Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4533E4A44C7311F1B1D3C7BDCE1D38B0.roa
File: 4533E4A44C7311F1B1D3C7BDCE1D38B0.roa (raw, json)
Hash identifier: vtCfuf4PcqABrFRUxYGWbyJRbZwO2y9vw0kOQeLmnRo=
Subject key identifier: A0:33:B8:54:F3:AE:3D:FB:A4:4B:65:DF:7C:56:7C:3B:87:F3:FA:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CACB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4533E4A44C7311F1B1D3C7BDCE1D38B0.roa
Signing time: Sun 10 May 2026 13:22:19 +0000
ROA not before: Sun 10 May 2026 13:22:14 +0000
ROA not after: Tue 19 May 2026 13:22:14 +0000
asID: 17497
IP address blocks: 154.82.19.0/24 maxlen: 24
154.94.2.0/23 maxlen: 24
154.94.2.0/24 maxlen: 24
154.94.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 06:17:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117451 (0x1cacb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 10 13:22:14 2026 GMT
Not After : May 19 13:22:14 2026 GMT
Subject: CN=6a00868b-dabf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:50:94:2c:b1:5b:fe:4f:4c:a2:72:0d:b6:1c:
4d:bb:e7:46:89:df:e4:95:48:2a:e3:66:f0:4e:0f:
0f:b1:e9:86:d9:38:86:33:56:d2:d8:0e:6c:76:52:
68:20:c7:6f:e8:ba:3d:de:c2:14:35:f5:6e:7f:55:
10:29:2a:c5:1c:52:2b:0b:93:9c:fa:93:bb:cc:ff:
46:e8:f5:7d:00:09:bc:65:3e:bd:66:82:33:85:d8:
79:6a:57:d7:a9:4b:cf:4e:58:14:18:08:fd:f5:ae:
52:31:30:41:9d:3d:e7:90:41:52:9f:50:a4:19:8b:
83:34:0e:62:d9:22:3e:30:96:b9:bf:73:d9:eb:5d:
05:a2:3f:a4:2e:96:a9:3f:79:26:ad:b2:71:a7:cf:
d1:dd:af:19:14:f6:b8:e2:ad:14:4b:0c:20:34:6f:
a8:31:18:d3:07:61:ac:f8:88:7d:bd:0f:97:a9:47:
e4:f3:2a:98:36:fc:c7:2f:f8:db:52:d0:1f:c3:5f:
8e:47:64:e9:c4:76:8e:93:b1:6b:1c:02:79:86:ad:
53:50:04:25:f8:64:6d:ca:b0:49:65:89:67:15:59:
09:2f:fc:dd:cd:a8:90:6f:71:e9:6f:55:ab:d5:d9:
4b:ec:7a:eb:75:f0:c7:ef:77:7a:a0:c2:ac:40:d8:
45:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:33:B8:54:F3:AE:3D:FB:A4:4B:65:DF:7C:56:7C:3B:87:F3:FA:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4533E4A44C7311F1B1D3C7BDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.19.0/24
154.94.2.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:dd:ea:fb:4c:35:d5:72:c6:a0:46:18:bd:f7:5e:9a:51:64:
70:eb:7c:d3:9b:8b:3a:26:a9:ca:eb:43:8a:34:e0:ef:4e:b5:
96:6e:5f:56:41:2e:45:b9:ad:13:81:7d:6f:73:41:36:26:19:
a1:1a:9d:04:dd:53:f7:2e:94:44:11:74:45:72:e1:f0:e4:27:
0d:fc:0a:67:29:71:61:2a:25:f5:16:4a:f9:a0:fe:6f:ec:dc:
cf:dc:0b:3d:b9:b5:2e:8e:fa:b7:c9:33:4b:c2:10:67:8c:51:
c9:79:76:59:aa:ba:c0:a2:51:5f:35:a4:3b:0d:bd:d2:f6:14:
a6:8d:a2:41:82:7e:63:83:8e:8d:3d:1c:92:0f:79:36:c0:4e:
b2:70:24:f4:e6:b5:e5:bb:d3:75:f2:48:d1:a3:48:d6:cf:44:
b8:69:4b:5d:b5:57:62:c7:61:08:80:0e:80:81:67:e4:f4:4e:
c6:7a:0f:ce:69:a8:8a:a6:96:38:3f:1b:bc:1f:0f:3c:a6:bb:
d9:a9:a1:88:2d:99:e8:70:91:81:9f:f3:a4:57:66:a7:16:eb:
48:39:c8:db:7b:fa:76:00:ed:f7:09:45:cc:83:6b:75:67:d5:
db:60:b6:09:a1:13:fa:0f:97:d4:e4:46:fa:8a:8f:3d:2f:dc:
1f:8c:a2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:17:56 2026 by rpki-client