Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/251191EA624811F1B13AAB14CF1D38B0.roa
File: 251191EA624811F1B13AAB14CF1D38B0.roa (raw, json)
Hash identifier: ceEYgh+KtPxemQ8NuFhA0jqQPcLpVgdXyBMkvovxcIE=
Subject key identifier: 2E:C3:56:7A:FB:54:98:20:50:3D:15:2C:CA:C7:C7:17:B3:93:30:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D229
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/251191EA624811F1B13AAB14CF1D38B0.roa
Signing time: Sun 07 Jun 2026 08:09:03 +0000
ROA not before: Sun 07 Jun 2026 08:08:57 +0000
ROA not after: Wed 15 Jul 2026 08:08:57 +0000
asID: 198486
IP address blocks: 154.84.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119337 (0x1d229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 7 08:08:57 2026 GMT
Not After : Jul 15 08:08:57 2026 GMT
Subject: CN=6a25271f-2c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4f:e4:3b:d2:f7:f9:2e:03:e5:18:f5:53:73:
78:59:93:0b:fa:cc:c2:5d:20:8c:9f:d4:15:c1:d7:
2b:31:57:e4:93:2e:cd:04:4d:b1:5a:f5:36:ce:9f:
24:c7:43:7f:7a:8b:0b:7f:45:16:5b:6a:6c:49:0a:
66:71:81:25:b2:b3:b7:80:73:b6:c6:1e:65:fa:06:
d4:e4:a1:0e:ed:64:b5:7f:f8:0b:3d:ee:6a:0e:6f:
92:bb:32:f8:85:86:5a:7a:05:ab:dc:03:9c:c2:09:
6a:a7:b2:81:ca:87:de:9c:93:75:4d:fe:fa:78:99:
e4:7b:12:6e:1d:d1:67:70:b4:98:63:85:47:61:f1:
95:ef:ea:fb:2e:b0:a0:0e:7c:d1:f3:ae:08:9e:31:
4a:aa:2f:48:44:6e:9a:96:46:9d:33:ca:71:9e:d0:
51:57:49:5f:e2:1b:d0:fd:6a:3a:d6:0c:0f:8f:b4:
43:64:7c:40:c8:37:f2:a7:89:34:a1:6d:fb:1e:27:
45:71:ef:29:f6:d7:b4:56:48:d2:4e:44:cd:bc:96:
ff:25:e2:b6:ff:7a:2e:b0:1e:d1:94:bf:27:a5:bc:
ae:69:92:0f:2f:48:bb:fc:f1:14:7a:c4:86:87:0f:
7e:16:90:0c:65:a8:97:6e:0e:55:31:5b:7c:fe:d8:
ad:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C3:56:7A:FB:54:98:20:50:3D:15:2C:CA:C7:C7:17:B3:93:30:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/251191EA624811F1B13AAB14CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.168.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:d0:2b:10:50:7b:24:1d:0a:c4:ab:ce:8f:14:93:66:7c:59:
ae:cc:70:26:c8:f4:b3:13:93:c5:f4:3e:d9:72:30:ac:e0:91:
0b:8d:c9:cd:75:07:9a:bf:51:ab:d8:d6:a1:16:e5:1c:55:38:
e3:e7:a3:d7:87:8f:1b:e8:19:fb:5d:67:58:37:72:38:86:4d:
59:eb:60:1e:3e:f1:1d:c3:30:b2:cb:f1:d2:2f:8c:ae:89:3f:
1c:fa:2d:06:91:61:3d:74:b6:3b:93:50:60:a7:ed:46:21:79:
e5:a7:3b:51:a4:40:22:09:a9:89:f0:13:38:4d:db:2f:14:3f:
50:c1:68:76:27:ea:fe:69:64:2b:5d:31:33:ae:ba:56:89:66:
99:bf:a5:11:32:1d:c1:00:1b:10:e1:2b:68:1b:d5:5d:75:02:
ee:69:57:04:61:36:0f:3b:69:be:13:73:14:d0:dd:a3:69:c7:
9b:bc:f8:c5:2a:a4:32:dc:46:7d:12:05:80:c6:bd:70:84:5b:
3a:80:5e:90:f5:b2:73:92:88:cc:d9:f5:e5:69:37:35:d8:0e:
f6:e0:1b:f0:6f:37:78:85:ad:28:00:c7:4a:fe:33:a8:f7:72:
05:b8:20:fe:8f:99:e8:7e:3c:0d:7d:19:ae:79:39:09:8d:27:
12:10:5b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:06:19 2026 by rpki-client