Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CC38E0E30D511F181D3C6BDDAE4EC9C.roa
File: 4CC38E0E30D511F181D3C6BDDAE4EC9C.roa (raw, json)
Hash identifier: BqoZcpeYrb1InQFDBHUhrSZeWuQOGcqcBydxGl8+Ve0=
Subject key identifier: 3D:03:C9:DB:FF:96:1F:58:35:1F:A4:48:07:A3:8E:C8:E7:AB:FE:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C30E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CC38E0E30D511F181D3C6BDDAE4EC9C.roa
Signing time: Sun 05 Apr 2026 09:53:30 +0000
ROA not before: Sun 05 Apr 2026 09:53:26 +0000
ROA not after: Sat 02 May 2026 09:53:26 +0000
asID: 61112
IP address blocks: 154.82.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115470 (0x1c30e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 5 09:53:26 2026 GMT
Not After : May 2 09:53:26 2026 GMT
Subject: CN=69d2311a-50e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f3:c8:b0:16:6c:69:c0:c5:a0:6a:68:d8:6d:
08:21:b3:dd:94:e7:6d:b4:84:96:a2:f8:1e:a2:3a:
6c:39:5f:24:05:97:31:dc:2e:29:fd:72:ba:18:e7:
75:0a:6e:9b:0d:33:44:20:98:f2:ad:f6:81:b3:b8:
5a:44:f7:d4:2f:06:31:42:cb:ec:d9:fd:b3:a9:f7:
6c:27:6d:36:62:32:f7:3a:1b:38:21:72:46:c0:9f:
d3:15:6a:ab:ef:a4:62:10:ee:c6:22:14:0b:0c:44:
82:2a:91:1a:fb:74:f3:8d:02:e1:ba:55:93:17:e7:
be:49:fb:c7:b7:b9:8f:50:11:62:88:d7:37:6f:b4:
53:47:95:fc:13:69:9a:11:4d:e1:4e:75:f2:07:f7:
a6:b1:75:f8:d1:b6:10:ad:6f:b9:dd:98:3b:17:04:
00:e2:33:77:66:1b:d6:3c:d8:15:9f:a1:22:4f:f6:
20:85:dd:55:77:2b:41:37:c7:42:77:ed:09:40:2d:
64:84:f0:2b:64:c0:97:92:50:f6:86:42:57:1c:e3:
51:1b:7c:08:4a:4b:2a:d4:8a:23:66:3b:1d:25:d9:
b7:3f:22:b6:0b:08:68:06:cf:47:10:64:cd:84:c0:
2d:e4:98:2f:e0:f3:55:fc:0f:69:6a:54:8c:3f:6c:
a4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:03:C9:DB:FF:96:1F:58:35:1F:A4:48:07:A3:8E:C8:E7:AB:FE:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CC38E0E30D511F181D3C6BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.138.0/23
Signature Algorithm: sha256WithRSAEncryption
80:72:2d:0d:40:4e:fd:ec:9d:ab:d3:0e:de:f9:b8:d9:60:65:
6b:67:71:0d:c7:89:7a:1b:9d:1e:5e:a7:a6:e4:e5:df:c6:9f:
f2:5c:ad:48:97:40:5b:48:2e:7b:8c:38:25:d6:54:1a:fb:a8:
07:62:fd:67:f7:4a:3e:7b:84:5d:e9:6f:3f:aa:08:a8:45:38:
c3:ff:57:0e:0f:6a:a5:a0:0c:ba:d9:cd:c0:38:02:15:70:4e:
4e:2f:10:36:fb:81:01:5a:1e:ad:f7:9d:4e:15:78:09:9f:f2:
d1:14:be:88:f2:ba:cf:fd:7c:33:e3:39:43:1f:4c:d0:33:4c:
2c:44:f5:e9:cc:0d:13:9a:a8:b7:44:03:b5:ba:5b:cf:f6:c8:
10:f0:86:78:48:dd:48:51:d7:4b:15:aa:a8:06:1b:32:97:99:
a2:f1:bb:84:6b:93:0d:ee:a5:6e:33:97:82:d5:af:86:9e:14:
d8:90:22:71:4d:5c:9f:79:22:3e:49:d4:4e:73:4e:aa:10:f9:
3b:3f:f1:4f:4f:7c:eb:29:a2:ad:7b:d4:a4:65:75:6a:14:77:
f5:87:a8:b9:07:fa:4e:59:30:42:19:3a:27:46:70:b8:1e:f3:
49:e7:05:6e:bd:f6:c8:d8:38:a6:24:79:fe:d5:e1:42:fb:94:
87:0d:18:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:25:28 2026 by rpki-client