Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4878BD4664B111F1A62E43B7CE1D38B0.roa
File: 4878BD4664B111F1A62E43B7CE1D38B0.roa (raw, json)
Hash identifier: cIf84NQPlZATWSsZsoLXlOYmYig4Dr92mByN44uW8y4=
Subject key identifier: 57:7D:6F:47:14:F6:16:31:A6:98:FF:33:C4:9E:92:04:02:74:AD:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D26A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4878BD4664B111F1A62E43B7CE1D38B0.roa
Signing time: Wed 10 Jun 2026 09:46:42 +0000
ROA not before: Wed 10 Jun 2026 09:46:37 +0000
ROA not after: Fri 10 Jul 2026 09:46:37 +0000
asID: 139613
IP address blocks: 154.208.12.0/22 maxlen: 24
154.208.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119402 (0x1d26a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 10 09:46:37 2026 GMT
Not After : Jul 10 09:46:37 2026 GMT
Subject: CN=6a293282-8be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3f:eb:02:b5:55:4a:b6:79:8b:71:47:a1:18:
75:98:85:90:14:07:89:4c:a6:61:6d:60:c0:ef:b6:
0c:c4:af:c8:55:4a:83:d7:f1:af:2c:2c:b8:bc:1c:
8c:ec:6b:88:03:fd:e4:b8:ae:7a:fd:9b:dc:b4:b1:
90:1b:65:71:89:3d:53:ed:f3:20:07:c0:a0:ec:c9:
23:3f:19:d1:b4:0e:90:a8:fc:f7:40:43:7b:27:3a:
b3:44:03:1f:ce:76:14:62:ca:18:96:e2:2f:3a:32:
ff:b2:8e:c3:a2:55:2b:51:ba:53:bd:20:41:2c:8e:
44:33:a7:09:4a:2c:d5:7d:9f:58:d5:46:f5:02:8c:
a2:da:8d:de:8b:11:9d:bb:f4:3d:44:28:aa:d9:e5:
8f:2d:12:ce:d8:35:b3:25:48:29:32:65:52:c8:c0:
ab:d3:68:69:f4:be:24:6b:da:77:e0:ed:55:4c:13:
ea:7a:25:c7:c0:18:c3:17:dc:7f:6c:1c:2c:ce:0f:
6a:92:11:a3:c2:86:9d:cb:97:48:3a:88:74:ed:6b:
73:dd:c1:9a:90:26:62:94:9e:ea:e4:ab:04:69:af:
3a:04:4b:fd:3e:ea:d0:73:9a:cb:a5:d2:3a:de:db:
3c:0f:90:e1:90:7b:cd:71:da:33:0b:a3:5b:9c:3e:
f8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7D:6F:47:14:F6:16:31:A6:98:FF:33:C4:9E:92:04:02:74:AD:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4878BD4664B111F1A62E43B7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.12.0-154.208.31.255
Signature Algorithm: sha256WithRSAEncryption
95:0b:7d:59:08:ca:cd:25:1d:b8:7a:ac:f8:db:84:57:f0:c0:
f3:5d:ca:c0:7d:74:e0:74:31:dc:53:29:8d:cb:db:87:cf:28:
f0:38:bd:a0:a7:d9:ab:9d:ff:62:06:be:c1:d6:83:73:cb:f8:
09:e2:5c:fb:fe:9f:50:c0:fa:e3:69:06:f3:ab:a7:5a:47:ea:
e9:d2:03:b5:35:64:83:31:58:96:2e:18:86:07:5e:30:85:98:
4e:17:cf:31:16:40:35:a9:e2:89:6a:48:fb:b6:33:73:06:b8:
96:6d:e5:87:8e:ba:fb:a8:cc:1d:03:db:15:c8:6b:2a:9d:36:
c4:e1:e3:e9:7f:c7:98:c2:fb:5f:ea:9c:05:18:af:a6:01:4e:
31:74:9e:58:1e:5c:2b:f6:a0:e2:d3:7c:a7:14:23:51:4c:8e:
a3:45:2b:c5:64:ce:e0:9b:ce:7b:4f:f8:d9:11:27:39:ca:e3:
d6:9f:a1:a2:65:50:26:40:f7:53:ae:2c:06:88:47:31:29:9d:
9a:a3:56:a1:90:c0:ae:66:5d:fd:f0:28:ab:40:d1:b8:60:26:
62:14:89:d1:45:07:73:1c:aa:55:68:b2:a1:96:f1:f7:34:b3:
b6:66:93:a4:b1:57:e1:9d:03:13:ef:91:e4:6e:6b:93:75:1b:
3f:d6:77:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:20:47 2026 by rpki-client