Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36FF9CA84F6A11F1AD0EAECBCE1D38B0.roa
File: 36FF9CA84F6A11F1AD0EAECBCE1D38B0.roa (raw, json)
Hash identifier: GIfFcrXU56qhVrAW1J673b+AsLczXwTs2iPrHQTL1/4=
Subject key identifier: BF:C1:E6:26:CD:3A:19:92:F5:5D:C8:F2:74:4A:04:D9:C0:AF:6A:E2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CB99
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36FF9CA84F6A11F1AD0EAECBCE1D38B0.roa
Signing time: Thu 14 May 2026 07:55:04 +0000
ROA not before: Thu 14 May 2026 07:54:59 +0000
ROA not after: Thu 25 Jun 2026 07:54:59 +0000
asID: 136744
IP address blocks: 154.206.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117657 (0x1cb99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 14 07:54:59 2026 GMT
Not After : Jun 25 07:54:59 2026 GMT
Subject: CN=6a057fd8-0a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:6b:28:03:ca:f6:40:b8:f1:0a:1b:51:14:
7e:c9:73:4e:4e:da:de:4d:7e:fa:eb:0a:49:10:10:
e2:d6:d0:e8:3b:e1:a2:7f:5d:84:25:43:a8:83:54:
b1:8d:b5:a9:b0:17:5f:d5:fe:4f:b8:b9:46:90:56:
b3:0c:37:2f:17:29:dc:e0:f4:56:db:54:c3:37:2f:
9d:40:fa:09:cb:57:41:7c:6c:0a:40:79:46:ee:1d:
30:ea:39:7f:7d:1b:91:10:cc:5f:ef:6b:f0:16:90:
9f:51:b2:c9:fb:bf:9d:19:37:45:44:8c:ee:2c:5b:
f3:ca:2b:83:af:86:78:14:65:dc:13:de:35:a4:99:
5f:05:ce:b1:ce:72:d0:0a:79:36:cd:7d:83:7c:d4:
5a:d9:e6:c5:ff:30:fa:5a:fd:29:13:be:fd:b1:2f:
29:0d:55:f9:d5:ad:8b:38:6f:a1:10:27:a5:5c:d7:
31:57:b8:8c:5d:f0:01:c6:e0:98:4a:14:4a:53:90:
3e:bf:82:a3:d7:a6:d2:51:47:3d:24:9c:1e:45:3e:
ab:b8:98:10:d8:fd:2d:1c:2f:ca:24:74:7e:fc:79:
e6:05:eb:01:12:e6:e6:83:35:74:35:bb:0d:12:fe:
71:2e:dc:1e:d4:e2:aa:cb:db:9f:33:13:e6:c4:53:
1d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C1:E6:26:CD:3A:19:92:F5:5D:C8:F2:74:4A:04:D9:C0:AF:6A:E2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36FF9CA84F6A11F1AD0EAECBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.14.0/23
Signature Algorithm: sha256WithRSAEncryption
21:cd:a9:ec:d9:22:a7:f0:50:c4:44:17:89:82:ce:dc:8f:0c:
fe:ba:e6:7f:08:55:3f:c5:2d:af:56:d1:9b:ba:f8:ab:d6:8d:
2d:aa:40:79:2e:7a:e1:4b:1d:32:62:83:95:73:37:c8:7b:6b:
de:ef:ee:2e:3f:72:d4:11:7d:7d:30:c9:cb:6b:6d:0c:77:bd:
82:9d:fa:58:6d:b4:a3:73:f3:7f:15:7a:12:5b:dd:ff:f3:0d:
be:65:60:d3:cc:48:20:ff:40:fc:d2:62:0c:ca:34:17:cf:0a:
29:64:88:24:de:c0:39:08:f8:26:d4:a3:97:c6:d5:f2:26:4b:
c6:aa:66:f4:c8:71:05:73:f1:c0:e3:62:18:db:8a:0f:52:bf:
79:c1:be:91:f0:34:c1:72:b9:5d:89:8c:af:04:65:a9:eb:c2:
cd:78:ff:01:4c:25:7a:f5:21:81:f2:21:86:1b:f1:8e:21:43:
55:c8:37:db:5c:26:40:9b:e2:ee:1d:18:13:fc:b1:d1:ea:b9:
f3:b7:5c:13:f7:23:7c:ed:5d:d8:f6:61:94:09:f9:38:f9:46:
fd:81:e5:55:44:92:12:dd:53:f3:4c:94:d0:1b:34:54:0d:46:
ba:a9:3d:ea:63:89:e8:d3:30:c6:21:64:d1:71:ad:83:74:d3:
4e:c4:bb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:46 2026 by rpki-client