Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F15EB1260D411F19C8677B8CE1D38B0.roa
File: 1F15EB1260D411F19C8677B8CE1D38B0.roa (raw, json)
Hash identifier: AYzk3dDF87Hio29ZZQ1U/udnYuET4Xo1W06WackhjXA=
Subject key identifier: 8F:CA:9E:14:E0:CF:CB:08:08:DF:09:9B:9D:04:13:C9:A7:4C:17:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D1C9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F15EB1260D411F19C8677B8CE1D38B0.roa
Signing time: Fri 05 Jun 2026 11:46:00 +0000
ROA not before: Fri 05 Jun 2026 11:45:55 +0000
ROA not after: Tue 05 Jun 2029 11:45:55 +0000
asID: 17561
IP address blocks: 154.195.252.0/24 maxlen: 24
154.195.253.0/24 maxlen: 24
154.195.254.0/24 maxlen: 24
154.195.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119241 (0x1d1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 5 11:45:55 2026 GMT
Not After : Jun 5 11:45:55 2029 GMT
Subject: CN=6a22b6f8-5b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d7:b6:3e:73:ef:e5:f3:b2:32:ef:f1:41:eb:
10:fa:bd:d6:37:80:16:97:f4:58:02:70:33:85:84:
b7:01:f0:0f:5a:1b:76:f7:34:6a:c6:58:07:47:8d:
7f:e1:b8:4a:e9:c3:1f:a7:40:5f:c0:d2:33:65:d0:
5e:12:ae:54:26:7d:61:6a:ed:81:30:e7:bc:e8:61:
9c:58:5b:64:b3:83:87:e8:48:45:0f:b2:5e:af:71:
25:1c:40:5f:a4:f6:32:87:2a:21:b3:70:64:f9:d6:
c7:c0:45:0f:64:e4:69:d5:bc:77:de:87:83:16:91:
0d:4a:0f:1a:f7:61:18:d8:8f:7a:88:d4:5a:cd:08:
b7:f4:4a:53:45:93:9d:a2:64:88:de:0a:c1:ef:b7:
c4:2d:c7:30:90:12:a6:07:10:30:5e:8d:46:6e:71:
00:47:1a:56:e7:a5:38:16:e5:5f:82:c5:c1:41:03:
40:5a:a6:e6:f7:4b:ef:a8:f6:85:c7:6c:79:37:b7:
0c:2f:3f:5f:00:f8:f7:34:a7:c6:63:c6:0e:62:61:
f7:91:d9:18:0c:c0:7b:45:22:e7:4f:2f:25:10:fc:
19:f2:de:ae:86:3d:4e:74:28:dd:c6:b7:9c:73:f4:
aa:e5:99:af:0a:84:07:bd:3d:86:a2:71:f3:3e:ba:
56:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CA:9E:14:E0:CF:CB:08:08:DF:09:9B:9D:04:13:C9:A7:4C:17:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F15EB1260D411F19C8677B8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.252.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:4a:1b:05:ac:a9:52:87:28:f5:9e:19:72:d2:26:b7:5a:f2:
a0:e3:73:b1:10:1c:8e:8a:45:f9:b9:4d:f3:17:d8:8b:f8:84:
ba:fb:d3:8a:9d:c5:5c:84:dc:fa:b4:99:b9:04:f9:2e:57:0e:
5d:b6:42:a0:94:23:05:af:9a:25:fd:aa:b9:f4:5a:ac:9f:e2:
d5:b4:a5:7c:d6:00:8b:ac:cd:b0:e6:d7:1f:0b:c0:a0:e6:c4:
54:51:81:a9:c9:4b:1f:6a:59:06:2b:05:6c:d1:c3:5e:70:57:
88:45:5b:b1:5d:cc:db:df:3b:7a:97:90:67:5d:d3:54:1b:bd:
83:16:dc:cb:ca:92:02:6a:d9:0c:23:25:60:16:05:fd:08:57:
e3:fd:3c:d3:b2:69:d9:82:2f:6d:2c:84:1a:5c:96:31:dd:42:
29:7d:4f:0a:95:75:7e:75:db:06:12:38:23:8b:a1:24:55:96:
23:0f:51:f5:bf:e3:dc:89:6b:ef:24:55:b1:02:62:6b:3e:89:
3d:7b:fd:84:3c:ec:49:00:a5:db:0b:80:d6:32:f3:55:66:a8:
37:19:e8:65:48:a5:48:a3:a5:1a:98:d5:07:cd:6f:a2:54:b2:
e4:28:57:e2:a1:01:98:b0:cc:66:18:da:97:53:4d:88:a8:b7:
81:bb:d1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:54:06 2026 by rpki-client