Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7C5C7A44D0711F1970006CDCE1D38B0.roa
File: C7C5C7A44D0711F1970006CDCE1D38B0.roa (raw, json)
Hash identifier: oJZTY9RDRxJYsFWQsxTZ1CeSTYbkjyS3iFrfopI0Yrg=
Subject key identifier: 04:E0:A9:0C:AB:4F:96:46:89:5D:06:23:2C:21:28:E2:BC:05:76:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CAF6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7C5C7A44D0711F1970006CDCE1D38B0.roa
Signing time: Mon 11 May 2026 07:05:24 +0000
ROA not before: Mon 11 May 2026 07:05:19 +0000
ROA not after: Wed 17 Jun 2026 07:05:19 +0000
asID: 49581
IP address blocks: 154.83.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117494 (0x1caf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 11 07:05:19 2026 GMT
Not After : Jun 17 07:05:19 2026 GMT
Subject: CN=6a017fb4-e2c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:3a:ea:b5:cf:88:ef:88:f9:88:71:64:97:
e8:fe:99:0b:d0:d7:4e:3b:24:ea:d3:8a:cc:b2:84:
9e:7d:41:be:11:cf:94:75:35:51:fd:37:47:39:b9:
8d:bf:81:ba:4c:75:7d:09:26:7f:e4:3a:9a:e2:f0:
93:5c:22:f6:45:0c:f1:c6:96:22:e3:d2:4f:6a:ef:
bf:90:3e:56:2a:f5:9b:04:79:c0:b5:7c:18:49:10:
95:71:dd:48:1f:85:64:24:73:2b:42:77:7b:f7:0b:
a7:14:11:8e:ea:69:23:3c:33:7f:51:15:de:21:59:
9a:f9:40:06:42:43:b3:28:59:1b:d4:57:b6:0c:03:
4d:4a:e9:60:97:48:81:22:ce:2f:ff:6d:6c:92:bd:
d6:b6:57:d8:57:66:55:f3:bf:92:d6:3d:4a:13:6b:
ba:8e:5b:73:36:f0:6f:c9:00:b9:08:1f:e0:91:e4:
ee:a3:b6:48:ed:ff:e0:47:e7:e5:60:dc:36:61:63:
35:20:b4:51:48:2f:96:9e:09:5a:90:9f:83:12:4d:
7e:36:86:3a:f6:ec:9c:b1:d4:5b:67:a8:6c:bd:7f:
ee:3c:96:8a:ad:1a:68:bc:69:41:81:15:c7:f2:0c:
bb:65:bd:c6:19:e8:ef:b6:4e:88:02:c3:5d:15:1e:
0d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E0:A9:0C:AB:4F:96:46:89:5D:06:23:2C:21:28:E2:BC:05:76:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7C5C7A44D0711F1970006CDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.149.0/24
Signature Algorithm: sha256WithRSAEncryption
30:a4:11:0e:88:6f:e0:68:65:8e:18:52:cd:54:38:04:fe:a2:
bc:83:a1:f0:11:11:b2:59:50:d7:29:f4:14:28:bd:ee:fd:a3:
50:c0:6c:23:2d:70:0a:a9:64:12:3f:ae:f9:72:24:a2:bb:34:
92:c7:50:38:c6:6f:9b:ec:71:49:05:0b:f6:41:9a:65:5f:99:
e6:75:7e:4b:54:d3:42:b9:9a:ea:f3:fb:3a:97:97:3d:ef:21:
3b:2f:d9:8e:93:de:65:90:10:ed:d3:47:3f:1e:64:67:27:d1:
4a:52:e3:14:89:e4:7f:60:30:db:04:07:1e:cb:a7:34:ca:2f:
77:cd:14:47:e3:28:64:86:8c:8b:47:19:2b:23:2e:4f:f4:c6:
20:1b:33:8e:a7:d9:3c:25:56:8d:0f:76:7b:54:18:88:0e:d1:
4d:a7:36:f8:80:03:d0:74:2f:3a:d3:77:74:54:bc:a9:6f:67:
91:93:c8:1d:80:56:5e:0b:5b:b9:73:35:92:a1:62:98:c6:97:
00:12:23:b8:20:d2:fb:9d:b4:ea:06:fd:2c:33:c0:45:da:d4:
74:24:cf:30:cd:83:39:d3:52:37:e4:ea:5a:b1:57:5e:ad:d8:
d8:b8:43:a2:90:11:e3:42:83:ab:57:af:a0:77:a5:3d:d3:de:
26:89:65:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:10:39 2026 by rpki-client