Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60BD4F5C60D311F1B2B35AB4CE1D38B0.roa
File: 60BD4F5C60D311F1B2B35AB4CE1D38B0.roa (raw, json)
Hash identifier: J3umxtSoVN6T6zOphcm/2oAQlwfDqYwTegHLtrbDaJw=
Subject key identifier: 39:43:79:7D:5B:A2:F9:6C:17:78:F6:0E:4D:DF:C5:13:A6:8A:F8:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D1C7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60BD4F5C60D311F1B2B35AB4CE1D38B0.roa
Signing time: Fri 05 Jun 2026 11:40:40 +0000
ROA not before: Fri 05 Jun 2026 11:40:36 +0000
ROA not after: Tue 05 Jun 2029 11:40:36 +0000
asID: 17561
IP address blocks: 154.195.242.0/24 maxlen: 24
154.195.243.0/24 maxlen: 24
154.195.244.0/24 maxlen: 24
154.195.245.0/24 maxlen: 24
154.195.246.0/24 maxlen: 24
154.195.247.0/24 maxlen: 24
154.195.248.0/24 maxlen: 24
154.195.249.0/24 maxlen: 24
154.195.250.0/24 maxlen: 24
154.195.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119239 (0x1d1c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 5 11:40:36 2026 GMT
Not After : Jun 5 11:40:36 2029 GMT
Subject: CN=6a22b5b8-1194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6e:fc:cc:94:f2:9c:b7:bf:e0:20:f9:b9:68:
f6:a0:a2:90:d9:5f:c4:67:ae:d9:03:ce:76:d1:f0:
f8:fa:1f:67:9e:d5:e3:ac:bf:aa:83:2e:a2:bb:5c:
43:15:59:af:d0:88:8c:5f:1c:21:54:65:12:6e:66:
3c:75:be:fc:9f:36:8d:40:ac:4f:f2:ef:18:7d:cd:
e3:c4:f5:b8:20:5a:62:38:6b:a1:86:df:bc:44:70:
dc:c7:14:d2:70:00:25:51:68:66:04:00:56:ba:64:
0b:69:2b:d5:57:f9:a3:6c:a5:22:61:71:37:1f:14:
01:e3:b9:e5:75:9b:8d:d4:8d:17:4c:90:dc:d9:22:
40:79:8e:d9:ef:b4:e9:d5:f6:90:af:b8:52:bc:ac:
2a:09:5c:d5:c7:be:21:30:9c:82:1d:e1:cd:bb:cd:
39:ef:4b:34:35:9f:55:2d:21:95:19:e4:5d:41:ab:
81:0b:d0:13:82:e4:38:89:79:1f:65:fc:14:6f:d4:
04:11:0c:91:ce:44:d6:a9:58:93:56:3b:7a:80:2f:
3d:e0:43:62:83:4b:b3:51:a6:70:7e:14:50:9e:cd:
70:e2:ac:9b:34:c3:f9:08:9d:ff:27:3b:db:be:8c:
18:9e:83:97:a2:77:76:5e:7f:b4:37:f7:b5:bb:01:
57:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:43:79:7D:5B:A2:F9:6C:17:78:F6:0E:4D:DF:C5:13:A6:8A:F8:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60BD4F5C60D311F1B2B35AB4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.242.0-154.195.251.255
Signature Algorithm: sha256WithRSAEncryption
40:d0:77:3a:df:2f:6d:ce:69:22:56:d2:74:61:33:47:75:35:
0a:c6:7f:a3:85:de:42:18:4f:63:29:ac:b1:59:3d:28:21:3c:
3e:b5:e9:0d:93:05:a1:c8:9b:bf:78:0d:11:a5:bc:3f:22:d2:
80:ac:14:c9:ae:3a:64:ce:bb:0f:b2:da:ca:fa:6e:bc:fd:22:
bd:85:ba:de:8b:01:3b:3e:ba:c0:7f:df:fa:67:21:06:12:8b:
71:59:81:df:d1:cc:d5:96:59:70:5a:c0:fa:ea:b6:f8:a1:39:
68:e3:48:df:e3:2a:e0:30:6f:9d:df:f6:b9:dd:ea:9e:83:c2:
12:05:47:00:dc:0c:f5:e7:39:18:36:f0:d3:69:b3:88:89:77:
61:8f:b8:56:17:13:37:ab:5f:8e:ac:01:f3:44:8d:a7:91:3e:
99:4a:ea:a5:83:e8:63:ce:57:6c:aa:56:c5:66:b1:aa:ab:2e:
5d:ab:d5:99:b0:26:f7:91:5b:f1:60:82:da:27:81:49:aa:da:
57:f2:e9:ee:19:29:3e:c1:9b:27:4a:6c:57:bb:67:0f:77:c9:
fb:0c:75:db:6c:e7:b7:91:9f:79:2f:5e:88:ca:e2:e7:da:7c:
b4:9f:a4:45:bd:28:85:9b:a6:2c:26:48:ff:df:40:fb:f9:82:
63:38:02:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:54:16 2026 by rpki-client