Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E0FBB8E349011F19B45E6EDCE1D38B0.roa
File: 4E0FBB8E349011F19B45E6EDCE1D38B0.roa (raw, json)
Hash identifier: uV1dh/rwZmzhN5t+kzWiri7j2kKLjGDLF+nAyD5beHE=
Subject key identifier: 25:C8:84:E8:73:78:96:2A:A5:90:EB:B8:3A:EC:4C:3E:AE:C4:D4:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C445
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E0FBB8E349011F19B45E6EDCE1D38B0.roa
Signing time: Fri 10 Apr 2026 03:49:42 +0000
ROA not before: Fri 10 Apr 2026 03:49:37 +0000
ROA not after: Sun 19 Apr 2026 03:49:37 +0000
asID: 32043
IP address blocks: 154.195.8.0/24 maxlen: 24
154.195.9.0/24 maxlen: 24
154.195.10.0/24 maxlen: 24
154.195.11.0/24 maxlen: 24
154.195.12.0/24 maxlen: 24
154.195.13.0/24 maxlen: 24
154.195.14.0/23 maxlen: 24
154.200.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 03:49:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115781 (0x1c445)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 03:49:37 2026 GMT
Not After : Apr 19 03:49:37 2026 GMT
Subject: CN=69d87356-dd83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:09:9d:db:6d:e3:cc:68:e9:44:3a:96:73:
f9:8f:ff:80:5a:b9:d7:c5:8f:fb:b0:98:6c:0a:08:
47:e7:a1:b1:9d:32:15:a8:1c:2c:a5:10:e8:2e:df:
64:4c:fd:23:ff:9b:0a:50:a9:c0:e1:ae:71:be:08:
50:c5:c2:bb:cc:d4:73:bc:69:4f:4f:f3:1d:95:a1:
70:82:d2:ef:91:86:15:90:d9:23:97:5c:bc:74:f6:
10:5b:3c:f8:93:88:64:70:04:cd:1d:94:0e:d0:1d:
52:64:83:06:99:3d:93:ae:0e:25:52:59:ed:58:c6:
c2:7b:1c:7d:9f:bc:ea:75:1c:f2:55:36:af:2c:7f:
f1:96:7d:72:d8:35:f3:63:ec:fb:e2:92:57:f7:9e:
1f:62:7a:4b:ba:c0:7e:4c:93:8a:8a:19:a5:86:03:
75:ab:21:85:34:a5:f2:5c:dc:09:ac:35:41:db:f3:
ab:cc:6c:f8:fb:cb:67:e1:e1:30:44:25:3a:fe:11:
f9:c3:66:88:aa:48:4a:80:4c:e8:07:b8:99:6b:ce:
8c:49:b1:bf:db:b5:d5:39:eb:03:06:ca:85:90:fa:
05:da:7c:bc:c5:16:3b:40:da:e6:f5:f3:16:54:da:
4b:51:36:61:76:85:59:d1:dd:65:e5:82:09:fe:68:
17:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C8:84:E8:73:78:96:2A:A5:90:EB:B8:3A:EC:4C:3E:AE:C4:D4:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E0FBB8E349011F19B45E6EDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.8.0/21
154.200.16.0/23
Signature Algorithm: sha256WithRSAEncryption
27:cd:91:7e:1a:4f:f6:33:32:79:2d:78:ca:b5:62:45:85:0e:
df:08:03:35:b6:ab:43:bf:a9:2a:f1:c6:5f:05:fd:bb:b6:e5:
73:48:3d:7d:bf:ce:33:48:15:45:6e:d3:6f:9c:0e:de:44:fa:
fc:c2:71:39:0b:66:c8:5e:b9:2b:df:ad:44:3f:a3:ca:d6:a6:
23:d1:1e:14:b9:98:5d:b2:eb:3e:84:93:89:b7:31:f6:98:2f:
5d:a1:61:e9:20:19:a5:4c:8b:05:1c:38:3c:04:5f:c3:3f:25:
89:9e:38:02:0b:3b:a8:a3:54:42:56:75:e3:0c:5c:b5:69:7a:
ef:3d:fb:63:2c:5a:30:28:49:4a:05:e1:5f:70:03:25:b9:03:
fc:e1:d3:c3:d3:ad:e8:81:b8:8a:d7:bd:44:04:c0:d9:bb:44:
66:eb:1d:fb:54:9b:8f:8c:33:5c:49:b8:c9:15:49:7f:77:fe:
da:79:33:43:0f:06:0b:11:6e:9c:81:ff:75:b7:d0:f9:dd:c0:
04:38:6d:35:69:eb:7f:28:28:43:5d:e9:e9:cc:b0:a2:7d:5b:
8a:e7:d7:b9:68:a1:69:f5:c3:e3:e1:ce:9e:48:77:ec:de:c8:
57:c2:dc:8c:a0:69:4b:cb:82:0e:95:6a:85:9c:82:05:ae:d9:
f1:cb:70:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:25:38 2026 by rpki-client