Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/019BF33453E011F186C4F6D3CE1D38B0.roa
File: 019BF33453E011F186C4F6D3CE1D38B0.roa (raw, json)
Hash identifier: b9M8v6vOH3dA2jgone9eYevoGMEQTH8Z3mGz4x84/lI=
Subject key identifier: 64:36:18:07:26:2C:AD:FC:65:CA:8E:67:6A:98:0D:30:CE:9B:3A:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CCA3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/019BF33453E011F186C4F6D3CE1D38B0.roa
Signing time: Wed 20 May 2026 00:08:19 +0000
ROA not before: Wed 20 May 2026 00:00:13 +0000
ROA not after: Fri 19 Jun 2026 00:00:13 +0000
asID: 150000
IP address blocks: 154.82.159.0/24 maxlen: 24
154.82.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 16 Jun 2026 00:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117923 (0x1cca3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 20 00:00:13 2026 GMT
Not After : Jun 19 00:00:13 2026 GMT
Subject: CN=6a0cfb73-2ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1a:74:2e:a2:62:f6:48:dc:d6:28:ee:a3:c5:
ea:2d:7c:b4:c1:59:c3:a1:08:25:77:c3:06:b5:8d:
6d:ca:1f:0a:5e:45:8f:29:a9:33:99:c9:12:ee:97:
91:a9:60:df:a4:ce:29:c4:83:35:ed:00:3f:88:50:
51:fd:5c:3c:bf:93:ee:d8:f6:58:1e:e3:e6:a8:7c:
c8:f1:69:c4:44:2f:44:80:ba:49:a6:a4:1e:1a:35:
d3:9a:38:c5:7a:b9:14:36:37:71:2a:ca:34:e9:2b:
0f:05:59:af:cd:17:15:5e:24:bb:5a:10:36:39:cf:
3a:bc:32:c1:94:0d:f2:c7:fc:5c:90:32:6c:6e:d5:
e1:ab:d5:c2:6e:58:11:6f:9d:ac:2d:8b:7d:91:ce:
08:0b:b2:78:83:79:a3:6a:e7:10:0f:4f:f1:1d:83:
a3:85:23:40:27:b6:0c:b4:22:31:ce:7d:cb:a0:4a:
16:93:5b:fd:a0:a5:92:a6:3d:ed:c0:ed:f6:d3:33:
70:e5:44:ae:7e:3a:e3:f1:f6:33:e2:b9:c0:a1:91:
6a:9c:bc:f5:b9:a1:46:76:99:35:c7:3a:7a:5c:91:
06:fd:9e:cf:13:de:11:3a:b8:d3:fa:0e:eb:80:3f:
b5:08:21:80:43:6d:a1:c6:91:f5:28:7b:bb:8c:8e:
1b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:36:18:07:26:2C:AD:FC:65:CA:8E:67:6A:98:0D:30:CE:9B:3A:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/019BF33453E011F186C4F6D3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.159.0-154.82.160.255
Signature Algorithm: sha256WithRSAEncryption
5b:c1:01:e1:09:12:17:d7:aa:b1:e3:b8:f8:ef:24:59:54:e2:
3e:35:ce:24:fe:81:69:ab:af:0c:04:cb:d6:86:d3:4e:e6:53:
84:7b:94:bd:6b:eb:7d:01:78:78:71:30:ca:a6:ca:e0:ad:c9:
dc:50:a0:85:01:39:63:f4:54:7d:f5:a1:a1:62:42:13:01:52:
67:4b:a9:35:5b:b7:6f:94:9f:43:90:7a:1d:3a:3f:6d:a7:90:
6f:37:26:0a:60:2e:04:92:0e:46:49:44:d2:2c:97:ae:d3:f5:
18:b3:1b:c3:9e:5f:14:ea:aa:8b:15:c1:01:3d:55:c9:71:6c:
75:da:d5:46:9a:86:e5:87:de:6b:e6:01:ed:15:b5:8f:52:e0:
89:55:4b:c7:be:91:ae:7a:ae:e6:7a:49:d1:00:83:51:6d:84:
21:df:9a:4f:43:cb:7f:6c:0f:b6:99:48:d1:7c:56:9e:b0:14:
42:5f:4d:5c:07:fd:c8:c4:2d:4c:c9:3f:c0:0e:b4:47:5d:4c:
d9:17:d5:ea:86:da:d7:cb:2b:29:ab:ec:5e:a8:07:d2:f0:76:
09:c0:95:39:bd:ad:6f:59:bf:d7:b1:4c:26:a3:fd:45:d0:95:
aa:62:25:fc:36:72:a7:7f:89:50:02:6c:d8:8a:6f:47:e9:7b:
a4:09:c0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:46:48 2026 by rpki-client