Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AF512BA535811F1959048ABCE1D38B0.roa
File: 3AF512BA535811F1959048ABCE1D38B0.roa (raw, json)
Hash identifier: 2PfIQu2bOoba27SG9SmjdcBpttZbBzBGDSMXZDXhQbM=
Subject key identifier: CD:A9:BC:1D:04:4E:36:6F:E8:DD:55:7B:A0:BC:E3:AE:4B:D0:AD:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CC60
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AF512BA535811F1959048ABCE1D38B0.roa
Signing time: Tue 19 May 2026 07:56:24 +0000
ROA not before: Tue 19 May 2026 07:56:19 +0000
ROA not after: Wed 19 Aug 2026 07:56:19 +0000
asID: 55020
IP address blocks: 154.210.16.0/20 maxlen: 24
154.213.64.0/20 maxlen: 24
154.222.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117856 (0x1cc60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 19 07:56:19 2026 GMT
Not After : Aug 19 07:56:19 2026 GMT
Subject: CN=6a0c17a8-36b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d0:6c:9c:a1:a5:4b:d0:a5:57:64:48:c1:cf:
20:60:d8:04:1d:dd:3d:34:b1:7a:43:c7:8b:29:a8:
ad:58:c1:cf:6b:a7:9a:26:b6:3d:38:2c:25:3c:0e:
7a:22:d8:67:26:f7:14:91:b0:cf:23:e2:c4:13:d6:
c3:12:00:ef:db:35:19:7a:2c:fb:d8:96:8e:11:79:
21:54:4b:96:64:a1:3d:5b:91:67:64:c2:82:31:cf:
5d:ad:87:81:92:0e:00:f7:b9:27:f3:81:a8:9c:22:
3a:1e:1e:4e:1a:8f:c3:e7:24:3d:46:9f:e0:4f:05:
8c:96:b4:77:68:52:d1:71:50:22:80:62:ac:bb:1a:
f8:91:ad:df:21:ad:d9:74:e1:fc:ec:22:4f:f0:b8:
86:12:c6:7f:f9:03:ac:c2:a8:53:fb:72:cb:50:29:
c2:06:7f:90:32:16:08:91:6d:73:9a:cd:ee:fe:42:
be:30:fa:8e:df:13:11:49:93:fa:01:78:d1:70:de:
00:07:e4:d1:0e:a4:14:06:d5:d3:b9:c0:5a:eb:f6:
a5:37:cc:f3:88:5e:38:7a:58:66:05:58:59:d3:4f:
df:9d:24:ac:b7:fe:22:d4:8e:d9:8d:a5:a9:7d:e6:
7b:5f:f4:09:38:f2:af:3a:d7:b6:f3:7e:ed:e9:1a:
df:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A9:BC:1D:04:4E:36:6F:E8:DD:55:7B:A0:BC:E3:AE:4B:D0:AD:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AF512BA535811F1959048ABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.16.0/20
154.213.64.0/20
154.222.224.0/20
Signature Algorithm: sha256WithRSAEncryption
12:97:b7:fa:99:28:d0:35:d0:6f:14:d0:ce:f8:5d:c6:65:82:
7b:c1:60:76:bb:b4:6d:ac:a4:48:20:a2:f8:0e:09:8e:a3:b9:
22:08:3b:b0:2e:75:c0:a9:78:75:1c:08:e2:21:c3:61:5c:23:
6e:bc:50:47:0d:4d:d4:3e:42:ec:d8:05:a5:34:8d:11:6a:9d:
c6:54:7b:a9:a0:e2:74:fa:be:e2:66:3f:e4:e8:56:39:cc:02:
7c:2e:bf:ce:5c:f6:e9:e9:d4:16:d5:ce:df:d6:6c:ce:18:0d:
29:1c:c1:76:4c:80:ce:30:5c:c9:76:ec:ed:e9:c2:28:dc:7f:
95:3d:37:a9:7d:88:04:27:c8:e2:5d:b8:83:91:3c:0c:98:58:
be:3d:cd:82:1c:5d:8d:be:e8:04:f8:b5:9e:6c:35:71:82:46:
5a:95:28:48:ac:65:67:0a:6e:02:86:52:e5:e7:6d:e1:98:e3:
9f:f0:b1:23:94:41:49:c2:90:b5:c1:d1:48:a8:7d:bb:e1:44:
45:69:54:f6:ac:c7:aa:8e:c3:d4:ce:6e:5d:39:fb:60:b0:ca:
1c:05:b3:ce:b6:d8:57:cb:8f:fe:62:51:00:78:c6:6a:ac:40:
c4:1e:67:4f:90:10:68:98:ec:38:d9:55:9e:c4:17:ec:19:85:
b9:5b:de:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:09 2026 by rpki-client