Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B17B09265FC11F1BFD58AFDCE1D38B0.roa
File: 4B17B09265FC11F1BFD58AFDCE1D38B0.roa (raw, json)
Hash identifier: U6PZA980hK+8RgdIadaPWppIJAt1nc19QW57vSIg/fQ=
Subject key identifier: F5:0E:90:4C:A5:B3:68:5C:CE:72:A2:32:59:C1:C5:AD:6D:2B:5B:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D29C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B17B09265FC11F1BFD58AFDCE1D38B0.roa
Signing time: Fri 12 Jun 2026 01:16:09 +0000
ROA not before: Fri 12 Jun 2026 01:16:04 +0000
ROA not after: Sat 04 Jul 2026 01:16:04 +0000
asID: 139880
IP address blocks: 154.199.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119452 (0x1d29c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 12 01:16:04 2026 GMT
Not After : Jul 4 01:16:04 2026 GMT
Subject: CN=6a2b5dd9-551d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5f:a7:78:52:ec:90:9c:55:e1:3a:e3:22:30:
6a:98:79:29:85:fe:06:4c:a6:5b:3a:b7:4d:b9:a0:
ea:da:1d:fe:16:c2:92:37:9b:4a:59:ef:52:e7:98:
1e:a6:53:03:30:03:d7:eb:89:cc:c1:d0:39:d1:84:
9b:ce:5d:48:a1:2c:2e:28:4c:ec:78:f9:b9:cc:04:
4b:9d:61:e1:49:3d:9e:0a:96:d0:e9:42:f0:2d:3d:
83:fc:00:0c:c7:46:6f:34:6b:c5:fe:63:92:64:f7:
90:2f:aa:b4:8b:a1:27:39:49:06:05:a5:cf:f8:7f:
cf:f1:e0:11:c5:d9:4c:59:04:94:d9:d0:86:eb:de:
73:6a:1f:e0:b0:73:a6:81:8f:49:25:fe:b9:ff:b7:
02:56:6a:80:f9:b5:de:3e:3e:4c:b2:dc:7f:e6:f9:
6e:a4:b4:1e:e5:1c:ca:66:24:c9:44:58:d0:9f:3d:
e6:cc:1f:42:34:a0:ea:1e:ab:1d:d3:00:c9:83:35:
65:dd:02:14:ec:dd:e8:ab:fc:a8:f1:61:af:75:95:
b4:69:6f:ae:d2:79:f6:a3:0c:d3:78:b6:b6:ce:19:
20:98:6f:37:05:63:75:5e:9d:4b:69:5a:9c:45:ab:
e8:5b:cb:1b:48:ae:05:b1:da:fa:a8:1e:00:a7:da:
3f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0E:90:4C:A5:B3:68:5C:CE:72:A2:32:59:C1:C5:AD:6D:2B:5B:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B17B09265FC11F1BFD58AFDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.32.0/20
Signature Algorithm: sha256WithRSAEncryption
12:37:c4:15:5b:ac:33:22:69:2e:6a:1d:ff:05:b1:c2:cd:8d:
6a:76:be:47:15:9b:c7:3a:69:88:14:59:f5:af:14:38:dd:b0:
8e:80:51:81:43:f8:07:09:24:8c:47:74:75:96:85:ab:73:ae:
18:07:09:0f:a8:10:46:b0:d3:8d:de:89:17:fb:47:aa:7e:8b:
9c:79:60:24:0d:48:c9:48:6b:98:35:5f:bf:a3:5c:79:62:cc:
5c:a1:80:1c:e5:e5:23:e5:78:d6:c2:62:70:70:07:a5:34:00:
91:91:af:f7:a1:d2:85:94:ce:2f:a9:c9:be:9e:f0:64:d2:69:
04:dc:df:c7:1d:9e:78:71:6f:c2:57:48:b3:5f:5f:05:43:cd:
bd:43:41:45:22:12:f7:47:68:7b:3b:27:89:63:33:1a:0b:10:
cb:d8:82:86:dd:74:0c:11:66:04:2a:f7:af:b3:c1:b2:89:58:
6e:8e:ee:44:c7:e7:04:96:c8:56:f9:77:1f:25:27:74:dc:c3:
e3:58:50:f5:4e:3d:c7:9f:25:e9:5e:1a:3d:ff:ff:7c:6d:79:
5f:36:b4:8a:f4:3a:36:a7:08:34:52:c9:5c:48:94:9b:98:d6:
73:6d:64:52:67:fd:87:69:78:9b:7d:4e:a1:99:f6:c4:8d:35:
8d:ba:4b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:04:39 2026 by rpki-client