Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E142E0A64CC11F19A75D8D7CE1D38B0.roa
File: 4E142E0A64CC11F19A75D8D7CE1D38B0.roa (raw, json)
Hash identifier: J/tgxc9JZ1MQV6rx2zq4Oenqi3Z49ZusBtd8IGSmIAk=
Subject key identifier: 73:0D:26:1D:1F:31:BA:FB:04:9F:BF:64:4E:D6:DC:F6:9C:41:57:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D284
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E142E0A64CC11F19A75D8D7CE1D38B0.roa
Signing time: Wed 10 Jun 2026 13:00:07 +0000
ROA not before: Wed 10 Jun 2026 13:00:03 +0000
ROA not after: Thu 17 Sep 2026 13:00:03 +0000
asID: 142002
IP address blocks: 154.198.160.0/24 maxlen: 24
154.198.161.0/24 maxlen: 24
154.198.162.0/24 maxlen: 24
154.198.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119428 (0x1d284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 10 13:00:03 2026 GMT
Not After : Sep 17 13:00:03 2026 GMT
Subject: CN=6a295fd7-009d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:c1:9a:76:e6:5b:82:41:ab:9b:33:75:41:
fb:c8:47:33:29:33:16:a8:49:47:90:36:18:e7:11:
f2:7b:fd:c4:dc:30:38:c1:5b:56:73:f9:fb:ec:50:
36:f1:2d:1f:2b:de:24:7e:e7:49:c9:ac:ae:a7:3d:
90:07:a3:e8:f9:12:9d:2a:bf:40:f4:c7:15:2c:cf:
84:fa:85:1b:ab:cb:86:e5:d5:37:e5:65:e7:d4:c3:
7e:b2:c5:59:7a:29:b2:a2:ea:53:34:78:af:cb:df:
46:60:cb:35:ef:a4:70:21:46:ad:0a:2e:80:a0:d5:
52:9a:69:f9:0c:9b:6f:7c:62:e9:21:6f:38:1a:30:
e3:37:71:92:7b:8f:19:5e:f9:e5:ce:2b:35:37:7e:
5d:4f:3f:50:29:1b:30:6c:56:1b:aa:c1:28:e9:b2:
c0:0d:8f:bc:8b:c5:7e:de:0d:db:89:ef:a2:4d:5d:
a2:33:49:66:d9:14:22:2e:d4:f0:72:6d:42:0e:52:
1f:ec:97:40:84:8b:93:4c:15:78:31:a4:5b:fd:d8:
01:67:bf:e1:70:bc:8f:15:67:22:51:36:cb:d1:67:
23:50:09:79:4a:04:4d:a0:94:79:4a:80:39:30:f6:
24:34:92:5a:9b:89:fd:50:1e:fd:95:a0:42:29:15:
91:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0D:26:1D:1F:31:BA:FB:04:9F:BF:64:4E:D6:DC:F6:9C:41:57:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E142E0A64CC11F19A75D8D7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.160.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:81:0c:ec:7c:a9:0e:eb:b1:b9:3e:e2:ac:0d:08:61:78:5f:
48:c5:85:9b:81:b6:ae:a7:13:03:2f:e1:a1:bf:ad:b3:1b:da:
a4:15:ea:d1:4a:1a:86:f2:3a:47:02:2b:8e:78:79:78:53:60:
24:2a:49:c0:b5:db:58:bb:13:eb:ba:0f:ce:6b:4e:15:11:cf:
4e:e7:6f:7f:8f:76:26:59:60:91:52:e1:16:55:39:47:e9:9d:
46:70:5a:d4:d8:65:79:90:2f:9f:ee:dc:e6:14:a6:b1:cc:a5:
9a:67:83:14:f1:90:dd:8e:42:5d:55:f7:6d:88:88:08:55:b2:
e8:75:1c:e9:b4:96:92:cf:a9:15:8f:c2:18:70:12:0e:fc:d7:
80:c0:5d:01:92:46:b0:ee:85:c9:62:2c:ca:2f:01:78:40:98:
77:15:c7:8a:9f:bc:1f:9f:93:0c:43:9d:8d:97:44:0b:f0:5b:
83:84:33:4e:a2:80:ae:c6:da:dc:60:a9:d9:cb:35:a9:a6:74:
a9:f1:04:cc:b1:98:30:83:ef:89:d5:29:02:50:fd:f1:3d:fd:
15:92:e1:ac:c7:2d:1d:b4:d1:18:55:94:5e:c9:98:5c:05:c1:
b3:84:cf:5d:1d:1a:4e:af:0d:d3:45:68:6b:a4:c5:7b:67:62:
f1:1c:76:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:04:58 2026 by rpki-client