Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4BB5CA460D011F19A6A07A4CE1D38B0.roa
File: C4BB5CA460D011F19A6A07A4CE1D38B0.roa (raw, json)
Hash identifier: xVCmmU8Fcx08G0jBSohMBjV7t3gFatr2FDohHKEydKg=
Subject key identifier: 05:C7:7D:8E:89:A8:83:59:6B:0D:81:E0:9D:5F:84:59:21:79:6D:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D1C1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4BB5CA460D011F19A6A07A4CE1D38B0.roa
Signing time: Fri 05 Jun 2026 11:22:00 +0000
ROA not before: Fri 05 Jun 2026 11:21:55 +0000
ROA not after: Tue 05 Jun 2029 11:21:55 +0000
asID: 17561
IP address blocks: 154.195.212.0/24 maxlen: 24
154.195.213.0/24 maxlen: 24
154.195.214.0/24 maxlen: 24
154.195.215.0/24 maxlen: 24
154.195.216.0/24 maxlen: 24
154.195.217.0/24 maxlen: 24
154.195.218.0/24 maxlen: 24
154.195.219.0/24 maxlen: 24
154.195.220.0/24 maxlen: 24
154.195.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119233 (0x1d1c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 5 11:21:55 2026 GMT
Not After : Jun 5 11:21:55 2029 GMT
Subject: CN=6a22b158-0760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:aa:97:32:53:19:bf:62:b7:fb:58:ac:e1:d0:
7e:95:d7:0c:ac:b1:36:89:9e:1b:4e:f3:94:04:ab:
a6:95:fa:43:6d:63:9f:6c:70:9b:81:99:cf:93:5b:
94:83:03:b4:e6:45:14:4d:17:d2:0d:ef:f3:0d:3a:
24:5b:f5:a8:17:dc:c0:70:e4:a9:a5:20:39:bf:bf:
78:a5:e9:fa:85:f4:ab:87:0b:52:9b:c6:94:98:23:
f0:cf:dd:fa:d3:7f:0d:df:70:d7:1c:f6:01:fd:c1:
58:c8:b9:81:e6:80:94:be:a5:f2:99:1d:0c:63:ce:
dc:aa:66:6c:3c:8e:18:09:c1:3c:de:92:20:eb:3c:
78:1c:66:be:71:61:a4:a9:71:9d:e2:2f:fc:2c:2f:
f6:b9:f0:2c:8a:2e:ee:fa:32:b5:5f:eb:b0:35:31:
4d:22:0e:fa:35:d9:70:99:f2:af:4d:5c:59:b8:d8:
3d:ac:cf:e4:4e:f4:00:40:09:cd:d0:cb:e2:f6:ef:
00:a3:40:8d:2d:ca:48:21:05:cd:aa:28:1c:59:55:
90:fe:34:5b:a5:62:e5:aa:5a:4b:c9:b1:e2:49:76:
ec:a3:5e:73:5a:a1:6b:d9:f4:d0:f3:c6:5b:a1:ed:
d1:9b:88:f4:e9:51:61:a1:a2:d2:ec:03:81:c7:58:
cc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C7:7D:8E:89:A8:83:59:6B:0D:81:E0:9D:5F:84:59:21:79:6D:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4BB5CA460D011F19A6A07A4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.212.0-154.195.221.255
Signature Algorithm: sha256WithRSAEncryption
01:8e:53:d0:88:9e:04:8f:9d:f8:cc:be:0b:9b:78:a9:4e:c1:
34:88:85:96:39:bb:3f:75:cc:4b:64:ac:82:2b:4b:9c:eb:e9:
d3:d0:5a:17:81:a2:1b:7c:be:44:be:4c:5c:2b:0d:84:ba:c4:
76:cc:f0:9f:26:29:03:f4:34:5e:09:c3:f0:7b:b2:bd:02:c1:
c3:6d:69:8b:a3:69:ed:5b:c5:0e:d2:e2:0a:ec:0f:2c:18:e0:
9f:0b:b9:66:e7:16:34:5c:96:67:36:46:87:fc:a4:b8:6a:cb:
85:6e:45:6d:e6:b5:f9:d2:dc:fa:57:6b:96:ab:af:3d:36:ef:
4b:8a:65:a3:54:39:18:47:be:ea:f4:e8:2a:fe:0c:44:c4:62:
cb:ad:9b:00:6c:ad:ef:96:68:ed:39:5b:56:2d:61:f0:3a:74:
63:2b:4d:27:42:a9:e0:b8:ad:63:d1:03:c0:d1:69:57:20:97:
7b:1c:8c:5f:30:23:a9:2a:40:f5:fb:44:29:80:41:1c:b1:98:
09:55:cd:5c:ab:60:1d:c2:27:ff:69:59:ba:23:8a:2a:c6:4b:
50:a4:9a:3d:e7:d3:f0:3a:79:ea:a5:22:9f:4e:73:00:1f:19:
81:82:43:4a:f4:4a:96:f9:d1:ec:41:6c:8b:d8:f5:69:54:f6:
84:37:67:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:20:36 2026 by rpki-client