Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A497E4E39F511F1913218DDCE1D38B0.roa
File: 4A497E4E39F511F1913218DDCE1D38B0.roa (raw, json)
Hash identifier: 7HM9DcswVU/daAVPFkAVFhzAajPTGA2SdKpX7XNorn0=
Subject key identifier: 40:95:E5:0E:B3:7C:C9:3B:45:77:62:45:52:A5:57:C0:FC:2C:F1:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C5BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A497E4E39F511F1913218DDCE1D38B0.roa
Signing time: Fri 17 Apr 2026 00:35:11 +0000
ROA not before: Fri 17 Apr 2026 00:00:05 +0000
ROA not after: Sat 16 May 2026 00:00:05 +0000
asID: 271916
IP address blocks: 154.205.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 16:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116158 (0x1c5be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 17 00:00:05 2026 GMT
Not After : May 16 00:00:05 2026 GMT
Subject: CN=69e1803f-898b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fb:06:34:35:6a:fe:6f:0b:72:cb:1e:55:e0:
c4:8b:23:0f:46:0f:0a:f1:da:26:d5:64:e5:e8:ce:
11:4b:ca:5e:9a:da:9d:2e:57:21:c2:9c:78:b5:8e:
88:2f:79:18:1d:e3:d5:04:6b:7b:f1:be:1f:50:bd:
a1:6e:c7:96:15:b7:ad:d9:c8:91:a8:b7:4c:d2:96:
4a:46:c0:6f:2b:97:26:68:a3:98:b5:10:64:85:17:
08:0e:c9:a7:1c:c5:35:3a:cc:ab:d2:d5:2f:92:43:
6d:24:b7:97:57:f3:7a:d0:fb:a6:b6:b5:07:37:1c:
d7:a7:ce:df:93:f0:70:ec:c1:10:76:3b:02:ba:6b:
2b:2c:ca:ba:f9:d4:1d:4f:d5:7d:30:ef:ad:49:e8:
ed:2d:12:80:a0:15:d1:15:38:5d:ad:e0:36:95:6e:
17:23:45:57:3e:cb:ed:5b:03:78:9d:3f:67:eb:93:
7c:5d:19:62:48:eb:c2:48:b0:74:44:98:e4:24:2a:
ce:aa:04:e2:8a:20:0c:d5:27:3a:4b:25:67:66:db:
8f:60:b4:fe:07:d7:c4:b9:8c:db:ce:bb:3c:77:ff:
61:7b:fb:dc:20:8c:61:36:af:9b:d0:65:cb:27:e0:
bf:6a:25:0f:14:b3:99:8a:d6:13:67:56:e2:08:93:
5d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:95:E5:0E:B3:7C:C9:3B:45:77:62:45:52:A5:57:C0:FC:2C:F1:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A497E4E39F511F1913218DDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.24.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:4c:db:3a:d2:b7:1d:8c:3b:43:7d:47:9c:38:ba:35:61:25:
96:e1:0e:4a:59:75:2b:82:0b:2f:60:8f:88:3c:28:b6:0f:88:
c8:57:42:5a:32:9f:49:ed:21:cc:4d:a1:d6:6b:70:a1:52:e3:
fd:f2:4e:bd:15:bb:dc:1f:80:19:32:40:cc:3d:c8:ff:00:32:
d4:f8:60:1f:8e:dd:a1:96:10:e1:23:32:6b:68:b1:ad:ca:f5:
ff:ca:65:91:6d:92:7c:47:57:08:58:c1:88:f9:1c:ed:1c:bf:
e4:1b:fc:85:5b:13:53:d4:c9:aa:35:7c:82:3b:06:fc:d0:19:
1d:d6:70:50:92:88:4f:35:97:d6:10:ee:d5:3b:d2:8a:5b:b6:
89:f5:f4:d8:79:27:9a:fb:00:08:e2:ec:a5:85:8e:d1:82:bb:
cf:0f:f3:d7:43:9b:01:f4:8d:93:f9:ba:08:3c:91:72:74:0b:
2a:9b:b0:c3:83:53:53:d6:2c:90:5f:70:ea:e5:c2:4e:56:ee:
34:11:24:c5:54:4b:5e:3a:56:00:2d:7c:e2:05:8f:cb:dd:de:
8b:43:db:71:f3:fb:04:6d:2e:9c:4a:cf:2e:63:83:36:c9:49:
28:ef:e8:41:b0:a3:e1:e3:24:89:7c:1e:98:7d:93:4c:0f:ed:
02:66:11:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:33:34 2026 by rpki-client