Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/049614FA4C6711F1B8A73FF5CE1D38B0.roa
File: 049614FA4C6711F1B8A73FF5CE1D38B0.roa (raw, json)
Hash identifier: AsIDUYid9FEl74aT/jKIHecdwfhVDvYJOaVywGnIQZM=
Subject key identifier: 23:1B:59:51:B4:B4:24:CB:6E:78:38:8B:91:23:95:23:E8:A9:72:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CABD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/049614FA4C6711F1B8A73FF5CE1D38B0.roa
Signing time: Sun 10 May 2026 11:54:37 +0000
ROA not before: Sun 10 May 2026 11:54:32 +0000
ROA not after: Wed 10 Jun 2026 11:54:32 +0000
asID: 141883
IP address blocks: 154.86.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 06:17:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117437 (0x1cabd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 10 11:54:32 2026 GMT
Not After : Jun 10 11:54:32 2026 GMT
Subject: CN=6a0071fd-e40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:52:54:ef:3b:ab:72:f9:4e:ef:7a:27:da:9a:
b4:09:08:df:13:1b:4a:4f:e4:97:b7:2d:66:6d:5b:
03:20:da:d8:e3:76:a1:bc:b3:80:99:84:e7:a8:24:
9b:30:23:66:3d:88:af:ef:e1:d7:07:71:02:f3:af:
86:8e:02:c2:2c:c9:e4:37:ea:fc:9c:ca:1b:a7:a2:
ca:15:b1:fc:12:3e:62:59:c8:4b:53:51:a2:99:fa:
1a:d3:15:09:c4:3d:9b:70:3a:2c:69:f5:8e:a8:37:
45:a2:5d:cd:2e:4b:a0:b2:2c:52:8a:0b:ec:4a:21:
25:27:74:9a:93:84:10:09:ae:70:44:6a:92:ce:ca:
76:4d:da:55:46:46:23:dd:55:6f:70:37:9b:4d:a4:
e7:b6:fe:b0:50:8e:23:b9:6f:90:4d:98:8a:ff:5f:
06:07:d3:6d:55:c4:1c:6a:c4:af:c1:4c:8f:be:99:
2f:48:27:67:eb:1c:5f:5a:66:f2:35:b2:b9:c1:e5:
c9:c3:81:26:8d:6a:23:db:06:77:af:36:62:f0:97:
01:ae:cc:a9:03:43:66:5b:5b:f2:10:c1:63:7b:6d:
ac:8a:9d:2b:c0:1f:4d:10:06:c5:7f:e7:43:67:a8:
e0:df:d2:0a:71:0d:3c:6f:52:43:dd:ab:04:04:5a:
b5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1B:59:51:B4:B4:24:CB:6E:78:38:8B:91:23:95:23:E8:A9:72:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/049614FA4C6711F1B8A73FF5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.0.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:ef:6a:ab:d1:0d:94:5a:3a:a2:2e:50:dd:16:89:65:c1:84:
0e:50:5e:4a:75:bf:82:25:93:1f:3c:bc:bd:01:49:5f:28:b7:
a5:29:75:08:48:4c:36:06:fb:a7:32:6e:71:30:01:09:75:65:
2e:77:2e:94:e7:9f:ac:de:12:3f:24:a3:81:7b:23:63:bf:a3:
ed:bf:91:1b:26:96:16:af:8e:62:ea:ab:e9:4b:95:12:48:ba:
72:3e:43:aa:22:60:9a:f2:92:ce:40:3e:28:73:6a:76:25:a8:
d4:21:c8:19:f0:03:29:37:e4:d1:51:aa:3a:a3:5f:29:72:2e:
5f:42:78:81:1c:a2:9f:df:f4:fe:7d:d6:5d:b7:c8:0f:85:67:
d5:f3:f7:bd:1f:6b:2d:0c:5e:12:98:96:1a:9a:cd:ae:2c:3f:
a6:de:aa:bd:48:8d:ad:13:3c:08:3c:aa:00:77:9b:33:75:b6:
a4:e5:49:af:95:b9:e3:0d:8f:32:6f:e4:b1:cd:f0:84:39:52:
72:81:8a:46:fc:43:17:2c:37:1c:3c:fe:1f:43:5f:69:08:a4:
8e:8e:6d:0a:b5:20:4e:39:bc:19:2f:c3:80:62:1d:cd:90:5b:
c3:53:b5:f6:40:f4:54:f2:04:93:e7:be:c7:86:98:6f:59:67:
30:6c:58:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:52:10 2026 by rpki-client