Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AFBA8A427B611F1B48200CEDAE4EC9C.roa
File: 4AFBA8A427B611F1B48200CEDAE4EC9C.roa (raw, json)
Hash identifier: u5ZRzRcKG4LfLEP2WQzFBT/f02W/4nTah9IlHUbmjr0=
Subject key identifier: 25:68:A3:A2:74:28:5C:1E:92:53:D0:56:45:5C:8A:28:7D:D8:26:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C0CB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AFBA8A427B611F1B48200CEDAE4EC9C.roa
Signing time: Tue 24 Mar 2026 19:18:52 +0000
ROA not before: Tue 24 Mar 2026 19:18:47 +0000
ROA not after: Thu 07 May 2026 19:18:47 +0000
asID: 20326
IP address blocks: 154.193.156.0/23 maxlen: 24
154.222.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 30 Mar 2026 00:07:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114891 (0x1c0cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 24 19:18:47 2026 GMT
Not After : May 7 19:18:47 2026 GMT
Subject: CN=69c2e39c-e251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:22:b2:71:1d:f0:e0:20:75:67:a5:0a:8f:c4:
56:9d:bf:d6:bc:84:7c:62:64:4d:c2:d7:73:16:1d:
89:a6:68:5a:a2:5f:51:88:79:0b:66:59:c4:7a:be:
6f:e9:74:cc:4c:e5:a5:72:e6:71:4e:d6:9c:41:4c:
cd:81:0a:ed:f1:de:5a:82:c1:50:38:66:64:41:ce:
6c:b0:91:5c:e8:0d:62:e6:a8:98:e0:9a:a7:4e:37:
a9:89:39:45:ce:ba:ca:81:4d:da:85:9c:37:0e:b9:
64:8e:df:68:85:84:99:b0:78:46:2c:91:f8:4e:c3:
97:eb:12:88:9c:79:f4:a8:2c:13:8d:03:56:e4:ee:
7f:11:6d:cb:a9:3b:c0:d7:63:c9:60:d1:b6:03:ca:
45:95:6c:c1:d3:7d:83:79:10:90:11:86:d4:4d:33:
39:d9:e4:3f:6f:fa:83:4f:a8:31:ab:3a:38:a3:46:
76:56:51:d3:12:86:00:1c:6d:f9:73:51:99:81:42:
d5:79:2e:68:2d:35:7b:73:b8:be:62:0d:a4:b3:e5:
90:27:7b:74:0b:6a:c5:e9:1a:ab:9e:23:d7:a4:3c:
4a:75:a5:3b:e0:c2:85:c5:68:2b:e0:0f:89:47:d0:
ad:e1:36:b5:61:11:91:64:e1:0d:2f:ca:df:d4:22:
1e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:68:A3:A2:74:28:5C:1E:92:53:D0:56:45:5C:8A:28:7D:D8:26:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AFBA8A427B611F1B48200CEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.156.0/23
154.222.118.0/23
Signature Algorithm: sha256WithRSAEncryption
04:5c:2d:22:8d:97:56:d9:24:da:61:4c:34:a2:10:af:df:79:
e0:92:ce:0a:3a:49:4d:8c:3a:cc:b0:31:d1:29:7b:1b:94:80:
aa:67:d2:20:b8:38:a4:60:d1:4d:98:7c:48:b9:5d:36:8c:29:
04:49:dd:53:77:d4:13:fa:34:2c:39:0c:ae:0f:28:85:bf:b7:
c4:5d:97:56:38:8e:45:d1:be:b5:ab:36:0f:bc:f3:74:dd:c5:
60:be:b0:6d:33:d1:9c:11:62:22:9b:19:d7:db:8e:6e:af:f6:
c3:86:7a:a8:08:f9:4c:76:25:ac:f3:bb:91:e1:b2:de:1b:c6:
11:b8:81:ba:03:15:ab:d5:d5:aa:24:08:40:70:df:41:87:73:
f0:7f:28:ea:07:b4:17:16:92:b1:a9:7f:51:0a:19:48:0a:ad:
a3:cf:a1:0a:b1:68:11:e3:84:e5:bd:e2:2f:b4:9b:d9:c3:14:
f4:5e:af:3e:91:f2:cb:81:d0:0a:b7:93:41:9b:7a:15:88:7e:
f5:17:d9:af:08:c8:53:40:e8:b0:a8:44:b6:5d:30:4f:da:88:
13:e1:e2:58:cf:ae:97:a8:78:d6:09:70:c7:31:fd:ba:30:e9:
86:2c:6f:4c:bf:da:24:76:25:a1:86:46:f8:35:91:3f:01:40:
bd:b8:b4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:19:31 2026 by rpki-client