Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/016B22365AFC11F1A970D8A0CE1D38B0.roa
File: 016B22365AFC11F1A970D8A0CE1D38B0.roa (raw, json)
Hash identifier: jDaQMKpNVS6oVJu4Gx7zR0f2j+QraCNsLnhkhqnbHY0=
Subject key identifier: D3:7B:74:14:5D:B7:F2:98:26:02:56:56:F3:60:B2:6E:72:62:5C:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D02B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/016B22365AFC11F1A970D8A0CE1D38B0.roa
Signing time: Fri 29 May 2026 01:16:23 +0000
ROA not before: Fri 29 May 2026 01:16:18 +0000
ROA not after: Sun 28 Jun 2026 01:16:18 +0000
asID: 54801
IP address blocks: 154.213.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118827 (0x1d02b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 01:16:18 2026 GMT
Not After : Jun 28 01:16:18 2026 GMT
Subject: CN=6a18e8e7-d6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:c2:53:01:f3:20:3f:2b:57:95:d0:5c:99:
28:53:dc:0c:ad:1b:09:52:95:3f:ac:ee:3c:87:db:
d8:72:5f:1f:92:af:fb:73:b4:69:b6:cd:c3:cd:1d:
b3:2d:a3:b3:69:f6:d6:61:1e:42:a2:db:83:27:0f:
34:33:5d:1f:9d:28:11:e9:ae:1d:4d:7b:a8:00:cf:
cf:36:63:d4:4e:e5:2c:fd:01:35:5b:fa:f3:f8:3c:
a0:12:32:e6:7a:e5:98:6f:b3:ad:1e:7b:09:a9:40:
b7:9c:7c:bb:a6:11:df:49:6d:d3:65:00:0e:b1:28:
eb:a6:a7:2b:d1:cd:f0:80:21:9e:83:b3:86:3a:04:
e0:f6:e2:04:25:7d:04:5f:ed:2f:57:cd:03:93:46:
0d:e3:5f:a2:0d:4a:cc:aa:06:b4:88:61:e1:7b:f2:
64:b0:46:b7:98:25:65:d4:e2:26:76:81:85:3f:a8:
a2:7e:ce:0f:aa:4a:15:6e:43:fa:44:53:f2:11:c9:
72:71:ac:0d:77:7a:9c:4c:cc:6a:f6:4d:75:19:91:
c1:01:c2:45:ef:56:b9:17:a9:eb:71:b4:1a:34:1e:
77:b7:67:d8:59:c8:4f:4f:be:25:40:89:eb:f1:b0:
93:21:ae:f9:80:be:54:80:97:14:f3:0d:33:42:6c:
b1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7B:74:14:5D:B7:F2:98:26:02:56:56:F3:60:B2:6E:72:62:5C:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/016B22365AFC11F1A970D8A0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.176.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:43:db:29:e4:2b:88:10:00:3c:9d:8c:54:21:4a:a0:e1:4f:
3e:fd:88:91:eb:72:58:ad:0b:a2:e7:dc:4f:73:b8:e6:86:20:
de:f7:03:d2:58:ba:63:8e:fd:e8:ad:df:1c:91:52:3b:4e:99:
3e:e8:27:d6:16:44:51:0f:2d:f1:75:a9:88:08:2a:29:a6:c5:
bb:c1:32:da:06:1d:cf:fe:ac:d4:03:42:3d:21:a4:19:24:4a:
5c:10:7e:48:77:c9:10:60:af:97:8c:16:0a:3d:60:5b:b5:83:
08:2e:09:4c:0b:29:a6:1a:e3:13:28:17:55:ec:f0:c0:c4:6f:
f1:cc:f5:ef:4b:ef:2b:ce:bf:d3:5e:3e:9a:22:cb:15:8a:ab:
cf:77:b8:12:70:c6:e4:ce:84:38:bf:bf:2d:12:f8:2b:e2:40:
1b:09:4c:f0:91:e2:0b:3f:f2:e7:b5:e8:25:37:a5:f3:00:35:
b8:bc:50:23:99:93:ba:98:92:57:68:db:b6:6f:bc:bc:df:bc:
a3:33:c1:11:de:5c:c4:31:3c:70:0f:f1:7e:9e:e4:27:2b:74:
75:6b:b9:56:fc:2b:ae:0a:55:3a:c2:66:a5:f1:38:22:85:7b:
b2:97:84:99:01:0f:90:73:47:bb:5c:35:ee:6a:9f:df:7f:90:
37:e9:47:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:43 2026 by rpki-client