:00:57:4c:42:02:
fa:c1:52:c4:65:70:52:e0:e9:08:f2:a3:74:98:cd:
81:c0:4e:dd:62:a7:f1:82:3b:cb:7a:cd:5f:6f:04:
a2:4c:6a:ec:df:b3:3a:0d:5d:b2:cf:5a:70:e0:4f:
85:14:bf:14:d2:0f:78:4a:e5:50:25:8a:bf:1e:7a:
60:9e:ff:fc:3a:82:46:c1:31:2a:0d:dd:bc:7f:f0:
52:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E1:50:BF:24:EF:C0:FF:13:E8:83:BC:B2:28:53:9D:63:4F:F2:F0
X509v3 Authority Key Identifier:
keyid:95:8E:C4:ED:34:93:F8:05:18:9F:49:68:17:00:C7:9E:08:8E:7E:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/lY7E7TST-AUYn0loFwDHngiOfrI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lY7E7TST-AUYn0loFwDHngiOfrI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/4FE947B8748211F1BEF1D21ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.73.56.0/22
Signature Algorithm: sha256WithRSAEncryption
e8:b0:0b:d7:b7:c8:a1:56:64:c3:86:fa:84:b5:8e:37:10:fd:
d1:ae:2a:84:9b:f3:cd:83:ff:1f:cf:88:6e:29:cc:6c:12:3b:
bb:51:d4:67:4c:cb:3d:7d:f5:29:e1:9e:8d:7d:98:2d:e1:cb:
44:60:4a:27:ae:83:02:50:93:26:34:4c:ea:20:99:8e:9b:cb:
b4:48:53:a0:e3:a2:08:c3:ce:56:fd:98:c6:f1:27:a1:f3:75:
84:2a:14:b0:a3:f0:e6:fb:ef:c8:d8:d1:1e:cf:0d:ca:c9:1e:
85:13:37:38:80:80:ca:97:9a:8d:23:59:ea:52:01:ad:2d:0b:
a3:6e:fa:82:fd:75:94:17:0c:6a:6b:c8:6f:19:69:59:2b:c7:
15:a5:27:27:08:1a:f9:61:27:bb:d4:aa:79:47:d9:b8:30:4c:
db:25:6a:88:7f:c4:31:e4:2c:90:8f:64:b7:7f:05:52:31:17:
11:cd:3a:4b:50:d2:fa:fc:9a:71:fd:77:f1:94:1f:dd:40:6c:
55:bd:3a:16:d0:3e:3e:0b:5e:24:7d:2a:b1:3b:bc:76:f7:f9:
b6:69:5b:78:cf:6a:dd:93:81:17:7e:e7:cb:5d:1e:af:b9:58:
d9:4f:a9:c2:74:16:a0:25:1e:09:ba:22:d6:39:2d:91:80:d4:
69:2d:a0:a0
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
NTA1M0FGMTEwLwYDVQQFEyg5NThFQzRFRDM0OTNGODA1MTg5RjQ5NjgxNzAwQzc5
RTA4OEU3RUIyMB4XDTI2MDYzMDEyNTA0MloXDTM1MTIzMTEyNTA0MlowGDEWMBQG
A1UEAxMNNmE0M2JiYTYtMjNlZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOR0ZOBx2n7KQMeOYoqmNTTDn9/PA1dzz5ggVX5xy1eAiRdjwXyhnYCCrsqy
wrlWmxRHWuoGq1Iws3e2KdM7MlHIOxkDkVYq287F6eTFqOEjDe0dgk7bTvgBABnT
8eknfIfUyYlfMNX3Gs2hGftItGQ/O1nnFkNJBL6kSnG/tSUcEivD5EaGwaxhjNrL
1JD+/BF1FhHy7DXHP1C0+bdrceXII6twqCt41gXoOIR/zQBXTEIC+sFSxGVwUuDp
CPKjdJjNgcBO3WKn8YI7y3rNX28Eokxq7N+zOg1dss9acOBPhRS/FNIPeErlUCWK
vx56YJ7//DqCRsExKg3dvH/wUoECAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQy4VC/
JO/A/xPog7yyKFOdY0/y8DAfBgNVHSMEGDAWgBSVjsTtNJP4BRifSWgXAMeeCI5+
sjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NzUwNTMvNjk4NEQ2NkU3NDVCMTFGMUI0MUI2MUI3Q0UxRDM4QjAvbFk3RTdU
U1QtQVVZbjBsb0Z3REhuZ2lPZnJJLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvbFk3RTdUU1QtQVVZbjBsb0Z3REhuZ2lPZnJJLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzUwNTMvNjk4NEQ2NkU3NDVCMTFGMUI0MUI2MUI3Q0Ux
RDM4QjAvNEZFOTQ3Qjg3NDgyMTFGMUJFRjFEMjFBQ0YxRDM4QjAucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAppJODANBgkqhkiG9w0BAQsF
AAOCAQEA6LAL17fIoVZkw4b6hLWONxD90a4qhJvzzYP/H8+IbinMbBI7u1HUZ0zL
PX31KeGejX2YLeHLRGBKJ66DAlCTJjRM6iCZjpvLtEhToOOiCMPOVv2YxvEnofN1
hCoUsKPw5vvvyNjRHs8NyskehRM3OICAypeajSNZ6lIBrS0Lo276gv11lBcMamvI
bxlpWSvHFaUnJwga+WEnu9SqeUfZuDBM2yVqiH/EMeQskI9kt38FUjEXEc06S1DS
+vyacf138ZQf3UBsVb06FtA+PgteJH0qsTu8dvf5tmlbeM9q3ZOBF37ny10er7lY
2U+pwnQWoCUeCboi1jktkYDUaS2goA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:53:28 2026 by rpki-client