Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E02020A27C011F1A269FA86DAE4EC9C.roa
File: 4E02020A27C011F1A269FA86DAE4EC9C.roa (raw, json)
Hash identifier: x2CEpaPnY7u+9wT0y1/cxA32nJZO7CMA54vgGuCyJZ8=
Subject key identifier: EA:19:F8:E2:4F:60:29:CB:C9:01:F6:F2:B3:88:EC:7F:88:3E:0F:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C0E1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E02020A27C011F1A269FA86DAE4EC9C.roa
Signing time: Tue 24 Mar 2026 20:30:33 +0000
ROA not before: Tue 24 Mar 2026 20:30:28 +0000
ROA not after: Fri 01 May 2026 20:30:28 +0000
asID: 20326
IP address blocks: 154.82.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114913 (0x1c0e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 24 20:30:28 2026 GMT
Not After : May 1 20:30:28 2026 GMT
Subject: CN=69c2f468-8934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:09:9b:40:74:14:f0:c4:81:d4:00:e7:63:4c:
66:8a:e5:e1:c6:22:f8:47:a3:7b:86:7d:89:95:ce:
b1:49:d3:59:9f:9d:bd:0d:97:f0:1f:61:82:56:c1:
ae:81:35:82:57:17:74:aa:e4:03:28:43:97:23:9b:
36:76:cc:59:89:f5:94:e6:8d:33:d8:78:30:cc:66:
be:ce:34:78:6b:2d:63:29:5c:cd:c9:d9:d7:27:a0:
c7:19:1d:b6:14:ce:7e:b0:2b:6f:90:6a:ca:78:b0:
b0:75:c4:98:1b:44:07:6c:bf:2d:f1:22:3e:d9:31:
ad:a1:75:7f:68:ef:49:75:22:cf:e1:33:f9:91:d9:
9a:fb:c6:ac:89:0e:fc:49:19:f2:d0:b2:ac:10:01:
0d:c7:48:60:5a:1b:63:5a:48:5b:00:2b:ab:a7:58:
20:55:2d:6b:9a:61:5a:a3:f1:cc:ab:e6:b5:40:81:
47:1d:ca:29:b0:cd:9a:df:c6:93:5e:1d:90:28:41:
7b:aa:d0:f3:9a:00:c4:b7:bd:7c:6b:ff:4a:12:a4:
ea:ad:d8:c1:8a:8f:0f:9e:8b:0d:fb:e8:99:03:f7:
b3:9b:cb:b8:a3:e0:3f:10:03:23:de:78:6c:e5:47:
0a:df:ae:a1:fc:7a:3e:58:59:4d:28:d6:16:52:76:
89:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:19:F8:E2:4F:60:29:CB:C9:01:F6:F2:B3:88:EC:7F:88:3E:0F:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E02020A27C011F1A269FA86DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.193.0/24
Signature Algorithm: sha256WithRSAEncryption
71:78:cf:37:c4:6b:6f:66:4e:be:d9:56:48:bc:b0:68:bc:2d:
c5:bd:95:c5:bf:09:89:73:ce:0c:63:e7:1a:b9:ce:4e:be:cc:
e3:7a:26:ef:2a:44:87:17:25:05:a5:92:ed:04:18:fd:49:89:
7d:2b:f2:3a:ac:9e:ea:18:71:4b:39:39:c9:d6:03:5e:be:c1:
be:bf:b1:7b:94:d3:ad:92:b5:1d:d2:0b:f6:55:1b:1e:fc:82:
57:b3:18:65:cd:09:67:d0:56:4d:dc:97:32:a0:04:8d:8b:a2:
81:a0:e7:c2:ea:4c:2f:8d:1a:10:81:1b:fe:75:ac:1e:03:ac:
2a:4d:e7:52:ef:e3:7f:2f:dc:25:0c:89:1e:9d:90:f6:6b:3a:
4e:1d:bc:bb:3e:4e:65:1f:92:6b:ee:0a:af:71:9e:84:6c:29:
84:8f:eb:1d:dc:ff:3e:61:33:b0:f0:39:9e:ba:fd:8c:25:17:
04:f8:95:62:2c:2d:0e:f7:ea:b3:83:d8:1c:2f:51:a9:b6:20:
c5:85:01:cb:06:07:d2:5d:99:e0:46:5b:1b:f3:3d:b3:97:88:
66:75:85:e8:a1:68:d8:bb:64:06:53:38:44:0d:0b:f3:b8:8d:
f6:e0:a5:74:03:e8:71:63:bc:45:e1:9e:e6:71:fe:70:a1:92:
1d:72:02:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:10:44 2026 by rpki-client