Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A51B996578211F1BDD8160BCF1D38B0.roa
File: 0A51B996578211F1BDD8160BCF1D38B0.roa (raw, json)
Hash identifier: aitRZIsgvxWL/bEd2VmYjKewgWNLN6jufFW9C7sChrI=
Subject key identifier: 67:5D:DF:A2:40:40:FC:DA:6D:42:6C:F4:BD:A3:AD:FA:EC:E5:7A:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CEE3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A51B996578211F1BDD8160BCF1D38B0.roa
Signing time: Sun 24 May 2026 15:05:46 +0000
ROA not before: Sun 24 May 2026 15:05:40 +0000
ROA not after: Fri 03 Jul 2026 15:05:40 +0000
asID: 140869
IP address blocks: 154.81.32.0/24 maxlen: 24
154.81.33.0/24 maxlen: 24
154.81.34.0/24 maxlen: 24
154.81.35.0/24 maxlen: 24
154.81.36.0/24 maxlen: 24
154.81.37.0/24 maxlen: 24
154.81.38.0/24 maxlen: 24
154.81.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118499 (0x1cee3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 15:05:40 2026 GMT
Not After : Jul 3 15:05:40 2026 GMT
Subject: CN=6a1313ca-3f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c2:a8:1e:b7:2b:a2:11:1b:50:8f:77:9b:07:
24:5e:5c:ba:77:a3:9f:46:35:2f:56:2d:3b:99:be:
87:d1:8b:7e:61:16:c8:ce:57:bf:ff:c5:c5:86:e7:
bb:c6:f2:44:2c:e7:79:35:5b:cb:d6:ee:45:40:05:
73:82:e0:6e:f7:04:d4:6d:6c:a3:37:90:8d:10:b6:
94:c9:53:30:f7:32:2c:51:6e:64:25:f2:fc:97:0b:
05:ed:e1:46:a8:ed:d5:39:44:62:cb:25:0c:7b:08:
5f:06:76:00:5f:9c:1a:d2:db:73:83:3b:51:95:d0:
0d:cd:ee:7d:c5:73:99:f0:24:fa:8c:40:59:34:44:
34:f2:ce:4f:10:cf:11:2c:eb:5b:1f:c1:37:ce:96:
92:1e:2c:13:56:6b:19:e3:58:0e:04:51:ba:6b:fb:
04:9d:08:31:06:56:19:e1:60:8f:b2:77:cf:9c:cc:
08:23:72:45:cf:29:b2:df:1f:4e:55:05:73:36:50:
de:cc:fe:dc:d8:5d:35:0f:86:38:75:50:46:fd:38:
47:b4:c7:09:ac:91:a9:1d:ca:e3:5a:96:0a:65:d4:
59:64:ef:b4:c7:9f:bf:3a:fa:65:41:37:66:4f:12:
51:2b:9d:f8:34:13:89:e7:40:0c:77:c3:01:11:c8:
25:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5D:DF:A2:40:40:FC:DA:6D:42:6C:F4:BD:A3:AD:FA:EC:E5:7A:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A51B996578211F1BDD8160BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.32.0/21
Signature Algorithm: sha256WithRSAEncryption
1f:e9:ac:41:c5:bf:53:3f:3b:02:76:d0:b8:2b:88:ac:71:88:
34:15:43:80:08:9e:60:d4:44:d3:df:47:b2:5d:7b:ec:c1:e6:
68:3d:62:48:4c:89:56:7c:7a:0c:8a:18:a7:78:f6:89:28:e3:
bc:64:bf:70:83:e6:6c:a3:a9:b4:9b:98:ee:14:82:03:6a:d3:
1b:43:fb:75:05:3e:90:9b:ee:1e:a0:e5:b9:d9:a5:87:e2:9e:
c2:49:fa:07:93:be:bc:8b:4a:73:c6:7b:dc:8e:b7:9f:20:5d:
c5:d0:d8:1d:f8:80:14:1f:56:9b:07:3d:af:be:de:21:63:17:
50:62:4b:60:ce:18:d2:6d:db:2a:fd:a5:6f:e3:43:01:d4:70:
54:82:bb:e6:d2:13:69:df:45:19:66:1b:db:7d:e4:c1:dc:a7:
ad:a1:4d:39:87:35:2d:5f:b3:11:95:ce:01:fe:ae:84:63:bd:
b9:b6:08:16:91:6c:9f:fc:10:b6:cb:a5:bc:85:61:ae:2a:fd:
89:8d:ee:df:60:69:9d:16:25:22:3f:ce:bd:b0:6f:14:d0:2b:
a2:83:25:f9:7e:6a:76:31:be:b0:e5:17:e6:6c:c4:cf:41:98:
b7:d0:61:1d:78:d3:3d:93:55:4a:3f:80:b5:f9:9c:d7:5f:bc:
5f:7b:bf:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:20:20 2026 by rpki-client