Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47223A04643811F1B57DEACCCE1D38B0.roa
File: 47223A04643811F1B57DEACCCE1D38B0.roa (raw, json)
Hash identifier: CcjQshDjTiggz75+DkIBPOtg2NO/D138FIeBOL2GECU=
Subject key identifier: DD:A3:B6:81:D4:15:D5:0D:B8:7C:A4:1B:2E:12:50:3E:EA:E9:B8:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D24D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47223A04643811F1B57DEACCCE1D38B0.roa
Signing time: Tue 09 Jun 2026 19:20:30 +0000
ROA not before: Tue 09 Jun 2026 19:20:25 +0000
ROA not after: Fri 17 Jul 2026 19:20:25 +0000
asID: 199037
IP address blocks: 154.88.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119373 (0x1d24d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 9 19:20:25 2026 GMT
Not After : Jul 17 19:20:25 2026 GMT
Subject: CN=6a28677e-7218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:52:0a:76:28:2a:b5:43:08:2c:ea:ce:58:27:
f4:aa:56:e1:b1:e9:d0:45:06:dc:7e:41:11:48:6b:
e7:75:00:9b:a7:f7:f8:14:50:4c:fd:8f:bd:97:e9:
70:aa:c1:2e:26:a9:c0:9d:65:d0:74:1e:84:c8:b2:
79:6c:8e:4a:05:44:78:ac:04:cb:09:fd:05:e8:fa:
3a:de:be:34:30:54:d4:98:f1:cb:3d:fb:df:3c:06:
f5:45:01:ef:ed:05:cf:1e:3d:30:46:a6:8b:0d:ba:
42:e5:d6:7b:86:d8:42:13:e6:57:1d:23:10:40:92:
e2:51:e2:48:1a:6d:f9:18:bc:9d:ef:a2:b9:63:41:
8e:20:c5:65:d9:c3:73:2e:18:36:17:0d:d1:55:90:
61:cd:37:a6:de:99:9c:52:c2:6a:4a:45:36:a4:21:
7a:16:64:2c:23:ce:79:5f:86:c2:98:1c:c8:37:f0:
24:92:db:3a:84:70:db:60:62:59:bc:71:7a:69:14:
5f:0d:6b:fd:73:db:21:66:95:e4:c7:9c:c6:bb:ab:
40:a3:89:e7:2e:96:a8:8d:46:1c:5f:e8:14:0c:02:
df:cd:d8:43:f0:2e:ab:70:01:3b:39:27:2c:a3:d3:
69:2f:b1:fc:ae:17:ca:0c:ce:d4:70:92:67:c9:31:
d7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A3:B6:81:D4:15:D5:0D:B8:7C:A4:1B:2E:12:50:3E:EA:E9:B8:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47223A04643811F1B57DEACCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.53.0/24
Signature Algorithm: sha256WithRSAEncryption
96:35:b0:36:ee:fd:6e:a4:17:e7:05:d4:bd:a3:e5:d9:5e:73:
47:0b:6c:b0:5b:50:0f:b8:58:b5:9e:3d:12:24:7d:35:bb:dd:
45:1b:cf:4f:33:c6:99:c5:25:e4:78:f1:5d:e1:30:5a:e7:3f:
2e:ce:bf:a2:e4:6e:ce:75:71:a2:b0:11:55:11:45:6e:c4:e2:
5b:ee:f0:c0:b6:77:af:c8:ff:ac:8f:5f:ee:37:cc:5e:a9:95:
2f:cb:cc:d1:7b:58:56:75:9e:d5:84:4d:81:ee:98:f5:5a:4e:
4f:ca:49:ba:1f:69:1f:80:37:4a:0b:52:21:27:a0:88:9b:6d:
d4:99:ed:a1:6d:ff:09:67:c0:7c:ee:86:91:85:3d:45:e5:d5:
09:50:92:5b:e2:27:b0:5f:74:b0:09:4b:b6:00:67:71:8e:26:
c6:85:4f:d2:bc:48:8b:78:93:33:4a:3b:9d:0c:1e:18:23:76:
7a:6d:e9:72:50:a9:b3:b3:65:33:f7:5c:cb:bc:f1:f5:63:10:
d1:88:99:f4:ee:4e:1f:7e:2f:93:91:d0:e7:e1:b6:ed:e6:0d:
9f:23:68:48:08:a2:03:a7:d5:ba:7e:1a:99:0a:1b:8c:96:ba:
ce:fd:b5:59:e2:c2:47:31:05:76:17:b7:84:5e:c0:47:67:30:
68:33:2d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:20:41 2026 by rpki-client