Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45040B3A4F6B11F18FBAE9D1CE1D38B0.roa
File: 45040B3A4F6B11F18FBAE9D1CE1D38B0.roa (raw, json)
Hash identifier: kdzk433TrLQ7y1DTVwGWYEL/dZp0ki9JO61cwS5cP/Y=
Subject key identifier: 8A:2B:A1:06:A7:21:64:CB:39:19:7B:3E:3B:BE:6E:16:06:39:FA:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CB9B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45040B3A4F6B11F18FBAE9D1CE1D38B0.roa
Signing time: Thu 14 May 2026 08:02:37 +0000
ROA not before: Thu 14 May 2026 08:02:31 +0000
ROA not after: Mon 08 Feb 2027 08:02:31 +0000
asID: 136907
IP address blocks: 154.81.16.0/20 maxlen: 24
154.86.32.0/20 maxlen: 24
154.86.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117659 (0x1cb9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 14 08:02:31 2026 GMT
Not After : Feb 8 08:02:31 2027 GMT
Subject: CN=6a05819c-9138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:19:52:a2:b4:8b:a1:9e:60:fc:5a:ec:e7:b2:
55:d1:14:20:7b:bf:d5:0b:bc:e5:3e:77:61:64:15:
3f:ce:8a:f5:42:29:43:77:61:49:94:06:f9:74:fb:
b8:dd:ff:9b:c9:cf:d0:d6:9f:58:9b:f2:04:c9:4b:
02:d5:c0:a1:a9:60:3d:5b:69:b1:90:90:65:2d:45:
82:52:9f:1f:16:af:6a:b3:98:2f:d8:13:5f:8f:5c:
5f:32:8a:17:97:13:f0:d2:d5:14:11:55:88:d5:f6:
c6:c2:68:de:b9:34:ab:21:2b:9d:e0:fe:48:94:d9:
b9:cd:8c:e4:74:bc:1a:da:bf:52:d4:fc:d1:f9:86:
b6:60:64:48:7a:6a:fe:0e:8d:33:4c:90:26:fd:96:
fe:68:d8:46:2f:68:04:1f:7e:4d:23:23:fc:f6:11:
8c:a1:9f:25:d3:20:14:74:ef:df:2d:46:b0:1a:4b:
02:03:95:53:b0:d3:17:4e:ed:bf:b9:61:3d:b8:1b:
05:27:47:5a:1d:19:13:65:2f:44:8a:d6:37:b8:5e:
b2:18:fc:ea:30:a3:6e:80:15:c8:51:77:3f:19:ee:
12:29:30:dd:f7:68:5b:af:85:43:a5:e7:17:4a:28:
3c:f4:12:0a:50:3b:08:9c:34:d0:b8:4c:b5:bf:6e:
78:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2B:A1:06:A7:21:64:CB:39:19:7B:3E:3B:BE:6E:16:06:39:FA:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45040B3A4F6B11F18FBAE9D1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.16.0/20
154.86.32.0/19
Signature Algorithm: sha256WithRSAEncryption
1b:04:e9:5a:d9:b5:e4:26:2d:c3:85:0a:9c:be:fc:f8:89:9c:
59:53:29:c9:12:77:db:1a:c0:ee:f6:cd:38:26:56:b8:c4:3a:
70:e2:bf:d3:a5:fa:de:53:6b:79:1b:bd:d3:4a:0d:36:f6:0b:
23:6c:5f:24:40:80:77:57:e3:d0:3f:2a:78:d2:eb:fd:8a:6d:
a0:a2:cd:05:fe:77:6a:a3:45:d7:be:92:73:09:bf:ef:11:a3:
59:d6:94:ec:4a:a0:47:f0:51:1a:96:4e:7b:48:81:21:2b:9a:
4e:b9:e1:33:9d:ab:fb:20:e0:fd:5c:5e:3e:9f:45:16:0d:a7:
6a:60:a6:e2:4f:81:3c:eb:97:92:41:1a:d2:0b:6b:00:f9:46:
5b:b8:a2:63:6d:d3:60:d9:82:62:87:f7:88:12:da:f4:84:99:
8f:37:60:cd:fe:b4:44:eb:0d:7a:7f:22:18:e2:2f:89:b6:7a:
53:0a:91:3d:71:16:5b:81:e3:b1:82:88:cd:5b:5e:1d:a7:f4:
e2:b6:f6:db:73:46:1c:21:66:5a:04:de:ac:0c:a3:52:03:c8:
7c:3e:7e:ad:10:b7:7c:1d:c6:75:11:88:1a:0e:91:da:03:77:
32:9a:21:2b:4f:77:76:0c:0e:ca:6f:0c:b5:ae:99:05:c0:13:
63:ca:39:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:14 2026 by rpki-client