Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DC2EF3E5E5311F1BA56B205CF1D38B0.roa
File: 3DC2EF3E5E5311F1BA56B205CF1D38B0.roa (raw, json)
Hash identifier: wt36CCFuXkufXl+pFFRFZNq7+lZNbuElICpDpUjnk9I=
Subject key identifier: 3D:A5:78:FE:F1:72:3D:50:0D:D3:69:7B:79:6F:4A:FC:57:02:F3:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D13C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DC2EF3E5E5311F1BA56B205CF1D38B0.roa
Signing time: Tue 02 Jun 2026 07:18:24 +0000
ROA not before: Tue 02 Jun 2026 07:18:18 +0000
ROA not after: Mon 06 Jul 2026 07:18:18 +0000
asID: 64126
IP address blocks: 154.88.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119100 (0x1d13c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 2 07:18:18 2026 GMT
Not After : Jul 6 07:18:18 2026 GMT
Subject: CN=6a1e83c0-2e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2e:15:70:1a:90:9a:21:76:af:5b:7e:3e:e2:
d2:c2:ae:49:f8:d0:2a:e2:37:5b:db:c7:e9:d9:eb:
1a:54:fd:58:5e:71:c7:e1:ad:00:19:48:eb:82:59:
31:75:4d:95:8c:0a:ee:5f:45:9c:1d:12:c5:45:ba:
c8:2b:37:ae:52:8b:10:43:19:7e:67:c7:76:32:50:
71:de:cf:64:d1:41:df:45:44:b1:c5:b4:27:5c:99:
13:d7:a7:f3:52:c5:0b:24:fd:66:e6:05:89:f7:a8:
57:79:ca:1d:7d:8b:52:18:70:7b:c2:88:5d:79:42:
d4:bb:17:ab:48:f0:7c:6e:0d:45:d1:bf:7e:33:67:
81:e3:d2:da:82:29:34:b8:83:a9:35:10:da:10:1f:
4d:8b:ca:37:44:e2:28:65:8b:0a:6f:1e:56:a8:8b:
06:72:d0:d7:b2:0f:63:68:a6:2a:f3:91:92:3e:09:
bd:a0:81:9f:38:bd:6c:85:81:05:37:21:df:66:ef:
38:cc:b3:7d:b8:83:a7:79:e7:11:8d:cd:1d:38:4a:
e5:4f:5d:28:b6:7b:e6:41:a8:28:ac:25:70:e4:bb:
8f:c4:27:d8:5a:b9:9d:9b:b1:e0:54:3a:2f:24:97:
77:e4:3b:45:d2:57:56:38:8c:a2:30:9d:65:46:04:
2e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A5:78:FE:F1:72:3D:50:0D:D3:69:7B:79:6F:4A:FC:57:02:F3:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DC2EF3E5E5311F1BA56B205CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.128.0/17
Signature Algorithm: sha256WithRSAEncryption
4b:8f:cc:04:c2:c8:b7:23:92:1b:84:cf:b2:0b:f7:6a:a3:f3:
7d:f5:be:b3:73:93:2d:d1:64:a3:0c:6d:80:1d:11:c7:9c:42:
8c:27:61:a5:df:c3:e4:53:da:41:26:5b:8a:96:8a:84:19:7b:
91:69:78:9b:51:74:1c:ae:be:c2:29:fc:57:ea:dd:b3:bf:37:
5a:4e:33:24:fb:64:ba:4c:6b:0b:0b:7f:b3:c4:90:47:4b:ba:
af:e6:90:a6:7e:75:3d:85:d6:da:22:40:a8:bc:77:67:7b:13:
1c:ba:6c:b7:2a:c7:40:66:01:84:17:7b:cb:0b:b4:6a:38:1e:
a8:16:74:ff:d5:c0:11:90:10:59:e5:4e:88:95:b3:b4:03:a8:
dd:2a:a8:03:d5:d2:78:ab:76:70:3b:24:08:aa:d9:49:8d:09:
73:22:61:f8:3f:d4:10:7e:6d:22:5b:80:10:18:4b:2e:96:e8:
0e:b8:6c:55:ff:d1:4c:5d:3d:98:80:53:bc:26:4c:a2:fe:1b:
93:4a:f5:7d:2c:e3:18:b5:e0:82:dd:77:d8:cf:62:f5:37:b7:
e7:0a:66:65:fe:b7:e1:15:28:07:f0:ed:89:fc:46:d8:ff:90:
c9:5b:7e:93:40:df:5b:0b:c3:be:22:a2:c0:c8:43:8f:e4:ed:
44:ba:06:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:52:49 2026 by rpki-client