Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4605E55629AC11F1804E6ACBDAE4EC9C.roa
File: 4605E55629AC11F1804E6ACBDAE4EC9C.roa (raw, json)
Hash identifier: P4uwxKnu/d0e7M6V49dqS3UO/NaCswH/LN+93sKYXVk=
Subject key identifier: 8C:9F:39:63:AE:C3:6B:D3:95:7F:F6:EA:2B:03:37:3B:38:CC:9A:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C10C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4605E55629AC11F1804E6ACBDAE4EC9C.roa
Signing time: Fri 27 Mar 2026 07:12:12 +0000
ROA not before: Fri 27 Mar 2026 07:12:06 +0000
ROA not after: Sun 10 May 2026 07:12:06 +0000
asID: 401783
IP address blocks: 154.83.10.0/24 maxlen: 24
154.83.24.0/24 maxlen: 24
154.92.210.0/24 maxlen: 24
154.92.211.0/24 maxlen: 24
154.92.212.0/24 maxlen: 24
154.92.213.0/24 maxlen: 24
154.92.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 15:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114956 (0x1c10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 27 07:12:06 2026 GMT
Not After : May 10 07:12:06 2026 GMT
Subject: CN=69c62dcb-4ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:31:85:97:74:c5:0a:67:af:30:9a:f7:cc:ad:
38:4c:7f:89:22:85:f5:3f:03:a6:e1:a7:b0:04:56:
51:7a:b2:15:08:ad:fb:d2:57:80:9b:3f:9f:e4:48:
1b:6d:eb:1b:b8:2d:26:d3:23:23:c9:db:b4:3d:c5:
12:57:e5:e9:65:e4:4d:e5:2e:84:af:02:8b:2e:61:
f8:d9:59:05:40:a9:72:2e:76:17:75:b7:91:48:11:
be:3d:46:0e:7a:8b:da:ae:19:03:7c:e9:01:46:a8:
6e:43:3e:09:8e:8b:e2:7b:c8:5c:24:24:88:93:8d:
30:c1:b9:40:ee:b2:e2:e6:5a:81:fa:42:b9:78:64:
3a:44:75:6f:c9:85:1b:76:91:43:4e:38:85:01:90:
d6:d4:49:65:e2:24:26:d5:92:a6:78:58:f8:73:92:
ec:ea:31:23:7e:42:df:2d:c4:d0:23:4e:b2:7a:5b:
c6:4f:ee:6c:7a:e6:bd:94:a5:93:87:10:ab:4d:e6:
80:e3:78:1a:0c:17:51:e7:82:8b:72:e1:ed:77:40:
9b:e0:f9:b9:9e:41:37:43:de:a7:e7:7d:93:e2:2c:
16:b5:14:ad:ac:f5:be:32:ad:dd:08:e4:44:6a:ea:
d1:a4:3a:86:36:99:50:7f:18:bd:8f:57:f1:d9:64:
76:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9F:39:63:AE:C3:6B:D3:95:7F:F6:EA:2B:03:37:3B:38:CC:9A:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4605E55629AC11F1804E6ACBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.10.0/24
154.83.24.0/24
154.92.210.0-154.92.214.255
Signature Algorithm: sha256WithRSAEncryption
6e:dc:cb:36:5a:cb:8d:fd:f4:f4:c6:87:82:1a:af:69:41:bf:
b9:5a:37:27:a8:6e:82:00:4c:33:2d:65:5f:ba:d4:9f:87:bb:
d0:ba:b4:fd:ab:a1:bb:c0:0a:c3:8c:20:3a:28:62:44:66:cf:
32:0e:0d:f6:8b:3c:a1:41:ea:26:f4:cb:0f:97:cd:28:fe:4e:
fd:9e:79:6e:4b:8f:e8:1c:b9:18:8c:c1:03:a5:1f:56:25:bb:
fd:44:72:63:61:49:c4:9f:ab:10:17:8d:3b:ba:9f:0f:8f:03:
5f:1c:87:79:9f:31:42:9f:85:c0:07:a0:04:a2:41:70:24:71:
a3:42:38:a1:76:f5:d6:b4:5d:f7:15:62:74:af:07:95:79:6b:
9e:e3:31:0b:c9:c5:fd:dc:84:04:f8:09:9f:41:d8:2c:4b:fc:
a2:4c:ce:e5:78:c9:58:6d:b8:31:18:05:90:a8:da:dd:69:79:
3e:1d:fa:14:b3:1e:5d:a5:d8:07:d7:ab:a9:20:9f:07:3e:d3:
38:e0:ae:71:a4:54:af:39:4f:e0:fa:e0:14:f9:44:27:d5:af:
3b:0c:45:ed:4f:47:5b:58:57:cb:32:72:47:fa:0f:08:6f:39:
87:0d:85:6c:f2:c7:6b:22:7c:a8:5b:6c:da:8f:68:89:e3:03:
e9:95:1b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:52:28 2026 by rpki-client