Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04746EE66FC511F1B226D1C6CE1D38B0.roa
File: 04746EE66FC511F1B226D1C6CE1D38B0.roa (raw, json)
Hash identifier: 3w80kO5tUFeSEQ6uHE8VtUoIKTN6QAbKOo5wWAE86lM=
Subject key identifier: 2C:A5:C2:D9:0E:42:1A:B0:CE:95:3C:FD:A4:F0:20:61:39:5F:8F:F4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D4CD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04746EE66FC511F1B226D1C6CE1D38B0.roa
Signing time: Wed 24 Jun 2026 12:05:40 +0000
ROA not before: Wed 24 Jun 2026 12:05:35 +0000
ROA not after: Thu 30 Jul 2026 12:05:35 +0000
asID: 142032
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120013 (0x1d4cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 12:05:35 2026 GMT
Not After : Jul 30 12:05:35 2026 GMT
Subject: CN=6a3bc814-2776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bd:7d:43:44:5f:d0:87:e9:09:87:d1:bd:66:
45:ca:9f:81:3f:65:b6:7c:c4:f7:d7:be:3c:c2:1c:
de:01:79:e6:d0:b3:f9:f0:78:a1:9d:70:37:1b:bd:
31:01:4b:c9:d7:c9:85:4e:69:20:9d:22:5f:45:d8:
70:b9:86:31:02:c2:c1:f7:72:8d:7d:22:92:f7:5f:
ab:4e:ee:a1:28:04:11:f3:ef:25:d9:2d:77:b1:ed:
41:c2:bb:2e:aa:eb:64:0f:5d:b6:09:cb:18:f0:04:
49:5f:9c:62:c3:95:c7:77:1a:d2:c3:ba:12:f8:64:
8a:b5:9f:a6:74:95:e0:96:64:70:3a:8e:cf:05:6f:
5f:07:8b:8c:52:e6:45:95:68:be:2f:64:fa:3d:f7:
b6:6a:aa:f0:38:57:d0:60:df:1a:ef:06:b1:b3:c9:
86:54:b1:6f:a7:46:ad:dd:26:f3:1d:35:69:bb:b7:
e4:cc:3e:cb:e8:68:b0:46:db:01:8d:04:29:ab:5e:
e2:e3:cb:39:8a:3d:46:96:e3:dc:77:8e:0a:5e:5c:
e6:51:31:9e:d7:57:5e:a0:50:5c:fd:b9:09:b2:32:
a2:44:2f:d1:9f:e8:9b:8a:89:d9:9d:ce:3f:55:ba:
7d:f1:95:76:40:9b:21:82:1d:7f:91:6d:88:46:ae:
27:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A5:C2:D9:0E:42:1A:B0:CE:95:3C:FD:A4:F0:20:61:39:5F:8F:F4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04746EE66FC511F1B226D1C6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
54:9a:e1:11:5b:3e:d7:18:d0:6d:e2:19:7b:22:5a:28:cc:3d:
79:23:7a:c3:67:97:6b:19:27:27:28:bf:2c:dd:57:02:08:dd:
d8:11:43:ed:22:e4:ee:1c:31:ba:60:1a:20:d3:59:7f:67:5f:
ea:d0:18:ee:46:4e:8e:79:f1:70:09:79:2e:1b:40:92:78:8e:
18:37:3e:51:09:a6:be:9f:51:64:2e:09:c2:3f:65:ba:9d:5d:
a8:48:12:30:c4:a4:3f:4e:17:ab:d5:f8:01:2b:94:3a:73:77:
c6:09:a3:04:cf:ff:c6:1e:26:c9:13:4f:23:38:40:f7:e1:6f:
1e:3c:41:c7:ef:aa:f9:5d:37:3e:8e:14:13:1f:7b:2b:24:6d:
1b:24:fc:a2:4e:4f:0b:fc:6d:db:1d:74:ee:d8:d3:58:35:65:
14:8e:e8:17:a5:71:6d:a5:43:3f:d2:32:bf:f7:cd:4e:a5:1f:
3c:88:cd:2f:59:4c:f0:fe:df:7b:28:2f:1d:1e:02:45:4a:e7:
94:c9:4b:b8:db:c3:ea:a3:7f:95:bc:df:ed:41:11:6d:37:59:
a6:3c:23:a1:16:74:72:56:dd:72:70:df:d8:f4:38:63:84:76:
f0:3c:58:4c:ba:2f:95:5d:29:ca:9d:62:5f:e7:4b:d3:bf:bc:
14:99:9c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:13:45 2026 by rpki-client